Advanced

Public concerned about security flaws in government open source code

Posted by abennett on · 2 comments
CSO Online; By Maria Korolov
Mail this story
Print this story

Earlier this month, the White House released a draft of an open source code policy for public review which would require agencies to share code with each other and with the public, but some experts are concerned about possible security implications.

Full Story

  Nav
» Read more about: Story Type: Security

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (2)

CMMI, OMM, current OSS/FOSS gov projects...

Apparently the author of the article doesn't know about these things:

https://en.wikipedia.org/wiki/Capability_Maturity_Model_Integration

https://en.wikipedia.org/wiki/OpenSource_Maturity_Model

https://www.govcode.org/repos

****

It seems to me that there is a broad ranging misunderstanding of government and open source and how it all fits together.

The government can't just simply release all software code... there are national security risks to evaluate.

Some source code may be releasable to the taxpayer, but not releasable to the world. Some source code may not be releasable outside of government, for national security reasons. And some source code will be releasable to the entire world... there's a fine line between all these categories.
The complainants also seem to be conflating a number of issues here as well.

Just because the software is released under a permissive, open source license doesn't have any bearing on the amount of testing that it has undergone. I find the confusion in this regard mystifying.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post