down they go

Carl Parrish plug-discuss@lists.plug.phoenix.az.us
Thu, 23 May 2002 18:57:24 -0400


I think someone got their info wrong. I know for a fact that there has been security testing of Linux by the NSA. (not sure of the outcome however). 

Carl Parrish
============================================================
From: "John (EBo) David" <ebo@leml.la.asu.edu>
Date: 2002/05/23 Thu PM 06:06:01 EDT
To: plug-discuss@lists.plug.phoenix.az.us
Subject: Re: down they go

From the article:

"Stenbit said that the debate is academic and that what matters is how
secure a given piece of software is. To that end, the Defense Department
is now prohibited from purchasing any software that has not undergone
security testing by the NSA. Stenbit said he is unaware of any
open-source software that has been tested." 

and yet earlier in the article they state:

"The Mitre report said open-source software "plays a more critical role
in the DOD than has been generally recognized."

The report identified 249 uses of open-source systems and tools,
including running a Web portal for the Defense Intelligence Agency,
running network security for the Army command in Europe and support for
numerous Air Force Computer Network Defense tools."


if it is the case that the NSA is not testing open-source software but
only commercial, AND the DD is not allowed to use any software not
tested by NSA, I want to know why.

Looks like we should all write the post asking them to follow up on
it...

  EBo --
________________________________________________