People
Newsmakers and Insiders
Wednesday, March 20, 2002
Newsmakers and Insiders
Open Source Doesn't Mean Secure
Recent revelations of security flaws in open source code have put a bit of a ding in the community's reputation for impregnable code. While supporters like to argue that a world full of developers checking out code will lead to more secure code, it's not always turning out that way. Why? No surprise really - it turns out that old boring code is, well, old boring code. And it doesn't really matter how many eyes can look at it if no one actually does.
Recent revelations of security flaws in open source code have put a bit of a ding in the community's reputation for impregnable code. While supporters like to argue that a world full of developers checking out code will lead to more secure code, it's not always turning out that way. Why? No surprise really - it turns out that old boring code is, well, old boring code. And it doesn't really matter how many eyes can look at it if no one actually does.
Too much trust in open source?. Some fear that Linux and open-source developers have become complacent in the commonly held belief that open-source programs are more secure. They're taking note of recent findings. [ZDNet Tech News]