Is Open Source software really more secure?

2000-10-08 Thread Bud Rogers
I've always taken for granted the idea that open source was inherently more secure because it's open to peer review. Linus said Given enough eyes, all bugs are shallow. But has anyone ever done a serious study on the subject? I've seen plenty of emotional arguments and anecdotal evidence,

Re: Is Open Source software really more secure?

2000-10-08 Thread Julien Stern
On Sun, Oct 08, 2000 at 08:05:21AM -0500, Bud Rogers wrote: I've always taken for granted the idea that open source was inherently more secure because it's open to peer review. Linus said Given enough eyes, all bugs are shallow. But has anyone ever done a serious study on the subject?

Re: Is Open Source software really more secure?

2000-10-08 Thread Martin Christensen
Bud == Bud Rogers [EMAIL PROTECTED] writes: Bud I've always taken for granted the idea that open source was Bud inherently more secure because it's open to peer review. Linus Bud said Given enough eyes, all bugs are shallow. But has anyone Bud ever done a serious study on the subject? I've

Re: Is Open Source software really more secure?

2000-10-08 Thread Paul Lowe
When was the last time someone looked over the entire code base of mySQL to make sure it didn't have a trojan inside? I mean hey, theoretically, who goes over source code? Reading other programmer's source is both painful and difficult. It would not be hard for someone to release a oss package,

Re: Is Open Source software really more secure?

2000-10-08 Thread Daniel Jacobowitz
On Sun, Oct 08, 2000 at 02:34:16PM -0700, Paul Lowe wrote: When was the last time someone looked over the entire code base of mySQL to make sure it didn't have a trojan inside? I mean hey, theoretically, who goes over source code? Reading other programmer's source is both painful and

Re: Is Open Source software really more secure?

2000-10-08 Thread An Thi-Nguyen Le
On Sun, Oct 08, 2000 at 07:00:59PM -0400, Daniel Jacobowitz typed: } On Sun, Oct 08, 2000 at 02:34:16PM -0700, Paul Lowe wrote: } When was the last time someone looked over the entire code base of mySQL to } make sure it didn't have a trojan inside? I mean hey, theoretically, who } goes over