“代码托管”一词本月再起争议波澜。在封闭、开源还是托管之间,孰代表更安全,成为一个话题。但从目前来看,不必说托管的代码,就算开源的代码,只要自动升级功能存在,任何前期代码审计都会失去价值。升级才是互联网客户端安全性的潘多拉之盒。从这些意义上说,代码托管只是表达一种企业自信,很难作为安全的旁证。代码安全已经彻底沦为心理安全。 “Code hosting ” This month the controversy waves again. Between closed, open source or hosted, which represents more secure, become a topic. However, for now, it’s not necessary to talk about managed code, even open-source code, as long as the automatic upgrade feature exists and any early code audits lose value. Pandora’s Box is an upgrade to Internet Client Security. In these senses, code hosting is merely an expression of corporate self-confidence and hard as a proof of safety. Code security has completely reduced to psychological safety.