News for hackers. Stuff that matters.

A comment on On the spectrum of openness. Parent comment

Re:On the spectrum of openness by zomglings on Monday March 29, 2021 @06:26PM (#26629064)
You are right, instead of "every possible measure", it should be "every reasonable measure", where reasonable is defined by the cost-benefit analysis you mentioned.

It is hard to think of an instance where not open sourcing your server code has a high cost. It is easy to think of instances where open sourcing it has high cost - e.g. leaked deployment keys, mistakenly committed data - both of which I have seen happen in the wild working with healthcare data.

[ Parent | on HN ]
Re:On the spectrum of openness by xyzzy123 on Monday March 29, 2021 @06:40PM (#26629201)
You have a valid point and open-sourcing definitely creates known risks we could enumerate without too much trouble.

If open-source were part of your mission then you would have to treat those risks like all the other risks you assume by providing your service or doing business at all.

If not, then I agree that closed-sourcing looks more attractive in most cases.

[ Parent | on HN ]