News for hackers. Stuff that matters.

A comment on Team Fortress 2 source code has leaked. Parent comment

Re:Team Fortress 2 source code has leaked by onion2k on Thursday April 23, 2020 @03:02AM (#22953508)
The point that "Open source code is much more likely to already have been audited better." is actually true, but with the caveats that 99% of code isn't audited at all, and the 'better' claim is dubious. Security-focused devs audit OSS projects for practise, for bounties, for the glory of finding something in a popular codebase, and just to contribute their skills. It does happen.

In the closed source world, very few companies will pay for their source code to be audited, because it's expensive and time-consuming, and most only do it if they're required to.

[ Parent | on HN ]
Re:Team Fortress 2 source code has leaked by bionoid on Thursday April 23, 2020 @04:37AM (#22953939)
> very few companies will pay for their source code to be audited, because it's expensive and time-consuming, and most only do it if they're required to.

And even when they do, in my experience, they usually end up buying an expensive automated report that provides little or no real insight.

[ Parent | on HN ]
Re:Team Fortress 2 source code has leaked by baud147258 on Thursday April 23, 2020 @10:35AM (#22956461)
> they usually end up buying an expensive automated report that provides little or no real insight.

That's totally what we are in the process of doing (with even two separated tools for even more wasted time!)

[ Parent | on HN ]