, SecurityFocus 2000-04-17
Is Open Source really more secure than closed? Elias Levy says there's a little security in obscurity.
Expand all |
Post comment
Netscape developers are weenies!
2000-04-17
Anonymous (2 replies)
Anonymous (2 replies)
Bug *fixes*...?
2000-04-17
Anonymous (2 replies)
Anonymous (2 replies)
Re: bug fixes
2000-04-17
David Terrell <dbt (at) meat (dot) net [email concealed]> (2 replies)
David Terrell <dbt (at) meat (dot) net [email concealed]> (2 replies)
Examine the record...
2000-04-17
Anonymous (1 replies)
Anonymous (1 replies)
Comparing Apache and IIS is wrong
2000-04-17
Anonymous (2 replies)
Anonymous (2 replies)
You've made several critical mistakes in your comment.
2000-04-17
Bruce Perens <bruce (at) perens (dot) com [email concealed]> (3 replies)
Bruce Perens <bruce (at) perens (dot) com [email concealed]> (3 replies)
Sorry about the bad formatting.
2000-04-17
Bruce Perens <bruce (at) perens (dot) com [email concealed]>
Bruce Perens <bruce (at) perens (dot) com [email concealed]>
Re: Bruce Parens' Defense of Open Source
2000-04-17
David Terrell <dbt (at) meat (dot) net [email concealed]> (2 replies)
David Terrell <dbt (at) meat (dot) net [email concealed]> (2 replies)
How to respond to past reports of vulnerability
2000-04-17
Bruce Perens <bruce (at) perens (dot) com [email concealed]> (1 replies)
Bruce Perens <bruce (at) perens (dot) com [email concealed]> (1 replies)
Re: How to respond to past reports of vulnerability
2000-04-18
David Terrell <dbt (at) meat (dot) net [email concealed]> (1 replies)
David Terrell <dbt (at) meat (dot) net [email concealed]> (1 replies)
Thanks for the additional info but...
2000-04-17
Anonymous (1 replies)
Anonymous (1 replies)
Trust-worthyness and ability to spot bugs
2000-04-17
Bruce Perens <bruce (at) perens (dot) com [email concealed]>
Bruce Perens <bruce (at) perens (dot) com [email concealed]>
Skill is always at a premium
2000-04-17
Christopher Petrilli <petrilli (at) amber (dot) org [email concealed]> (1 replies)
Christopher Petrilli <petrilli (at) amber (dot) org [email concealed]> (1 replies)
Who found the sendmail bug?
2000-04-17
Brett <disfunct (at) radiusnet (dot) net [email concealed]> (1 replies)
Brett <disfunct (at) radiusnet (dot) net [email concealed]> (1 replies)
Morris didn't find the Sendmail bug
2000-04-20
Rick Smith <rick_smith (at) securecomputing (dot) com [email concealed]>
Rick Smith <rick_smith (at) securecomputing (dot) com [email concealed]>
to expand on what i said earlier.
2000-04-17
Brett <disfunct (at) radiusnet (dot) net [email concealed]>
Brett <disfunct (at) radiusnet (dot) net [email concealed]>
So what you're saying is that open source software is often as insecure as closed-source software is most of the time.
2000-04-18
Anonymous
Anonymous
Correct the facts and the conclusions stand strong
2000-04-21
Rick Smith <rick_smith (at) securecomputing (dot) com [email concealed]>
Rick Smith <rick_smith (at) securecomputing (dot) com [email concealed]>
Original Bugtraq mailing list description?
2000-04-21
Robert Quinn <rquinn (at) pobox (dot) com [email concealed]>
Robert Quinn <rquinn (at) pobox (dot) com [email concealed]>
The statements concerning Microsoft were made to put things in perspective...there is NO system where security is absolute, so in order to determine which ideology is more effective - we MUST compare systems for relative expediancy and frequency of fixes.
"If open source is such a panacea for security, WHY IS THIS STILL HAPPENING?"
Because no system can ever be devoid of holes...Open Source simply allows you to deal with them more effectively...
"Until proactive positive audits of software are conducted, systems are at risk every day."
So then start one!
The above is true for every system, but the idea is that holes are dealt with more effectively with Open Source. This is something that seems to be lacking in your argument. Open Source allows *YOU* and *ME* to go out and do this rather than waiting (begging) for the closed source vendors to do it for us.
Open Source still turns out more secure software even with your points factored in. I agree that you have a point, I just don't think that you're getting what Bruce is saying...
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/articles/19/1459#1459