Re: Gauntlet: source code anyone ?

[kees () echelon nl (Kees Hendrikse)]

Darren wrote:

> Also, having been part of a support organisation, we have no records of
> anyone ever asking us for product source code. In as much as I've dealt with
> end-users, I've never even been asked about the 'security' of the firewall.
> People assume that since it's a firewall, it's immune to attack entirely.

The number of people that ask for source code is not very relevant to the
question if it should be available. Say you have 10000 users of a product,
of which 9990 assume it is working flawlessly and never ask for code. The
other 10 have a clue and want to review (parts of) the code. Do you refuse
because 'nobody' asks? I wouldn't. 

There is some ground between 'full internet release' and no release at all...

-- 
Kees Hendrikse                               | email:     kees () echelon nl
                                             | web:        www.echelon.nl
ECHELON consultancy and software development | phone: +31 (0)53 48 36 585
PO Box 545, 7500AM Enschede, The Netherlands | fax:   +31 (0)53 43 36 222