I don't think that this particular incident should be what we use as the opportunity to debate open source vs. closed source software. This type of incident could happen to any software developer.

Example:

If someone hacked Windows Update, and backdoored a few of the security updates - it would be be pretty costly to many. The issue is better security practices.

Things to consider might be:

Digital Signatures

Write-once media

Better OS Hardening, better Router/Firewall/IDS rules & signatures etc....

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/462/12962#12962