News for hackers. Stuff that matters.

A comment on On the spectrum of openness. Parent comment

Re:On the spectrum of openness by MaxBarraclough on Monday March 29, 2021 @01:18PM (#26625113)
> There is something to be said for keeping architectural details hidden from would-be attackers to make their lives that much more difficult.

That's an empirical question. Do the security benefits of going Open Source outweigh the security costs? I don't know if there's a general answer.

[ Parent | on HN ]
Re:On the spectrum of openness by munchbunny on Monday March 29, 2021 @03:20PM (#26626934)
> Do the security benefits of going Open Source outweigh the security costs?

Only if there are enough eyeballs. In practice that's only true for bigger projects.

[ Parent | on HN ]
Re:On the spectrum of openness by gloriousternary on Monday March 29, 2021 @05:05PM (#26628166)
On the other hand, would hackers target something that small? It seems to me like the benefits and drawbacks of open source for security would kick in around the same scale.
[ Parent | on HN ]
Re:On the spectrum of openness by munchbunny on Monday March 29, 2021 @05:09PM (#26628203)
Yes and no. Popularity or user base and number of engineers looking at the code are probably correlated, but there are definitely exceptions, like:

* small NPM packages depended on by popular ones

* video game mods and tools

* open source end user utilities

[ Parent | on HN ]