full-disclosure - OSS means slower patches

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Mon Sep 19 13:03:24 2005
From: ivanhec at gmail.com (Ivan .)
Subject: OSS means slower patches

An interesting perspective?

http://australianit.news.com.au/articles/0,7204,16650762%5E15306%5E%5Enbv%5E,00.html

Symantec Australia managing director David Sykes said the increasing
popularity of open source software, such as the Mozilla Foundation's
Firefox browser, could be part of the reason for the increase in the
gap between vulnerability and patch, with the open source development
model itself part of the problem. "It is relying on the goodwill and
best efforts of many people, and that doesn't have the same commercial
imperative," he said. "I'm sure that is part of what is causing the
blow-out in the patch window."