Weeding Out Flaws in Open-Source Apps
610621
Under a contract with the U.S. Department of Homeland Security, Stanford University and Coverity are working to identify and fix potential security defects in open-source software projects. As part of the collaborative effort, Coverity announced this week a list of open-source projects that it has now certified as secure and defect-free.
682560
It's not perfect yet, but Eclipse marks a new way of developing applications.
458563
Security-minded users can find out faster if their applications need to be patched with a free tool.
763575
Ilia Alshanetsky posts today about the proposed "Month of PHP bugs" that Stefan Esser is proposing:   It would be interesting to see what issues he discovers, hopefully most of them have already been reported to the PHP Security Team, in which case the upcoming 5.2.1 release will provide a resolution path for affected users.   Hopefully, as Ilia states, the bugs will not turn out to be zero-day vulnerabilities and will instead be smaller issues. Either way, a bug-fix patch will probably soon follow.   Either way, I have to look at this as a free security audit of PHP by someone with a clue about security and ultimately, in the long run it will only make PHP better, even if March is going to be rather busy.
740862
TechWeb - A project sponsored by the Department of Homeland Security spotlights defects in popular applications such as Linux and Apache. But there's also good news.
436539
Is open source becoming the dumping ground for no-longer-wanted software, sort of like a Salvation Army dropoff point for programs instead of old clothes?
568430
Developer launches a Month of PHP Bugs project with 11 bugs in five days.
578882
How often have you thrown up your hands in disgust at the poor quality of documentation for an open source project?  Wouldn&#8217;t it be nice if someone put together a documentation coverage tool that worked like test coverage too ls?  Well, you&#8217;re in luck&#8212;dcov is here (at least for Ruby code).read more
386604
This article discusses the discovery of compromised machines in large enterprise environments, and offers some suggestions on correlating NIDS and HIPS logs to avoid false positives.
274000
Open source is changing the game by making software free.  About time.
431542
Open source has many good uses.  Beating up one's competitors shouldn't be the primary one.
745683
How a simple bug betrays Microsoft's disdain for basic best practice principles
707904
Travelers on the road from proprietary to open source software won&#39;t be driving on an Interstate. Enterprise open source deployments are still uncommon enough that companies
601984
Vulnerabilities in healthcare software often go unreported.
345464
php|architect has a new note about a few PHP vulnerabilities:
435582
Blog: Updates address some critical vulnerabilities in the popular browser.
552298
PC Magazine - Opinion: CPUs, like software, have always had bugs. The security implications of this are a relatively new problem, and open-source users may be at a disadvantage.