When security goes right

Re:When security goes right by protomyth on Thursday December 25, 2014 @09:57PM (#8797852)

"First, they were using widely used open source code; if I hadn't been familiar with it, I wouldn't have noticed the problem. Bad guys will always dig deeper than unpaid good guys; so if you're going to benefit from having many eyeballs looking at what you're doing, it's much better if your bugs are shallow."

That is a really interesting reason to go with the popular open source solution. I guess I don't always follow that advice, but I wonder why I didn't think of it as a security decision.

[ Parent | on HN ]

Re:When security goes right by chris_wot on Thursday December 25, 2014 @10:10PM (#8797883)

That could be seen as a disadvantage also. I don't subscribe to that world view, but it's a legitimate concern.

[ Parent | on HN ]

Re:When security goes right by protomyth on Thursday December 25, 2014 @11:33PM (#8798059)

I'm not sure I do either. It does make quite a lot of sense, but then you get the "how do new things get adopted" problem. I would probably weigh much more heavily to it if I was a manager at a large company.

[ Parent | on HN ]