13 msgEmail Encryption
1 msg2 questions, qmail+groupware and printer driver...
4 msgTPM against XSS and Phishing
3 msgStrong Authentication
3 msgSecurity of PCL and PostScript
1 msgFinally, Somebody “Gets” Secure Web Browsing an...
2 msgStand alone linux webserver security tuning
1 msgTippingPoint IPS SQL injections?
2 msgaccess-list outside_access_in permitting ssh fr...
3 msgWindows 2003 - date sync problems
6 msgoutlook web access enabled users
2 msgSANS Masters Degree in Info Sec. Vs other Unive...
4 msgIPS log analysis
5 msgPossible Bot?
1 msgLTO4 encryption
1 msgFinal EUSecWest 2008 Speakers and Dojos - Londo...
33 msgMasters in Information Security/Assurance
4 msgAdvice on backup system.

Why open source software is more secure
\ sapran (8 May 2008)
. \ Ali, Saqib (8 May 2008)
. . \ Chad Perrin (8 May 2008)
. \ David Harley (8 May 2008)
. . \ Hayes, Ian (8 May 2008)
. . \ Chad Perrin (8 May 2008)
. \ aliasghar.toraby (8 May 2008)
. \ aliasghar.toraby (8 May 2008)
. . \ Adriel Desautels (8 May 2008)
. \ zenmasterbob123 (8 May 2008)
. . \ Murda Mcloud (9 May 2008)
. . . \ Chuck Taylor (9 May 2008)
. . . . \ Nick Vaernhoej (9 May 2008)
. \ Ivan . (9 May 2008)
. \ zenmasterbob123 (9 May 2008)
. \ Alexander Klimov (12 May 2008)
. . \ Robinson, Sonja (12 May 2008)
. . . \ Craig Wright (13 May 2008)
. . . . \ Hayes, Ian (13 May 2008)
. . . . . \ Chad Perrin (13 May 2008)
. . \ Craig Wright (13 May 2008)
. \ Chad Perrin (13 May 2008)

1 msgHow can App Server maintain CRL in keystore
Subject:Why open source software is more secure
Group:Security-basics
From:sapran
Date:8 May 2008


 
The main goal of a software vendor is not to bring you a _good_
product, but to sell it you. That is the only truth about that. That's
why the product might be fully featured, nicely decorated and
published on time: the vendor is economically motivated to make it
this way. But there's no sense to make it secure and stable because
the only motive for this is liability which does not exist software
industry.

There are two ways for things to become better. The first one is fully
described by Bruce Schneier it his "Secrets and Lies", the top book to
be read by all 'connected' folks. Its increasing of liability to the
level of its presence in other industries, for ex. banking or plane
building. And there is another, more utopic, to ignore the business
motives during the process of software development.

It may remind you the methods of decreasing of unemployment proposed
by Marks: to remove market economy at all. But this is a topic to be
thought out I guess, so your comments are welcome.


© 2004-2008 readlist.com