Linked by Thom Holwerda on Tue 14th Dec 2010 23:55 UTC, submitted by Oliver
Thread beginning with comment 453594
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.
I would not state that, I think the OpenBSD hackers are a lot more likely to find these kinds of things than any other open source project.
They really do take these things seriously. They look at correctness first (in the broadest sense of the word), most others are focused first on features.
Have you seen their code ?
The level of real code review within OpenBSD can never match that of bigger and better supported projects, which is why this went undetected for as long as it did.
Could be. Or it could be it went undetected because there's nothing there to detect - remember, it's still an unsubstantiated claim at this stage.




Member since:
2006-01-28
The level of real code review within OpenBSD can never match that of bigger and better supported projects, which is why this went undetected for as long as it did.
The more people and nations that have a lot riding on the security of of an operating system, the less likely that it can be tampered without detection.
One last thing, it is time that everyone moves to git and to signed commits as done in the linux kernel so that there is complete traceability of any and all changes.
If you think this might be an issue with open source code, just stop and really think what it probably is like in most closed source software and operating systems.