Re: ODT Today
Thomi Richards <[email protected]>
| Newsgroups | gmane.org.user-groups.linux.dunedin.general |
|---|---|
| Message-ID | <CAN2KdQ_6SRiS3VteRsg2kGBOtEAofNWVr46uoQDN8+Q1tueEfQ@mail.gmail.com> |
On 15 April 2014 22:54, yuri <[email protected]> wrote: > If a bounds checking bug like heartbleed occurred in a > closed/proprietary software product, it would probably still be > undiscovered. > ... except that heartbleed was not found by looking at the source code. The argument that open source software makes all bugs shallow is fine in practise, but unless you have a considerable amount of attention on your code it's rare that this actually works out (in my experience, anyway). OpenSSL is part of the core infrastructure to most Linux distributions - presumably it has lots of people involved in the project. I'd think that, if the argument held water, this bug would have been found already? Cheers, -- Thomi Richards _______________________________________________ DunLUG mailing list [email protected] http://lists.ethernal.org/listinfo/dunlug DunLUG Wiki - http://dunlug.kallisti.net.nz/