Open Source Is Dead.  🔗 **Source:** [Open Source Is Dead.](https://twitter.com/pumfleet/status/2044424163801129283/?rw_tt_thread=True) > [!note]+ Document Notes > tags: [open-source, security, AI] > author: Bailey Pumfleet > source: Twitter > reference: [https://twitter.com/pumfleet/status/2044424163801129283/?rw_tt_thread=True] > date created: 2026-04-15 10:00 > > # 🏷️ Title: Open source is dead. > <!-- deep-read:sections start --> ## 🧭 Table of Contents - [📝 Summary](#-summary) - [📖 Main Content](#- <!-- deep-read:sections end --> 📄 **Full text:** ![[Full Document Contents/Tweets/Open Source Is Dead..md|Open Source Is Dead. by Bailey Pumfleet]] ## Highlights - Today, that’s all changed. You can now simply just point AI at an open source codebase and have it scour the codebase to find vulnerabilities in the code. And it will undoubtedly find some. ([View Highlight](https://read.readwise.io/read/01kp9js1zd2411ge43fkmn6mh9)) - source exposes the inner workings of the application to AI, and therefore makes it considerably easier to reverse engineer the functionality and find a vulnerability. Hex Security, one of the leading AI vulnerability companies out of YC, said that open source applications are 5-10x easier to exploit than closed source. ([View Highlight](https://read.readwise.io/read/01kp9jqrzanzqdkt8me1z32ne0)) - And so I hate to say it, but I think that open source is ultimately dead. There’s no way that it’s worth risking your customer data just so people can read your source code. Open source applications are going to get ravaged by attacks in the coming months, and lots of sensitive data is going to be leaked. I don’t see how most open source projects can operate anymore. If even BSD and Firefox are getting hacked by Mythos, what chance does anyone else have? ([View Highlight](https://read.readwise.io/read/01kp8xts55r3y3xkh836sjq63w)) - Tags: 👻 ai highlighted