Open source developers provide 'glimmer of hope'

An eminent software developer has claimed that the pressure to be first to market with new technology is leading to a decline in software quality, but that standards are higher in the open source world.

James Coplien, a software design expert who currently works as an object architect at US-based software company DAFCA, said in an interview at the ACCU conference in Oxford, that unless consumers start demanding better quality software, the software industry is unlikely to change.

"There's a pressure that unless you're one of the first three players in the market you don't have a chance," said Coplien. "Quality is suffering for time -- people pay money for the first, not the best. It comes down to the fact that consumers are willing to put up with crap systems that crash all the time."

Coplien said the only area of the industry where people still take pride in the quality of the software they deliver is the open source community.

"The one glimmer of hope is the people who've said, 'Screw the industry, we're going to write excellent software and give it away', in other words, the open source movement," said Coplien. "I take off my hat to these people. Linux is one of the highest quality pieces of software out there."

There are various reasons why open source software is of better quality than proprietary software, according to Coplien. He claimed the collaborative effort of open source contributors, combined with a core group of developers, is the best way to build a secure IT system.

"Security is a system concern -- it is a complex system," said Coplien. "How does nature deal with complex systems? Each cell does its own thing. The complementary, independent, selfless acts of thousands of individuals [in the open source community] can address system problems â€" there are thousands of people making the system stronger. If it was uncoordinated it wouldn't work, but there is a core of developers at the centre."

But other industry experts at the ACCU conference disagreed that open source code is superior to closed source code. Bjarne Stroustrup, who currently works as a professor at Texas A&M University and is the creator of C++, said that the quality of open source software is not necessarily any better.

"Open source is a good idea, but not all open source code is good," said Stroustrup. "Some of the best code in the world is not open source."

"For example, I would dearly love to have a good look at the [proprietary] code running in the Mars Rover. It has to be good -- it's been running on Mars for 15 months and has to be debuggable remotely."

Coplien argues that open source software is better tested than closed source software as there are "more eyes" looking at it, and people are encouraged to find bugs. "If I can find a bug in Linux, it's a lifetime accomplishment," said Coplien. "In the Linux community it is a badge of honour to find a bug," he said, adding that open source developers are under pressure to write superior code because they know it will be seen by many other coders.

But the security of open source software is a controversial issue. Linux kernel co-maintainer Andrew Morton said this week that a lack of 'credit or money or anything' for those who test the open source OS could threaten its long-term stability.

And speaking at the ACCU conference, Ross Anderson, professor of security engineering at Cambridge University, said that open source software is not inherently more secure than closed source software, as although users can find and fix vulnerabilities more easily when the code is available, this will also help those attacking the software.

But, if asymmetry is introduced, which gives attackers or defenders an additional advantage, this will affect the relative security of open and closed source software, according to Anderson. Factors that could reduce the relative security of closed source software include commercial influences, where a company does not fix a bug due to the cost, or PR influences, where a company tries to hide information on a bug to prevent negative publicity, said Anderson.

Anderson's research on this issue is available as a PDF file from the Cambridge University Web site.

ZDNet UK's Ingrid Marson reported from London. For more coverage from ZDNet UK, click here.

Advertisement

Talkback 3 comments

    Whilst not getting into the re ...Anonymous -- 25/04/05

    Whilst not getting into the religious argument - I must say I agree with this simplest of observations. For many years now software companies have released inferior products to keep up with other inferior products with the addage we'll fix up the bugs later. This is known as marketing-driven software development. The beauty of open-source is that marketing is removed and it is all about the product. This is a step back on the path to sanity in an environment where sanity has been more and more the least common factor.

    Can anyone guess who started the trend of delivering product to meet marketing requirements and therefore driven the computer industry to provide a greater array of inadequate products that places more pressure on the people who use and administer the products that they paid extremely exorbitant prices for?

    Whilst, as Ross Anderson says, ...Anonymous -- 25/04/05

    Whilst, as Ross Anderson says, opensource software is not inherently more secure than closed source, there are certain advantages to opensource for security. The article mentions asymmetry, although it doesn't actually explain this in any detail.

    With opensource software and security issues, there is an asymmetric (unequal) relationship: there are far more people trying to make things secure than there are those trying to take advantage of any vunerabililties.

    As the article says, this gives an opensource project an advantage over one developed by a (relatively) small team of people, where the number of potential crackers may equal or even exceed the number of developers.

    I couldn't agree more "St ...Anonymous -- 26/04/05

    I couldn't agree more "Standing ...".
    Another thing I find a bit off kilter is how Bjarne Stroustrup can honestly
    offer the Mars Rover proprietry code as a valid comparison to the rest of the industry.
    There are certain software projects that have (virtually) no room for error, and are usually proprietry with limitless budget and resources to boot.
    (eg. medical, aircraft, telephony, military, trading systems, mars probes :)
    These are quite exceptional, since they usually revolve around keeping people alive.
    I would cl**** most other projects into a less critical and forgiving group (bug wise). (eg. email, p2p file sharing, graphics editors)
    With proprietry projects, its more about getting a good enough product out the door and the money in, and the software suffers.
    To me OpenSource, by its nature has almost the same effect as some of these high-end projects.
    Your visible contribution makes you accountable, and the work ethic is about great software, not about knock off time and the pay check.
    However, I agree with Bjarne that some OpenSource software can be unfinished or unstable, but so can plenty of proprietry stuff you pay for.
    Using Windows (as well as Linux) I naturally use plenty of proprietry stuff, and some are great (eg. MSDEV C++).
    But I would say I see OpenSource software generally more innovative, standards compliant, and most often a pleasure to use.

Add your opinion

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Suzanne Tindal Love me, tender
    Considering how expensive and drawn-out tender processes can be to solve problems that might be very immediate, it's little wonder that the Victorian Police IT department tried to work the tender exemptions system.
  • Array 2009 funding drought rolls on
    For Australian start-ups looking for venture capital, 2009 was a very bad year. 2010 may be no better.
  • Array Can not-so-smart meters help the NBN?
    It was interesting to witness Conroy's recent enthusiasm to spruik the NBN's role in supporting the Smart Grid, Smart City initiative. What a pity that Conroy hadn't yet seen the damning report from the Victorian auditor-general about that state's smart-meter roll-out.
  • More blogs »

Tags

Back to top

Featured