4 ms·

Yes, and that's how this bug was found.

• awj 13y ago
  So "many eyes" means "paid researches at Google and a security firm"? Also, this bug was in place for what, two years? If the many eyes hypothesis has a two year lead time to find bugs this severe, we can stop talking about it because it's fucking worthless.
  • charonn0 13y ago
    > two years If that's how we're measuring things, then closed source isn't going to win either, e.g. [1]. [1]: http://www.computerworld.com/s/article/9146820/Microsoft_confirms_17_year_old_Windows_bug http://www.computerworld.com/s/article/9146820/Microsoft_con...
    • mannykannot 13y ago
      A false dichotomy. Writing reliable, complex-in-function software is hard for everyone.