4 ms·

Of course that's true. I'm just not convinced that OpenBSD : Linux :: Armored truck : Pinto. In fact, the point of a good portion of the second study [1], p.17

• cbd1984 12y ago
  I never claimed Linux was a Pinto. My point is, some things are just built well, and even if they're not used very often we can expect a certain level of quality, as opposed to saying that the only reason we don't see them stolen is because so few people drive them. Especially if they're used all the damn time, just not in places people see a lot. So some bugs will be found in OpenBSD. That's a given. However, it isn't like OpenBSD is never used, or that the people who made it are bad programmers.
  • andrewstuart2 12y ago
    Yeah, I agree 100% :-) I guess what I'm saying is that it would make more sense to me if OpenBSD and Linux were both on the list. As you also mentioned, flaws existing in programs is inevitable, so unless the defect rate, normalized for usage, is significantly higher in one case, it's not good evidence for the quality or security of one over another.
    • yellowapple 12y ago
      In OpenBSD's case, the defect rate's pretty low, even when normalized for usage. It's had, what, 2 significant security bugs (that actually compromised the security of the base installation) over the last 2 decades or so? Pretty damn good if I may say so myself.