2 ms·

The quote is hyperbolic for the "all", and should probably use the word "shallower", but otherwise I don't see anything wrong with it. "much more people talk a

by Crito 13y ago

The quote is hyperbolic for the "all", and should probably use the word "shallower", but otherwise I don't see anything wrong with it. "much more people talk about many eyes than actually audit existing code" is true of free software, but is also true of just about everything. More people think "I feel comfortable crossing this bridge because plenty of engineers have looked at it" than there are engineers actually looking at bridges. I haven't read the quote in it's original context for several years, but I don't remember it conflating software users with software developers.

Perseids 13y ago
The difference is that engineers actually know how to build safe bridges. I feel (and am actually) safe living in a house designed by a single competent architect, but I am not secure using a TLS implementation written by a single competent programmer. The only way we have found to end up with reasonable secure code is to have it reviewed by a lot of competent people.