Re: ODT Today
Paul Campbell <[email protected]>
| Newsgroups | gmane.org.user-groups.linux.dunedin.general |
|---|---|
| Message-ID | <3217535.tN0q1SbLGD@rata> |
On Wed, 16 Apr 2014 10:13:05 Thomi Richards wrote: > The argument that open source software makes all bugs shallow is fine in > practise, but unless you have a considerable amount of attention on your > code it's rare that this actually works out (in my experience, anyway). > > OpenSSL is part of the core infrastructure to most Linux distributions - > presumably it has lots of people involved in the project. I'd think that, > if the argument held water, this bug would have been found already? one of the points made at foo is that we're continually told that mere mortals shouldn't do crypto - and that's meant that not enough people have looked critically and a core piece of infrastructure. Good programmers may not understand the core math involved, but we can still look at the C and find the same sorts of bugs we make when we write it Paul _______________________________________________ DunLUG mailing list [email protected] http://lists.ethernal.org/listinfo/dunlug DunLUG Wiki - http://dunlug.kallisti.net.nz/