Hacker News Reader

> There is something to be said for keeping architectural details hidden from would-be attackers to make their lives that much more difficult.

That's an empirical question. Do the security benefits of going Open Source outweigh the security costs? I don't know if there's a general answer.

View on HN

> Do the security benefits of going Open Source outweigh the security costs?

Only if there are enough eyeballs. In practice that's only true for bigger projects.

On the other hand, would hackers target something that small? It seems to me like the benefits and drawbacks of open source for security would kick in around the same scale.

Yes and no. Popularity or user base and number of engineers looking at the code are probably correlated, but there are definitely exceptions, like:

* small NPM packages depended on by popular ones

* video game mods and tools

* open source end user utilities

Reply on news.ycombinator.com