Secure Coding mailing list archives

Re: Open source fertile ground for foul play?


From: Crispin Cowan <crispin () immunix com>
Date: Sun, 15 Feb 2004 08:06:17 +0000


Kenneth R. van Wyk wrote:

There is an interesting article over on DevX.com (see the full article at 
http://www.devx.com/opensource/Article/20111).  In the article, DevX 


I don't find that article interesting at all; just painfully ignorant.

Trojans have been inserted into both open source and closed source 
programs. Discovery time for the open source programs was on the order 
of days (TCP Wrappers, the Linux Kernel), while discovery time in the 
closed source applications (e.g. InterBase 
<http://news.com.com/2100-1001-250896.html?legacy=cnet>) was years. At 
that, it was only discovered six months after Borland opensourced the code.


Russel Jones is [ignorant of the facts]. Don't encourage him by granting 
this crap the dignity of a discussion.


Crispin

--
Crispin Cowan, Ph.D.  http://immunix.com/~crispin/
CTO, Immunix          http://immunix.com
Immunix 7.3           http://www.immunix.com/shop/






Current thread: