Security through obscurity is dead, and AI delivered the fatal blow

Discussion (4 Comments)Read Original on HackerNews

gtadesktop1•about 2 hours ago

Yes, that's 100% correct. Security by obscurity is really bad, especially because with open-source projects, hundreds of people can review the code, find bugs, and improve it. According to statistics, significantly more cyberattacks succeed on closed platforms where the code isn't accessible. For anyone who wants to see the statistics, here's a link to some data—or rather, a statement from a security economist: https://www.researchgate.net/publication/220891308_Security_...

merelydev•about 2 hours ago

That may be true for popular projects with allot of contributers, but for small projects, being closed source in the age of LLMs is not a bad idea especially for server side code, it can be more secure simply because the bots don't have access to your code and can't do analysis on it.

silverFork•about 1 hour ago

A trained AI I believe is capable of reverse compiling from machine language back to the source code. Access to the source code is not necessary for them I think.

merelydev•33 minutes ago

This is why I said especially for server side code which does not ship binaries.

Security through obscurity is dead, and AI delivered the fatal blow

⚡ Community Insights

Discussion (4 Comments)Read Original on HackerNews