Comment A sensible approach to open source security (Score 5, Insightful) 43
What is interesting however is the thought that developer, documentation and test contributions to open source are unpaid, but security contributions are paid for.
Possibly this reflects a lesson of the past 30 years that pretty much nobody in the world is capable of shipping fully secure software for general purpose computers.