We are obviously looking at things like Mythos, which is more sophisticated at finding vulnerabilities. In the next week or so, we will be changing our tack on coding the open and making our code public until we're on top of that risk.
Most of our repos, unless they're essential, will be removed for security reasons.
Security by obscurity because security vulnerabilities don't exist if you can't see them
Even if this was the right move (it isn’t), telling the world they’re about to do it gives people the perfect opportunity to fork/clone the repos and start analysing the code.
3 Comments
qaz@lemmy.world · 27 pts · 101d
Security by obscurity because security vulnerabilities don't exist if you can't see them
jimmy90@lemmy.world · 2 pts · 101d
draconian but not "war"
baity mc'baitface
jonc211@programming.dev · 4 pts · 101d
Even if this was the right move (it isn’t), telling the world they’re about to do it gives people the perfect opportunity to fork/clone the repos and start analysing the code.