3 ms·
There can never be a problem with OpenSSL or Log4j, they’re open source. Too many eyes on it to be a problem. Absolutes, cut it out.
by SV_BubbleTime 4y ago
There can never be a problem with OpenSSL or Log4j, they’re open source. Too many eyes on it to be a problem. Absolutes, cut it out.
- DonHopkins 4y agoTo quote Theo De Raadt: “My favorite part of the “many eyes” argument is how few bugs were found by the two eyes of Eric ([S Raymond] the originator of the statement). All the many eyes are apparently attached to a lot of hands that type lots of words about many eyes, and never actually audit code.”