News for hackers. Stuff that matters.

A comment on Twitter Says Parts of Its Source Code Were Leaked Online.

Re:Twitter Says Parts of Its Source Code Were Leaked Online by lapcat on Sunday March 26, 2023 @07:15PM (#35320763)
> One concern is that the code includes security vulnerabilities

I find this kind of funny, because open source is typically viewed as a benefit as far as security is concerned.

Given how few engineers remain at Twitter, they probably ought to open source their code and allow outsiders to find and fix security vulnerabilities, freeing up Twitter engineers to figure out how in the world to generate revenue for the service.

[ Parent | on HN ]
Re:Twitter Says Parts of Its Source Code Were Leaked Online by jonny_eh on Sunday March 26, 2023 @07:25PM (#35320831)
For client code sure. Not server code that protects user data that could be exploited with a 0-day exploit.
[ Parent | on HN ]
Re:Twitter Says Parts of Its Source Code Were Leaked Online by lapcat on Sunday March 26, 2023 @07:30PM (#35320871)
Linux is open source. PHP is open source. Mastodon is open source.
[ Parent | on HN ]
Re:Twitter Says Parts of Its Source Code Were Leaked Online by brianwawok on Sunday March 26, 2023 @08:08PM (#35321180)
Right. Now go work for a f500. Ask if you can post your source code on GitHub to improve security? There isn’t some magic thing that posting your source does, except in the short term make 0 days 10000x easier.
[ Parent | on HN ]
Re:Twitter Says Parts of Its Source Code Were Leaked Online by reaperducer on Monday March 27, 2023 @11:37AM (#35328077)
Right. Now go work for a f500. Ask if you can post your source code on GitHub to improve security? There isn’t some magic thing that posting your source does, except in the short term make 0 days 10000x easier.

Doesn't seem to stop Microsoft, IBM, Chase, and others.

[ Parent | on HN ]
Re:Twitter Says Parts of Its Source Code Were Leaked Online by jonny_eh on Monday March 27, 2023 @12:30PM (#35328736)
Please share the Windows or Xbox Live source code.
[ Parent | on HN ]
Re:Twitter Says Parts of Its Source Code Were Leaked Online by brianwawok on Monday March 27, 2023 @04:48PM (#35332331)
Or the Chase bank web code.

Or the Chase bank backend processing code.

Or the Chase bank fraud protection code.

[ Parent | on HN ]
Re:Twitter Says Parts of Its Source Code Were Leaked Online by wmf on Sunday March 26, 2023 @08:00PM (#35321108)
Code that's intentionally open source tends to have better security long-term. Proprietary code that was accidentally leaked is pretty bad for security in the short term.
[ Parent | on HN ]
Re:Twitter Says Parts of Its Source Code Were Leaked Online by sverhagen on Monday March 27, 2023 @12:36AM (#35322882)
> and allow outsiders to find and fix security vulnerabilities, freeing up Twitter engineers to figure out how

...to boost Musk's tweets.

[ Parent | on HN ]