, 2005-08-18
According to the Apple Web site, Security Update 2005-007 was released to the public on August 12, 2005. And, as with all of their recent security updates, it is available to all Apple customers free of charge. I'm sure none of you reading this article will argue with me about that being a good thing.
Expand all |
Post comment
It's only a matter of time...
2005-08-18
Anonymous (2 replies)
Anonymous (2 replies)
I don't think this stands up to scrutiny, since only one bad guy needs to discover a security flaw in a closed source product in order to make an exploit available. So security through obscurity is like a locked door to a room full of loot just sitting waiting to be taken - only one person has to break the lock, and that leaves the goodies exposed to everyone else.
The shared development model of open source (or indeed free software) is akin to the room not being enclosed at all, but free for people to walk around, but the goodies all being bolted and welded to the floor. Not only does that mean that one bad guy managing to prise one bit of kit doesn't make any of the rest of it less secure, it also means that everyone can see what's going on the room all the time, and collectively can ensure that all remains intact.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/columns/348/32254#32254