Secure Coding mailing list archives

Re: White paper: "Many Eyes" - No Assurance Against Many Spies


From: dtalk-ml () prairienet org
Date: Thu, 29 Apr 2004 21:23:33 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Kenneth R. van Wyk wrote:

FYI, there's a white paper out by Dan O'Dowd of Green Hills Software (see 
http://www.ghs.com/linux/manyeyes.html) that "It is trivial to infiltrate the 
loose association of Linux organizations which have developers all over the 
world, especially when these organizations don't even try to prevent 
infiltration, they accept code from anyone."

And he's selling us the solution, how convenient. :\  Hmm.

Leaving aside the couple of obvious problems with this essay's
arguments, I'll note that some of the author's points are valid.  It
puzzles me that many otherwise security-conscious people have no qualms
downloading and installing whatever they fancy with little thought to
the source or the author's motives.  It is indeed a pretty loose network
which supports much of what we know as GNU/Linux.  That is less true of
FreeBSD and even less of OpenBSD.

- -d

- -- 
David Talkington
[EMAIL PROTECTED]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAkUoT5FKhdwBLj4sRAluEAJ4oaUqtTrKPsOpaTiRJ9vycDhlwMACgo6D3
M/i6mUw7n6wm2c64aBIaPwk=
=NAeE
-----END PGP SIGNATURE-----






Current thread: