[Torwaldson]

Cyber security experts, former U.S. intelligence officials and former ArcSight employees said the practice could help Moscow discover weaknesses in the software, potentially helping attackers to blind the U.S. military to a cyber attack.
“There are security aspects of those disclosures (and) they are problematic,” Joyce, a former hacker at the U.S. National Security Agency, said at a Washington Post Cybersecurity Summit when asked specifically about the story.
He added that he was more concerned about the intellectual property risks associated with the reviews, however:
https://www.reuters.com/article/us-usa-cyber-russia/foreign-government-code-reviews-problematic-white-house-cyber-official-idUSKCN1C829R

[Ecks]

As I commonly say in the real world "You can't fix stupid".

[mothered]

Goodness me, allowing a source code on a scale of that nature to be viewed by the "Russians" (not matter who they represent), Is a cause for concern.

Wouldn't this also aid In exploitation?

former ArcSight employees said the practice could help Moscow discover weaknesses in the software

All It takes Is a disgruntled Russian employee and there's no telling what happens next.

[eghmaa]

All It takes Is a disgruntled Russian employee and there's no telling what happens next.