ESR (Eric Raymond) coined the term Linus' Law in 1999, arguing that all bugs are easy to spot as long as there are enough eyes. Linus' Law's name is to commemorate Linus Torvalds, the father of Linux. Over the years, it has been used as a principle to explain the security of open source software should be better. But in the past few years, open source projects and open source software have exposed a number of serious security vulnerabilities. Is Linus' Law invalid?
Dirk Hohndel, VMware Vice President and Chief Open Source Officer, thinks Linus' LawStill valid. He believes that security is always a challenge, whether it is open source development or closed source development. Developers are often inspired by innovation and are committed to finding ways to work, and security is usually not a priority. Security should not be seen as part of the open source or closed source concept, but should be an industry.