Re:GitHub’s database of security advisories is now open source
by freedomben on Saturday February 26, 2022 @06:31PM
(#30483214)
This is a debate that raged for decades in the security community. Most people now agree that more info helps the white-hats more than it does the black-hats. It does make it easier for black-hats and gray-hats to gather info, and it does help script kiddies who write shotgun scripts, but when the info is private what often happens is the vulns get found and passed around the bad guy communities, while the good guys are unaware and caught off guard when they get hit. It also makes it drastically harder for good guys to figure out how the attacker got in when the info isn't public.
[ Parent
| on HN ]
There are no comments on this comment yet.