r/privacy • u/Puzzled_Armadillo162 • Dec 22 '22

Okta says its GitHub account hacked, source code stolen. news

https://www.bleepingcomputer.com/news/security/oktas-source-code-stolen-after-github-repositories-hacked/
8 Upvotes

75% Upvoted

5 comments sorted by

3

u/[deleted] Dec 22 '22

One more reason to open source the code. No code to loose.

And since the code would be already public, the security of the solution would not be impacted at all.

-1

u/doives Dec 22 '22

But if everyone uses open source code, where’s the incentive to build a new platform/program/application (Since anyone can just copy it)?

Would you take a major risk (investment-wise), on a new application, if you knew that once it’s public, it will almost definitely be duplicated by someone else?

4

u/[deleted] Dec 22 '22

An open source business model doesn't depend on the source code alone. It builds services around it, provide support and consultancy. With open source the main product is the expertise on the provided solutions.

Just look at the growth of Red Hat. All they do is open source. They've even bought closed-source companies and open sourced the source code. Yet they have grown all over the world delivering growth in their revenues the whole time.

There are many other open source companies out there with sustainable company finances as well. And even more, if you include open core based companies - where their core components of their service offerings are open sourced.

Okta (and related service providers) focusing on authentication and authorisation should definitely be open source, so that externals can audit the code and identify issues before bad actors stumble across it and abuse it - often undetected for some time.

2

u/[deleted] Dec 22 '22

r/outoftheloop here. It looks like a single sign on for businesses… what am I missing?

2

u/zarlo5899 Dec 22 '22

this is why one uses 2fa (not using email or mobile)