I think the security scares in Linux over the last few years, particularly with the xzutils incident, have shown that The Cathedral and the Bazaar has a signifi

I think the security scares in Linux over the last few years, particularly with the xzutils incident, have shown that The Cathedral and the Bazaar has a significant amount of wishful thinking. It turns out that most open source projects don’t have any more eyeballs than those paid or volunteering to work on the code, in which case, the gap between open and proprietary isn’t very large at all. Because most open source maintainers aren’t paid, you could even argue there are less good eyeballs than proprietary software. I’m with Nikolai Bezroukov; who called it a fundamentally broken document decades ago; with many of its assertions based on a pseudo-religious faith. https://firstmonday.org/ojs/index.php/fm/article/view/708/618 https://firstmonday.org/ojs/index.php/fm/article/view/708/61...