User: avxo

Re:Security is damn hard..

On: Microsoft vs. Computer Security

No you don't need everyone -- if everyone could do serious security reviews, people that charge a LOT of money to review source code would not be able to charge what they charge. The point I was trying to make is that you don't significantly improve security just by opening up your source code to scrutiny, although you do gain other advantages that the open source model gives you. The people that do the review must know what they are looking for. Are there such people reviewing code in the Linux kernel? Absolutely. Are there such people reviewing Microsoft code? Yes.

Re:Security is damn hard..

On: Microsoft vs. Computer Security

2) They don't submit their code for review by the public.

Review by the public is not all that it's hyped out to be. A lot of the "public" wouldn't know what to look for, but even if the public you refer to only includes programmers, keep in mind that many (if not all) programmers couldn't find most of the subtler security related bugs simply by reviewing the code.

Re:All applications have what?

On: The Unspoken Taboo - The Never Expiring Password

Which is far from "all applications." Quick! What's the password for gcc?

Re:Keeping my skills fresh

On: Your Favorite Math/Logic Riddles?

Silly browser... a^2 + b^2 = c^2

Re:Keeping my skills fresh

On: Your Favorite Math/Logic Riddles?

You realize that what you wrote is not the Pythagorean theorem. That is: a + b = c

Re:Same old RMS

On: Stallman Claims Linux Trademark Doesn't Matter

Of course you cannot... after all, nobody else could have written a compiler. Only the GCC guys could possibly achieve such a feat.