alt Hacker NewsReducing attack surface is a lesson for everyone. Newcomers are impressed by massive piles of code.
Seasoned developers are unimpressed, or even disgusted, by the same massive piles of code.
Reducing attack surface is a lesson for everyone. Newcomers are impressed by massive piles of code.
Seasoned developers are unimpressed, or even disgusted, by the same massive piles of code.
i don't think LoC is the metric. sometimes fewer lines of code results in a larger attack surface through type coercion / widening, poor abstractions, hiding or stuffing behavior (modules that do everything), etc. to me, making code easy to understand, test, fuzz, and verify is more important. sometimes that requires more lines of code.