Linked by Thom Holwerda on Tue 5th Feb 2008 22:32 UTC
Ubuntu, Kubuntu, Xubuntu Canonical, the company behind Ubuntu, will announce on Feb. 6 that it's making Parallels Workstation for Linux available to users through the Ubuntu Partner Repository. Parallels, formerly SWSoft, the company behind the open-source virtualization program OpenVZ, is best known for its Parallels virtualization software that works with Mac OS X. Parallels Workstation for Linux won't let you run Mac OS X, but it will enable you to run multiple versions of Windows or Linux with Ubuntu.
Thread beginning with comment 299710
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[4]: Who needs the middleman?
by camo on Thu 7th Feb 2008 04:57 UTC in reply to "RE[3]: Who needs the middleman?"
camo
Member since:
2007-10-08

Ergo, AFAIK there has never been a case of malware "hidden" in packages from open source repositories.


How would you know? There is no per-application packet filtering so any app could 'phone home' without you knowing. The maintainers would have to go though every line of code for every program and be able to understand the code as well. With the amount of app's available, this would be impossible.

From my own coding experience, its very difficult to understand your own code if you leave it for a few weeks, let alone grab someone else's code and understand whatall of it does.

Reply Parent Bookmark Score: 1

lemur2 Member since:
2007-02-17

How would you know? There is no per-application packet filtering so any app could 'phone home' without you knowing.


'Phone home' to where, exactly? To the fictional 'surreptitious malware inserter'? To the repository maintainers? To the distribution sponsors? To the application's developers/owners/sponsors? To the world-wide 1.5 million+ open-source developers who can inspect the code?

You think all these independent parties & individuals, who all have a stake in the quality of the code, are colluding to steal your e-mail address? Ludicrous.

Pfft.

The maintainers would have to go though every line of code for every program and be able to understand the code as well.


Not at all. The entire community (not just the maintainers) has access to the source code and the results of the maintainer's compilations.

With the amount of app's available, this would be impossible.


Not with 1.5 million developer's and tools such as source code management it isn't.

http://en.wikipedia.org/wiki/Concurrent_Versions_System

Every line of code, every change, every submission, every rejected submission over the entire history of the code is poured over. After all, the people who look at the submissions to open source projects have their own reputations to uphold, and they also fully intend to be using the code themselves.

Any free-market capiltalist will tell you, there is no motivator like self interest. It is in the self-interest of the open source community to produce & maintain quality code, written in the best interest of the end users. Without users, there is no project at all. Without quality, there will be no users.

It is called collaboration. Community development. Self-help. Meritocracy.

It works, too.

Edited 2008-02-07 05:53 UTC

Reply Parent Bookmark Score: 2

camo Member since:
2007-10-08

To the world-wide 1.5 million+ open-source developers who can inspect the code?


Can or do? Having faith is one thing, proof is another.

are colluding to steal your e-mail address? Ludicrous.


Now come on, when did i state that?

Without quality, there will be no users


As long as it is free you can.

Reply Parent Bookmark Score: 1