News for hackers. Stuff that matters.

A comment on Team Fortress 2 source code has leaked. Parent comment

Re:Team Fortress 2 source code has leaked by colejohnson66 on Wednesday April 22, 2020 @04:56PM (#22950110)
> Open source code is much more likely to already have been audited better.

Worth keeping in mind this isn’t a silver bullet. OpenSSL with Heartbleed comes to mind.

[ Parent | on HN ]
Re:Team Fortress 2 source code has leaked by MaxBarraclough on Wednesday April 22, 2020 @05:11PM (#22950244)
Very true, but OpenSSL in particular is rather infamous. Unfortunate given that so much relies on it. https://news.ycombinator.com/item?id=7556407
[ Parent | on HN ]
Re:Team Fortress 2 source code has leaked by rmdashrfstar on Wednesday April 22, 2020 @07:05PM (#22951161)
This is why the assumption that “open source code is more likely to be closely audited for vulnerabilities” is not true (even for incredibly core/important projects with a wide scope) and is potentially dangerous to rely on.
[ Parent | on HN ]
Re:Team Fortress 2 source code has leaked by tal8d on Thursday April 23, 2020 @12:26AM (#22952798)
> This is why the assumption that “open source code is more likely to be closely audited for vulnerabilities” is not true...

That is a safe assumption, otherwise you'd have to believe that non-open source code is more closely audited - at greater expense, because businesses secretly prioritize security.

[ Parent | on HN ]
Re:Team Fortress 2 source code has leaked by ngcc_hk on Wednesday April 22, 2020 @07:27PM (#22951287)
It is not 100% and always. But practically. Especially unexpected leak.
[ Parent | on HN ]
Re:Team Fortress 2 source code has leaked by chupasaurus on Wednesday April 22, 2020 @09:35PM (#22951985)
Shellshock still outperforms any security issue of OpenSSL in terms of time in the wild.
[ Parent | on HN ]