[Am-info] query about MS "Innovations"

Sujal Shah sujal@sujal.net
08 Apr 2002 14:12:30 -0400


On Mon, 2002-04-08 at 13:56, Joe Moore wrote:
> On Fri, Apr 05, 2002 at 06:27:05PM -0500, Felmon Davis wrote:
> > 
> > Perhaps your last question was overlooked? It's a worrisome thought: 
> > why exactly wouldn't 'open source' _also_ produce a 'mono-culture'?
> 

Yeah, what he (Joe) said. :-) 

I agree exactly with what he said, FWIW.

Sujal

> It does.  Or rather, it can.
> Open source is completely orthogonal to a monoculture.  However, freely
> modifyable source (aka Free Software) makes it possible to create enough
> diversity to make the binosphere (my word) a safer place.
> 
> To see the difference, examine Microsoft's "Shared Source" license.  Certain
> large, influential companies are able to examine (but not modify) the 
> Windows source code.  This does nothing to eliminate the software monoculture,
> even though the source is "open".
> 
> On the other hand, consider the Apache project.  Because users aren't 
> generally dependant on a specific set of compilation options (For example,
> some may not need the server-side imagemap extension) there is diversity
> in what actually gets installed on a system.  Even though it's all based on
> the same software.  In addition, what compiler you use to build it may make
> a difference to what vulnerabilities exist.  For example, a bounds-checking
> compiler may create a less-vulnerable executable than a standard C compiler,
> and gcc v2.7.2 will create a different executable (stack in different place,
> etc) than even gcc 2.95.
> 
> All these contribute to diversity even without changing the source code.
> 
> --Joe
> _______________________________________________
> Am-info mailing list
> Am-info@lists.essential.org
> http://lists.essential.org/mailman/listinfo/am-info