As people debate the risks of the Windows code being stolen, and people debate the merits of open surce for making code more secure, I am wondering about a few things:
- Writing code in a language that allows buffer overruns is not safe.
- Writing office applications for a LAN that assumes all particpants are associates and then putting them on the Internet is not safe.
- Writing operating systems that run every application with full user rights (or worse) is not safe.
Open source that is poorly designed is not safe. Closed source that is poorly designed and then released in the open is even less safe.