"IT managers often assume that open source software is more secure than proprietary commercial software. Anyone who uses open source can examine the original code to spot any lurking vulnerabilities, and potentially even fix the vulnerabilities themselves. With proprietary software, you have to trust the vendor to do it all for you.
But open source's supposed security advantage assumes three things: 1.) Someone is actually looking at the code; 2.) Security vulnerabilities are getting reported and fixed; and 3.) Information about those fixes makes its way to Linux distributors and other software vendors, who apply the fixes to their products. But what those things aren't happening? As a customer, how can you be sure?
A new initiative aims to help. Founded in March, oCERT is a Computer Security Response Team created specifically to act as a clearinghouse for security information about all kinds of open source software."
Link to full article
Leave a comment