Open source is a good thing. Open source is a particularly good thing for security. I’ve written about this before (notably in Disbelieving the many eyes hypothesis and The commonwealth of open source), and I’m going to keep writing about it. In this article, however, I want to talk a little more about a feature of open source that is arguably both a possible disadvantage and a benefit: the difference between a project and a product.
