Andrew Thompson argues open source ideology can create complacency about audits, while Thomas H. Ptacek says a major open source project shifted from low-quality reports to being flooded with real vulnerability reports. The theme is scaling review and triage.
It's not even a new revelation that open source ideology led to a sense of complacency about whether or not code is audited.
"Of course someone's checking; it's open source!"
Most important open source project, went from slop reports to drowning in real vulnerability reports:
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Cyber Security