If the general state of security in the tech industry is to improve, it will come through open source collaborative projects, where software is finished and shi

If the general state of security in the tech industry is to improve, it will come through open source collaborative projects, where software is finished and shippable when engineers are satisfied. It will not come through commercial software, where profit pressures ensure that there will always be business decision makers who innovate by spending ever less on security until finally it blows up in their face. The security of proprietary software will improve on average only insofar as it is constrained to improve by open source dependencies.