> I think better approach would be to buy a security audit to a "LEAF
> Bering-uClibc" setup you run. Buy two audits from different
...8<...
> same thing, you could use the released audits to build recognition
> and trust among those in doubt without "known names".
My career was in computing & computing management. The issue here is
"fear" by managers who do not have the means or experience to make an
independent evaluation. Apparently they aren't able to recognize the
threat inherent in "monocultures" which they rely on.
The fear is in their own minds, and overcoming one's fears is not
necessarily subject to logical analysis. After all, one might pay
attention to the recent two-day hackfest of Windows, Apple & Linux. One
fell in minutes, to a flaw in subsidiary software (flash?), and at the
end of the two days Linux was the "last man standing". Bering, of
course, doesn't have extra desktop software to give it away. One might
even find evidence in all the Apache webservers which rely on the Linux
kernel.
Firewall & security appliances are common. Where do they get their
start? A big, established company like Cisco might have had the time &
resources to "roll their own" ("Oh, gee, but who has audited their code
and tells me it's safe?"). Do the smaller companies get their start in
Windows or *nix code?
In the end, their minds are already "made up", so purchasing an audit
will not change their minds. And how are those costs to be recouped?
--
Paul Rogers
[EMAIL PROTECTED]
http://www.xprt.net/~pgrogers/
Rogers' Second Law: "Everything you do communicates."
(I do not personally endorse any additions after this line. TANSTAAFL :-)
--
http://www.fastmail.fm - Same, same, but differentÂ…
-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/
