40 Comments
- matthewsr2000, on 10/12/2007, -0/+15am i the only person alarmed that Symantec was one of the recipients of money to fix open source?
they have been so openly anti open source for so long, this really bothers me.
guess i need to go call my congress rat. - JoshuaWood, on 10/12/2007, -0/+10That's great news. Way to go Linux, Apache, MySQL and PHP developers! As a webdeveloper, your work is indispensible.
- slippery, on 10/12/2007, -0/+8LAMP is what I do for a living (mostly). Nice to see the true "Get the Facts" get some ink.
- NeuronBasher, on 10/12/2007, -0/+6While Linux, Apache, MySQL and PHP are a very powerful tool for developing online applications, the security aspects are overblown. Sure, the framework components themselves (ie: Linux, Apache, etc) are reasonably secure, but I have seen mounts of truly abhorrent PHP code over the years. I suspect, though I have no data to back this up, that the incidence of security holes in PHP based software out there is extremely high. There are countless examples of widespread security holes over the years in things like phpBB, phpNuke, and other popular PHP applications.
Bottom line, the security of the underlying technology doesn't make up for piss-poor coding at the application level. - dclowd9901, on 10/12/2007, -1/+7Interesting. I guess I should learn how to run a linux server then. And here I was about to use a Windows server.
- cbreaker, on 10/12/2007, -1/+5Well, you could do a "WIMP" system - Windows, IIS, MSSQL, asP =)
- thirdtenor, on 10/12/2007, -3/+7Did you read the article?
And I quote:
"U.S. Department of Homeland Security awarded $1.24 million in funding to Stanford University, Coverity and Symantec to hunt for security bugs in open-source software and to improve Coverity's commercial tool for source code analysis."
So to answer your question, no your tax dollars funded two companies and university. - tcaduto, on 10/12/2007, -1/+4Forget LAMP, start using LAPP
Linux,Apache,Postgresql,PHP
wouldn't you rather have a LAPP dance instead of LAMP :-) - ericthedude, on 10/12/2007, -0/+3Apache, MySQL, and PHP come standard in OS X. Apple has already taken note.
- cbreaker, on 10/12/2007, -0/+3It's been generally accepted to include PHP/Perl/Python into the "P" these days.
- dangarion, on 10/12/2007, -0/+3You can install WAMP
http://www.wampserver.com/
Or
XAMPP
http://www.apachefriends.org/en/xampp-windows.html - volksport, on 10/12/2007, -0/+2Am I the only one that can't find the list of LAMP applications they actually tested, and the process in which their software determines bugs?
Notes: 1) I do not plan on registering on their site 2) the link on the news.com article listed a bunch of NON-LAMP programs. - inactive, on 10/12/2007, -0/+2Yeah, it's a little silly that people seem to forget there are other great open source solutions that are just as powerful or more and just as secure or more. Just because "LAMP" is the easiest for novices to get into and start with doesn't mean it's the best or only game in town. There are plenty of us who are strictly Linux, Apache, Postgresql, Perl, for example.
*shrug* - nagone, on 10/12/2007, -0/+1actually, P stands for Perl PHP Python and Ruby(because R is a P with a little thing hanging down).
- Slapo, on 10/12/2007, -1/+2Actually, P also stands for Perl, in some cases (e. g. when it replaces php)
- AF-Geek, on 10/12/2007, -0/+1Also from Security Now: Security is as much how you USE the software as it is how the software is written.
- kenwestin, on 10/12/2007, -0/+1Does anyone have the numbers for Perl and Python? Just curious if there are more bugs than PHP.
- JNitz36, on 10/12/2007, -0/+1NeuronBasher: very good point. I would have posted a similiar commend but you did a fine job. I run a forum with phpBB and have to update it frequently to keep up with mounting php (and other) bugs. Everyone loves to blame windows, but if you follow bug tracking websites, you will an amazing amount of bugs in all software , especially open source software. My database is very valuable to me and my community, and forum software that uses php can put the data at risk so I have to keep updated. I dread the patches that get released late friday afternoon right before the weekend kicks off, but hey, i love the open source community and the poower of LAMP so if I have to keep updated on patches to protect the setup, then i will do so. The benefits are great.
- AF-Geek, on 10/12/2007, -0/+1Wish I could get to do this for a living! I'm a USAF programmer, but I mostly just do personnel management.
- djdole, on 10/12/2007, -1/+2When it comes to how US tax-dollars are spent, there are items other than Software Development that are more deserving of whiney complaints.
(Like Bush's paycheck... Lets nix that waste of cash.) - russizm, on 10/12/2007, -2/+3Good to know. The installation process on my ubuntu box went smooth.
I would not be running a PHP or a MySQL server without this software.
diggity. - inactive, on 10/12/2007, -2/+2Welcome to the United States of Corporate America
- olego, on 10/12/2007, -3/+3Haha against all PHP folks:
"There is one caveat: PHP, the popular programming language, is the only component in the LAMP stack that has a higher bug density than the baseline, Coverity said." - Greggo, on 10/12/2007, -1/+1It is really cool news. I hope it will help spread the word that Open Source software can be synonymous with high quality software... and make its reach wider.
- indeh, on 10/12/2007, -0/+0or python in other cases
- AF-Geek, on 10/12/2007, -1/+1Well, a bit political and off-topic but, I believe the president's salary was doubled a few years ago...
He now gets $200,000/year to run the most powerful country on the planet. Oh, and he has to pay for all his own food, laundry, etc. Pretty good bargain, if you ask me (I know you didn't). - JoeSK, on 10/12/2007, -2/+1People seem to be misinterpreting this as meaning that the software is "more secure" which is a very broad definition. If you listen to the Security Now podcast for example, you'd know that that definition isn't straightforward. For example, one product may have a few more bugs, but better and more responsive support. On the other hand, another product may have less bugs because it has less features and therefore isn't as comprehensive a solution.
Just think twice about extremely broad phrases like "more secure". - neomorphic, on 10/12/2007, -2/+1What about Linux, Apache MySQL and >>>PERL
- cbreaker, on 10/12/2007, -3/+1Who forgets?
- djdole, on 10/12/2007, -3/+0Digg points for some uncommon wisdom.
digg+ - stoops, on 10/12/2007, -7/+4I think Microsoft should take note. OpenSource is gonna rule the world man, one day.
- Oakes, on 10/12/2007, -5/+2Sure, MS should take note. The continue laughing its way to the bank.
- djdole, on 10/12/2007, -4/+0That some solid software there. Nice
- Christia, on 10/12/2007, -5/+0Mmm, Sweet Brick... I'll never forget you...
http://www.hjo3.net/brick_fantastic.jpg - Oakes, on 10/12/2007, -8/+1Wait a minute, my tax dollars are going to software development?
- Oakes, on 10/12/2007, -10/+3thirdtenor - My tax dollars are going to two companies and a university for software development. Thank you for making my point.
And yes, I did read the article. - inactive, on 10/12/2007, -11/+3As the guy from Anchorman would say....
I Love Lamp...
The Riddler
http://www.onlyriddles.com


What is Digg?
Browsing Digg on your phone just got easier with our enhancements to the