News for hackers. Stuff that matters.

A comment on "Secret" Agent Exposes Azure Customers to Unauthorized Code Execution. Parent comment

Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by belltaco on Tuesday September 14, 2021 @11:13PM (#28534820)
There are also people who think open source is the holy grail of security because "given enough eyeballs, all bugs are shallow". And is used as an argument. So it cuts both ways.
[ Parent | on HN ]
Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by tcoff91 on Wednesday September 15, 2021 @12:20AM (#28535250)
The thing about dependencies is most people don't actually read the source. But at least you have the option.
[ Parent | on HN ]
Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by prepend on Wednesday September 15, 2021 @06:14AM (#28537321)
"given enough eyeballs, all bugs are shallow" Is certainly true, but that doesn’t make OSS the holy grail.

In fact, I’ve never met anyone who thinks that. And “all bugs are shallow” doesn’t mean there are no bugs, it just means it’s easier to find bugs.

[ Parent | on HN ]