[Ubuntu-ZW] OpenSSL and the Open Source Model

[Kalpesh Thaker]

Hey Jeff,

I've looked at this from a different perspective completely. Most people
dont realise that OpenSSL is open source software... end of the day, its
provided without any guarantees or warranty's. The problem here, is that
organisations like google, facebook etc have all implemented OpenSSL
without actually contributing much towards its overall development. So now,
when they do find a bug that may be serious enough to compromise their end
user's privacy... well who's to blame? OSS community? OpenSSL developer?

Passion alone will drive the development of opensource software... BUT,
passion has nothing to do with the implementation of open source software.
End of the day, software is made by humans... which by definition are
imperfect to begin with. I wouldnt be surprised if proprietary software out
there has even bigger security flaws in them, but no one knows about them..
until some kid decides to exploit it and the problem becomes public
knowledge.

I still find it difficult to believe that there are clever enough people
out there, who actually used the heartbleed exploit BEFORE it had been
acknowledged by the open source community. Only now that heartbleed has
been made public, that the whole internet world.. who are mostly from US
(and who are already paranoid enough) have started slating open source
because of this.




On Sun, Apr 20, 2014 at 4:54 PM, Jeff Chivheya <jeffycee at gmail.com> wrote:

> Hi
>
> I have recently been reading about the so called Heartbleed bug and
> how we should all be a bit cautious blah blah blah..What really caught
> my attention about the whole issue is the fact that  the system that
> was compromised is opensource!.Well I have always known to some extent
> that is 'open' but what I didn't know is fact that this very important
> piece of work is grossly underfunded..I mean $2000 in donations
> annually!I almost cried to learn that a certain Dr Stephen Hensen who
> is the lead programmer for the project literally 'starves'!
>
> Which brings me to my main point or question,something to ponder on as
> open source junkies..Is passion alone enough to  push forward
> OpenSource Software?What else should be included in the recipe to
> succeed.What is making Linux a success and OpenSSL a dismal failure
> when it comes to traction?Is passion alone enough to power the Open
> Source model?.I leave all of you with those questions in mind...May I
> suggest answers to these questions might help all of us in the Local
> scene who want to see Open Source progress to another level...
>
> --
> Jeff T Chivheya
> Skype:jeffycee
> Cell:+263 773 962 299
> Bulawayo
>
> --
> Ubuntu-zw mailing list
> Ubuntu-zw at lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-zw
> --
> http://www.ubuntu.org.zw
> http://zimbabwe.ubuntuforums.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-zw/attachments/20140420/58a8e692/attachment.html>