Envelope-to: seemant@dev.gentoo.org
Delivery-date: Tue, 09 Dec 2003 22:25:50 +0000
From: "chris corcoran" <chriscorcoran9@hotmail.com>
To: debian-www@lists.debian.org, admin@db.debian.org, security@debian.org, gentoo-dev@gentoo.org, www@gentoo.org, gnu@gnu.org, bkuhn@fsf.org
Cc: tca@gnu.org, bonzini@gnu.org, fedor@gnu.org, bob@rattlesnake.com, loic@gnu.org, greve@gnu.org, fheinz@vialibre.org.ar
Subject: An open letter to the open source community about the security of
	open source pr
Date: Tue, 09 Dec 2003 17:25:45 -0500
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
Message-ID: <Law9-F80MmYjN2sLjSt000202fd@hotmail.com>
Content-Transfer-Encoding: quoted-printable

An open letter to the open source community about the security of open=20
source projects.

With the recent attacks on open source projects I was stuck by and idea. I=20
thought that open source projects could come together and pool there=20
resources to form a project whose soul goal would be to protect the network=
s=20
that open source projects use.The common goal of all open source projects i=
s=20
to distribute open source software at no cost to anyone and everyone. This=20
leaves all projects open to possible attacks. It is my belief that if large=
=20
open source projects pool their resources they can not only protect them=20
selves and each other but keep the open source movement alive. On top of=20
that this project could set an example for others on how network security=20
can permeable to some but still protect a networks assets.

I envisioned this project consisting of four parts. One part would deal wit=
h=20
workstation security. This part would be responsible for setting proper=20
procedure and making sure users follow it as well as securing and=20
maintaining each workstation. A second part would be responsible for networ=
k=20
security. This part would ultimately be responsible for securing and=20
maintaining servers, routers, hubs, switches etc. A third part would be=20
responsible for network protection and forensics. This part would watch=20
network activity for possible attacks and track down hackers of past=20
attacks.

It is my belief that these three parts would work in tandem to protect each=
=20
project. I also believe that if you combined the resources of large project=
s=20
like Gentoo, Debian and the FSF that these projects would have a better=20
chance of surviving attacks.

This is just and idea. I thought I would send it out to some people who=20
obviously know more about it then I do and get some feedback.

So if you like my idea or have something to add or anything email me at=20
Chriscorcoran9@hotmail.com

Thank You for Your Time and have a wonderful day!
-Chris Corcoran

_________________________________________________________________
Don=92t worry if your Inbox will max out while you are enjoying the holiday=
s. =20
Get MSN Extra Storage!  http://join.msn.com/?PAGE=3Dfeatures/es