As usual, the question is more complex than "is open-source software more secure than proprietary software". It all comes done to the software itself, and the level of security auditing performed by either the white-hat hacker community or the vendor. A good example would be SSH, which has had some security vulnerabilities in _both_ the proprietary commercial implementation and the open source implementation.

Some vendors are glacial at fixing the vulnerabilities in their products, but then again there are open source packages nobody seems to care about patching anymore (is somebody still running WU-FTPD?).

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/297/9144#9144