While you are technically correct, that Open Source code

is only as secure as the people who review it, how often

do people find bugs BEFORE they compile their program? Most

bugs that are found in any program are AFTER they have

compiled the program and tested it out, not becuase someone

has sat down and looks at the code for potential holes and

errors before hand.

The advantage of Open Source is upon discovery of a security

hole, it can be plugged up by someone who is willing to

spend their personal time and effort or pay someone to do

so. A closed source program is dependent upon the code

owner to update their code, and if they are not able/willing

you will have to put up with it. As for a potential

backdoor being written for a computer program, at least if

you have the source you have the ability to check for

obivious loop holes, what are your choices for closed

source? Good will to all mankind, and $400, I don't think

so!

Steve K

Herkum (at) yahoo (dot) com [email concealed]

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/19/1380#1380