October 2, 2002
Open Source a bad security bet?
Anonymous Reader writes: "eWEEK dings open source's security claims, citing flaws in the OpenSSL toolkit that opened the door to the Slapper worm. 'Linux is awful. There are no design specs. Everybody and their half-brother who knows some [C code] writes code for it, and they all have the same lack of knowledge,' Gene Spafford, professor of computer science at Purdue University, in West Lafayette, Ind., and an expert on network security, told eWEEK. 'It's who writes it and whether it's planned [that makes a difference], not who looks at the code.'"
- Open Source