this post was submitted on 26 Jul 2024
533 points (98.9% liked)
Technology
57918 readers
7061 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I mean wouldn't everything be a security concern in relation to government agencies?
I work for the UK government. Everything my organisation does is licensed in either MIT or OGL (https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/)
Developing code in the open really helps ensure you nail down your secure coding practices.
In my opinion especially security code needs to be open source…
Nothing like bored programmers on the internet to nitpick the governments code.
If you don't release your source code due to security concerns, you just announced to the world that your software is vulnerable and you're relying on security through obscurity.
Meh, not really. The risk with making it publicly available is that a nation state or leet hacker types can comb over it and find exploits or know what libraries/etc you are using so when a zero day pops up they can target you directly. Whereas without direct access to th source code they'd have to do their own enumeration and surveillance.
There is some security through obscurity.
Also, just want to point out: being open source doesn't mean it's more or less secure. There is plenty of vulnerable open source code out their.
never let them see you cry
I feel like a lot of the front ends can be open sourced.