--- "David A. Desrosiers" wrote:
> I for one would not be using any code that
> purports to be "secure" without auditing it myself,
> nor would any major corporation worth their salt and
> who valued their data.

AIA for the OT remark:

This is classic hyperbole and wishful thinking, probably by an open
source afficionado. Most all major corporations throughout the world
are using code without auditing it themselves, and this includes OSSS.
See http://news.com.com/2100-1001-830130.html, where you will discover
that "...the programs are getting audited a lot less than people
think".

The "peer review" argument from open-source advocates has merit, but
it's not a guarantee of secure software. For example, Sendmail has been
open source for 20 years, and people have found more vulnerabilities in
it every year of that 20 years.


__________________________________________________
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
http://sports.yahoo.com

--
For information on using the Palm Developer Forums, or to unsubscribe, please
see http://www.palmos.com/dev/tech/support/forums/