Post #1893697
2026-05-01 14:07 UTC
- If your entire stack is closed source, a hacker can move from one part to the next to get to your source code.
- It doesn't have to be Mossad. Any disgruntled employee can run an AI agent over the codebase and sell whatever they find to whoever pays.
- Closed source doesn't mean secret source. A codebase is too big to keep secret. It's on every laptop that has it checked out. Snippets are floating around on slack. Shared screens go this way and that over zoom.
Replies (1)
-
@pbloem@sigmoid.social 2026-05-01 14:12
It's classic security through obscurity. The trick to security is not to keep as many things secret as possible. That way madness lies: you lose track of which secrets are key, and you can't keep an eye on everything. The trick is to keep as few things secret as possible and to guard those carefully. Then make everything else as open as possible. If your system is still safe in that case, then you're secure.