Mailing the story:
Security guru wants access to bug databases
Cambridge academic Ross Anderson argues that empirical analysis of software bug records will prove whether open source code is more secure than closed source, and show the true value of techniques like peer review and extreme programming.