Re: A more fundamental issue..

Ranjeet Shetye <[email protected]>
Newsgroups gmane.comp.security.programming
Organization Zultys Technologies Inc.
Message-ID <[email protected]>
On Thu, 2003-11-13 at 12:48, Jeroen van Drie wrote:
> Barry I agree with what you wrote.
> 
> I tried to be ironic in my post with this paragraph about the NSA. Did the NSA 
> think they could get away with releasing such great secure code under the GPL 
> without getting fallout for it? "What were they thinking?" I think they knew 
> what they were doing, consciously chose the GPL over the BSD license; a bit 
> of a political test balloon as well.
> 
> To me, freedom and democracy are higher goods than "free enterprise and fair 
> competition"; China proves it; they have quite a lot of free enterprise and 
> fair competition without providing their own citizens with freedom and  
> democracy.
> 
> But a government that develops GPL code and hands it out to redhat, suse, et 
> all .. isn't that government in competition with Microsoft? How could MS ever 
> integrate such code?
> 
> My belief is that when a government (co)develops software and does not release 
> the source for its citizens benefit the only excuse is national security. 
> Embedded in government developed source code is a democratic process and 
> hence it is important citizens can both review and freely use that process. 
> 
> In fact as operating systems and libraries become part of the social 
> infrastructure I think it is vital for organisations like the NSA to get 
> involved doing their bit to secure that infrastructure from people who would 
> take advantage of it. Fortunately they're still hosting 
> http://www.nsa.gov/selinux/
> 
> 
> 
> On Thursday 13 November 2003 20:03, you wrote:
> > Jeroen van Drie wrote:
> > >And really what was the NSA thinking, using US taxpayer money to develop
> > > GPL software? While the principle of democratic governments developing
> > > GPL software is sound democratically, it is very much opposed to the
> > > ideas of free enterprise and fair competition.
> >
> > I was entirely with you up until this point...
> >
> > Although I disagree that it is entirely up to the business or end user
> > to choose.  Home users don't have a choice because they aren't provided
> > with a readily available one and most businesses rely on software
> > provided by other businesses, which usually runs on windows.  It's not
> > as simple as just "install GNU/Linux and have no more MS-related
> > vulnerabilities."  There really is a vendor lock-in going on here, but I
> > agree with the general premise of your point.
> >
> > However, I'm sick and tired of hearing this bunk about how the GNU GPL
> > is opposed to the ideas of *free* enterprise and *fair* competition.  It
> > is not the GNU GPL that is opposed to those ideas, it is proprietary
> > software that is directly opposed to them.
> >
> > If the argument you're making is that the government should have placed
> > selinux under a BSD-style license because proprietary companies can take
> > "fairly" and "freely" from the fruits of public resources - I
> > respectfully and forcefully disagree.  The very purpose of proprietizing
> > software is to generate a vendor lock-in.  There is no other purpose.
> > To argue that the right to allow a vendor lock-in is synonymous with
> > fair competition and free trade is like arguing that true freedom is
> > having the ability to take away the freedom of others.
> >
> > That is not freedom, that is chaos.  And chaos begets tyranny and hence
> > our current situation in the software industry.
> >
> > All you're doing by propagating ill-conceived notions of that sort is
> > setting the stage for making things worse over time.  Please do not
> > mistake chaos for freedom - there is a SIGNIFICANT difference.
> >
> >                 -Barry

NSA does not exist to help/hinder microsoft or redhat or any other
corporation. NSA exists to serve the American citizen. Microsoft and
redhat are corporate entities, and corporations do NOT have a "natural"
right to existance.

Given NSA's knowledge and expertise, would the NSA be failing in its
moral duty (if not legal) if it were to let American citizens remain
open to cyber attacks ? Yes!!!

Therefore the NSA is morally in the right. The NSA doesn't care about
secondary effects like free market and competition. Those are just some
of the tools to achieve the primary aim of democracy and protection of
the American citizen.

As for the licence, pretty soon Linux is going to be a usable desktop OS
for Joe Schmoe, while FreeBSD is still languishing as a server OS.
(please - I've worked on both sets of kernels so I dont want any BSD
"guru" telling me what is what). I installed NetBSD 1.6.1 on my laptop
and it would not even recognize my 3-year old NetGear Ethernet 10/100
PCMCIA card. I had to add that support to the kernel. Sloppy is the word
that comes to mind when it comes to adding support for new hardware on
BSDs. And snooty is the word that comes to mind when trying to interact
with BSD developers. And obviously Linux is light years ahead in terms
of peripherals support. So if NSA has to choose an OS, then it doesn't
have much of a choice, does it ? And if has to choose Linux, then the
licence has to be GPL!

I am not an NSA-fan - Echelon is a horrible travesty of the
Constitution, but I dont see what else the NSA could have done to reach
their goal in the shortest amount of time possible.
1. write an OS from scratch ? - waste of tax payer money
2. choose BSD - no support for the various devices supported by Windows
- hence BSD is not even a contender.
3. choose Linux - not a bad choice - 2.6 is the first UNIX-class Linux -
2.4 was close but not really.
4. choose Microsoft - hmmmm - not a good starting point.
5. choose OS X - double hmmm - what's the point ? (i know its BSD, i am
talking of OS X as a security solution platform as a whole).

-- 

Ranjeet Shetye
Senior Software Engineer
Zultys Technologies
Ranjeet dot Shetye2 at Zultys dot com
http://www.zultys.com/
 
The views, opinions, and judgements expressed in this message are solely
those of the author. The message contents have not been reviewed or
approved by Zultys.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.