Needed: code auditors
Posted Feb 5, 2004 13:46 UTC (Thu) by
lutchann (subscriber, #8872)
Parent article:
Needed: code auditors
Part of the reason that nobody audits open-source code is because it is futile. For an active project, a full code audit can take as long as several release cycles, and who wants to run obsolete software?
Code audits aren't a one-time event; they need to be an ongoing effort run in parallel with the development work. And, like writing documentation, it's not a fun job and nobody wants to do it.
(
Log in to post comments)