Earlier quoted context omitted.
Making something closed source does not make your product more secure, it only makes it harder to look at. Determined people will still try to understand how your software works in order to accomplish their goals.
Security through obscurity is a valid and effective tactic -- it's simply ineffective on it's own .
Reddit 1.0 source code
11–20 of 117 posts
Re: Reddit 1.0 source code
#12Earlier quoted context omitted.
Maybe having it be open source would represent a security risk? https://github.com/reddit-archive/reddit1.0/blob/master/data...
Making something closed source does not make your product more secure, it only makes it harder to look at. Determined people will still try to understand how your software works in order to accomplish their goals.
Just something to keep in mind.
Re: Reddit 1.0 source code
#13Re: Reddit 1.0 source code
#14Earlier quoted context omitted.
Maybe having it be open source would represent a security risk? https://github.com/reddit-archive/reddit1.0/blob/master/data...
They could certainly upload a version of that file with dummy variables (unless that's what this is).
Re: Reddit 1.0 source code
#15Re: Reddit 1.0 source code
#16Earlier quoted context omitted.
Security through obscurity is a valid and effective tactic -- it's simply ineffective on it's own .
To reinforce your point, see all pre-modern crypto techniques. It cannot be argued that they worked, and they were all certainly security through obscurity.
Re: Reddit 1.0 source code
#17It's unfortunate that Reddit silently went closed-source before being forced to admit it. Certainly a betrayal of trust with their long-standing userbase.
The majority of their code is still open-source. https://github.com/reddit
It's either their secret super sauce or it's poison.
And I can tell you for free that whatever Reddit has built technologically, does not contain any secret super sauce whatsoever.
Re: Reddit 1.0 source code
#18Earlier quoted context omitted.
Security through obscurity is a valid and effective tactic -- it's simply ineffective on it's own .
To reinforce your point, see all pre-modern crypto techniques. It cannot be argued that they worked, and they were all certainly security through obscurity.
The trivial counterexample is that all modern crypto techniques rely on keeping a key, or part of a key, secret. That's security through obscurity, and you've just stated bluntly that obscurity never works under any circumstances, right?
What you want to do instead is talk about tradeoffs. Talk about how much information you need to keep secret in exchange for a given window of effectiveness, and state a preference for systems which provide longer windows of effectiveness while requiring less information (such as only a key, or part of a key, instead of a key and an algorithm) to be kept secret.
Also, take care with your argument about "pre-modern crypto techniques". Some of them remained effective for centuries after being invented, which is a far cry from your "cannot be argued that they worked", and not necessarily a favorable comparison with many modern techniques, which are lucky if they make it a couple decades before being broken.
(also, of course, all cryptographic systems eventually get broken, which is why every so often we switch to new algorithms, longer keys, etc., and you seem to be arguing that any system which eventually gets broken is a system which never worked, and that's also wrong)
Re: Reddit 1.0 source code
#19Is Reddit 2.0 the one in Python? Was slightly confused and expecting Python when opening up the github repo.
Re: Reddit 1.0 source code
#20Is Reddit 2.0 the one in Python? Was slightly confused and expecting Python when opening up the github repo.
Reddit was lisp, then python, then python, then React (and some other stuff).