Stop Bashing Bash and GNU
weev.livejournal.com
weev.livejournal.com
The takeaway from all this, to me, is simply to acknowledge that while "with enough eyeballs all bugs are shallow" may or may not be true, there's no easy way to know, a priori, how many eyeballs are "enough" - and Open Source projects (right alongside ALL software projects) should still utilize tools like static code analysis, fuzzing tools, should still have dedicated security audits from time to time, etc.
The other takeway is that "defense in depth" is still mantra number one for security. You can have a hole at any level, which means that every level must work to limit access to the greatest possible extent. A hope and prayer and expecting all software to be bug-free isn't going to cut it.
Instead, however, they refuse to contribute because it is also giving their competitors an edge. Such is the tragedy of the commons.
Particularly, given the position of free software advocates themselves who are more than willing to deride, malign and condemn as immoral or evil any program that doesn't have a GPL attached.
I agree that making fun of his weight or his eccentricities is in poor taste, but his ideas are fair game, which is as it should be.
RMS may be right. Personally, I think he's right about a lot of things. But he didn't come down off the mountain with clay tablets written on by the finger of God.