oss-sec mailing list archives

Re: code reviews (was: ARP handler Inspection tool released)


From: Andrea Barisani <lcars () ocert org>
Date: Mon, 2 Jun 2008 14:17:59 +0000

On Mon, Jun 02, 2008 at 06:10:53PM +0400, Solar Designer wrote:

In case we do, I would not mind having such community code reviews occur
on this list.  I think they would be on-topic.  In fact, Sebastian
Krahmer even created a section on the wiki for the code reviews - but
neither he nor anyone else contributed to it.  Sebastian?  Anyone else?
Please defend yourselves. ;-)


I personally think that open code reviews are a very good idea, and it's
something OSS projects would greatly benefit from.

That's why oCERT was also started for helping in security audits and code
review requests (we are already doing some). But if requestor doesn't mind a
public scrutiny oss-security sure feels like the good place for it.

So I wouldn't mind and I'd actually see this as a benefit for this list.

Cheers

-- 
Andrea Barisani |                Founder & Project Coordinator
          oCERT | Open Source Computer Emergency Response Team

<lcars () ocert org>                         http://www.ocert.org
 0x864C9B9E 0A76 074A 02CD E989 CE7F AC3F DA47 578E 864C 9B9E
        "Pluralitas non est ponenda sine necessitate"


Current thread: