[ Thanks to Amy
Bennett for this link. ]
“Yeah, thought so.
“Which is pretty much what was going through my head when I read
Monday’s wire reports that software-development firm Sonatype and
application security specialists Aspect Security has released a
study with a press release that highlighted “[m]ore than 80 percent
of typical software applications are open-source components and
frameworks consumed in binary form.”“That sounds pretty good, right? Here’s the sound of a shoe
dropping.“‘Collectively, Global 500 organizations downloaded more than
2.8 million insecure components in one year,’ the release
continued.“The inference that I, and many people, got from this release,
was that open source was once again being pointed out as the
carrier of doom and destruction. Certainly Andrew Aitken did.”