News for hackers. Stuff that matters.

A comment on Critical crypto bug leaves Linux, hundreds of apps open to eavesdropping. Parent comment

Re: Critical crypto bug leaves Linux, hundreds of apps open ... by Crito on Tuesday March 04, 2014 @04:50PM (#7343452)
The quote is hyperbolic for the "all", and should probably use the word "shallower", but otherwise I don't see anything wrong with it.

"much more people talk about many eyes than actually audit existing code" is true of free software, but is also true of just about everything. More people think "I feel comfortable crossing this bridge because plenty of engineers have looked at it" than there are engineers actually looking at bridges. I haven't read the quote in it's original context for several years, but I don't remember it conflating software users with software developers.

[ Parent | on HN ]
Re: Critical crypto bug leaves Linux, hundreds of apps open ... by Perseids on Wednesday March 05, 2014 @07:39AM (#7346582)
The difference is that engineers actually know how to build safe bridges. I feel (and am actually) safe living in a house designed by a single competent architect, but I am not secure using a TLS implementation written by a single competent programmer. The only way we have found to end up with reasonable secure code is to have it reviewed by a lot of competent people.
[ Parent | on HN ]