An author of the open source Mailman program
explains why open source is not as secure as you might think — using security holes in his own code as an example.