How much time do you think it'd take 500,000+ people to review 45MB of code? I'm not saying that over 500k people contribute to Mozilla, but Sourceforge alone has over 578,000 registered users. I'm certain a vast majority of the Mozilla codebase has been read (and understood) by a lot of people, some of which would be very vocal if they saw something "fishy" in the code. This is part of what bugtraq exists for -- to keep vendors aware that their products are being scrutinized on *many* different levels.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/2746/18563#18563