4 ms·
It's hardly a problem of open-source, it's a problem of open-incentives. While nobody disagrees the project is critical for everyone, are you (or I) willing to
by return0 13y ago
It's hardly a problem of open-source, it's a problem of open-incentives. While nobody disagrees the project is critical for everyone, are you (or I) willing to make it a priority? It's a essentially a "who will build the roads" issue.
- jordigh 13y agoYeah, free software isn't a development model and it doesn't mean it's made by amateurs. As another prominent free project with a much better track record for security and stability, consider OpenSSH, the crown jewel of the OpenBSD crowd, a free software distribution itself popularly renowned for its security. Theo's criticism here of OpenSSL carries a lot of weight.
- gpvos 13y agoNote that despite being the crown jewel, OpenSSH's security page lists about two dozen vulnerabilities it has had at some time in the past.
- jordigh 13y agoOf course, they are disclosing their vulneratiblities, they disclose everything, and they have an established audit process. Quite the leaders in security in the free software world: http://www.openbsd.org/security.html http://www.openbsd.org/security.html