5 ms·
Isn’t it in the government’s best interests to have a non-adversarial relationship with a community? The government does have plenty of tools for writing corre
by ryacko 7y ago
Isn’t it in the government’s best interests to have a non-adversarial relationship with a community?
The government does have plenty of tools for writing correct code. OpenSSH was written with available tools, if available tools to write correct code weren’t used, there’d be very little burden for anyone to make an accusation.
>Currently, most Commercial Off-the-Shelf (COTS) software contains about one to five bugs per thousand lines of code.
>DARPA created the Crowd Sourced Formal Verification (CSFV) program to overcome these challenges.
(The above was a project that led to formal verifications that wasn’t open sourced)
- fmajid 7y agoThe government is not a monolithic entity, but a nexus of competing agendas, and not only does the right hand not know what the left hand is doing, but they may well be working at cross-purposes. This is true of any organization beyond a few dozen people.
- ryacko 7y agoYes, inaction is only evidence of nonfeasance when a person fails to perform an action aligned with their duties or stated interests. The government does have competing duties and stated interests, so there is no evidence of nonfeasance or malfeasance on the part of OpenBSD or on the part of the government in this case.
- sverige 7y agoOpenBSD is based in Canada. It ships with cryptography. It does not accept contributions to its cryptography code from Americans, specifically because of the ridiculous cryptography export ban the U.S. had in place in the 90s. https://www.openbsd.org/crypto.html https://www.openbsd.org/crypto.html Of course, if that sort of thing is what you're looking for, there's always SELinux. https://selinuxproject.org/page/Main_Page https://selinuxproject.org/page/Main_Page