Critical crypto bug leaves Linux, hundreds of apps open to eavesdropping

Re: Critical crypto bug leaves Linux, hundreds of apps open ... by cookiecaper on Tuesday March 04, 2014 @03:25PM (#7342860)

Raymond's quip may be somewhat hyperbolic for effect, but I think it's harder to argue with the assertion that "with many eyes, many bugs are shallow". True, there are some things that are esoteric and which only a few very specially trained persons would notice, but in many cases, it's not that way. The fact that a random person will show up on the mailing lists of open-source projects, even minor ones, and have a bugfix patch validates the theory that an open codebase contributes significantly to software quality, and particularly a greater degree of software buglessness.

I think that people who argue over Raymond's quip are just being pedants. It's true that not all bugs will be shallow, no matter how many eyes are on software, but I don't think the expression was meant to be taken literally.

[ Parent | on HN ]

Re: Critical crypto bug leaves Linux, hundreds of apps open ... by guscost on Wednesday March 05, 2014 @11:42AM (#7347969)

  great_success = sum([i.debug_skill * log(i.audit_time) for i in code_reviewers])

[ Parent | on HN ]

Re: Critical crypto bug leaves Linux, hundreds of apps open ... by SimHacker on Thursday March 06, 2014 @01:44PM (#7355702)

And you can't just go:

    struct code_reviewer *qualified_code_reviewer =
        (struct code_reviewer *)malloc(
            sizeof(struct code_reviewer));
    assert(qualified_code_reviewer != NULL);

[ Parent | on HN ]