On Fri, Mar 24, 2006 at 03:15:27PM -0800, Brian wrote:

> There is no reason to provide funding from a business standpoint.  What does
> the business gain?

Does having a "business standpoint" require shutting off all common sense?

Everytime someone mentions things like "business decision" or "business
standpoint" you're practically *guaranteed* to hear an extremely
narrowminded and shortsighted argument.

> No corporation is gonna provide funding unless they get something out of it.

The companies which integrated Sendmail all just had to spend a lot of money
to issue an advisory about the latest vulnerability. They had to scramble
to patch things on their version of Sendmail, or at least make sure that
the Sendmail-supplied patches work well on their particular OS.

As we all know, OpenSSH is used by many companies in many products. A high
quality OpenSSH is in the interest of each and every company. A high
quality OpenSSH *lowers* costs, both today (because it's freely available),
and in the future because high quality means less bugs, wich means a
significantly lowered chance of having to spend a lot money should a
vulnerability be found.

If it would no longer be possible (for whatever reason) to provide high
quality software, costs for each company would go *up* much more than it
would cost all of them together to make it possible for a project like
OpenBSD to keep providing high quality OpenSSH software.

-- 
Jurjen Oskam

Reply via email to