Post #1848087
2026-05-01 14:07 UTC
RE: https://mstdn.social/@hkrn/116499639295847975
This is a recurring theme now. Long story short: AI can find vulnerabilities quickly, so open source is now seen as a risk.
I think this is misguided.
Closed source is not a sound safety measure. One code leak and your vulnerability-finding AI is like a kid in a candy store: there will be vulnerabilities everywhere, because the code has been secret for so long.
Replies (2)
-
@pbloem@sigmoid.social 2026-05-01 14:07
- If your entire stack is closed source, a hacker can move from one part to the next to get to your source code. - It doesn't have to be Mossad. Any disgruntled employee can run an AI agent over the codebase and sell whatever they find to whoever pays. - Closed source doesn't mean secret source. A codebase is too big to keep secret. It's on every laptop that has it checked out. Snippets are floating around on slack. Shared screens go this way and that over zoom.
-
@axol_otleon@mastodon.social 2026-05-01 15:12
@pbloem The opposite is quite true. All the compute power can be used to scrutinize the source resolving issues.