Close Menu
TechCentralTechCentral

    Subscribe to the newsletter

    Get the best South African technology news and analysis delivered to your e-mail inbox every morning.

    Facebook X (Twitter) YouTube LinkedIn
    WhatsApp Facebook X (Twitter) LinkedIn YouTube
    TechCentralTechCentral
    • News

      Solly Malatsi seeks out-of-court deal in TV migration fight

      15 July 2025

      South Africa’s telcos battle to monetise 5G as 4G suffices for most

      15 July 2025

      Major new electric car brand launching in South Africa

      15 July 2025

      MTN empowerment investors see ‘modest’ return as Zakhele Futhi winds up

      15 July 2025

      Eskom wants your solar system registered – but what does that actually mean?

      15 July 2025
    • World

      Grok 4 arrives with bold claims and fresh controversy

      10 July 2025

      Samsung’s bet on folding phones faces major test

      10 July 2025

      Bitcoin pushes higher into record territory

      10 July 2025

      OpenAI to launch web browser in direct challenge to Google Chrome

      10 July 2025

      Cupertino vs Brussels: Apple challenges Big Tech crackdown

      7 July 2025
    • In-depth

      The 1940s visionary who imagined the Information Age

      14 July 2025

      MultiChoice is working on a wholesale overhaul of DStv

      10 July 2025

      Siemens is battling Big Tech for AI supremacy in factories

      24 June 2025

      The algorithm will sing now: why musicians should be worried about AI

      20 June 2025

      Meta bets $72-billion on AI – and investors love it

      17 June 2025
    • TCS

      TCS+ | MVNX on the opportunities in South Africa’s booming MVNO market

      11 July 2025

      TCS | Connecting Saffas – Renier Lombard on The Lekker Network

      7 July 2025

      TechCentral Nexus S0E4: Takealot’s big Post Office jobs plan

      4 July 2025

      TCS | Tech, townships and tenacity: Spar’s plan to win with Spar2U

      3 July 2025

      TCS+ | First Distribution on the latest and greatest cloud technologies

      27 June 2025
    • Opinion

      A smarter approach to digital transformation in ICT distribution

      15 July 2025

      In defence of equity alternatives for BEE

      30 June 2025

      E-commerce in ICT distribution: enabler or disruptor?

      30 June 2025

      South Africa pioneered drone laws a decade ago – now it must catch up

      17 June 2025

      AI and the future of ICT distribution

      16 June 2025
    • Company Hubs
      • Africa Data Centres
      • AfriGIS
      • Altron Digital Business
      • Altron Document Solutions
      • Altron Group
      • Arctic Wolf
      • AvertITD
      • Braintree
      • CallMiner
      • CambriLearn
      • CYBER1 Solutions
      • Digicloud Africa
      • Digimune
      • Domains.co.za
      • ESET
      • Euphoria Telecom
      • Incredible Business
      • iONLINE
      • Iris Network Systems
      • LSD Open
      • NEC XON
      • Network Platforms
      • Next DLP
      • Ovations
      • Paracon
      • Paratus
      • Q-KON
      • SevenC
      • SkyWire
      • Solid8 Technologies
      • Telit Cinterion
      • Tenable
      • Vertiv
      • Videri Digital
      • Wipro
      • Workday
    • Sections
      • AI and machine learning
      • Banking
      • Broadcasting and Media
      • Cloud services
      • Contact centres and CX
      • Cryptocurrencies
      • Education and skills
      • Electronics and hardware
      • Energy and sustainability
      • Enterprise software
      • Fintech
      • Information security
      • Internet and connectivity
      • Internet of Things
      • Investment
      • IT services
      • Lifestyle
      • Motoring
      • Public sector
      • Retail and e-commerce
      • Science
      • SMEs and start-ups
      • Social media
      • Talent and leadership
      • Telecoms
    • Events
    • Advertise
    TechCentralTechCentral
    Home » Jason Norwood-Young » In defence of open source

    In defence of open source

    By Editor27 June 2011
    Twitter LinkedIn Facebook WhatsApp Email Telegram Copy Link
    News Alerts
    WhatsApp

    [By Jason Norwood-Young]

    Late last year, I was asked to audit some software that had been developed overseas and bought by a large SA company to launch a new consumer website. It all looked pretty straightforward, until I noticed a strange line in the code: every time a new subscriber signed up, the software would forward this information to a mysterious IP address.

    Clearly, someone working on the code had decided to do a bit of information mining. The combination of full name, address and e-mail of all the users of this site could be sold for a pretty penny to spammers. The site also accepted and processed credit card payments. Whoever engineered the malicious code had missed a golden opportunity — it would have been just as easy to steal credit card details, complete with expiry dates and security codes.

    All the while, the customer would have had the false sense of security from the little lock in their browser, since this “hack” would not have interfered with the secure session established between themselves and the website.

    There are only two ways that this potential theft could have been detected before the website went live. The first would have been fairly technically complex. We could have set the site up in a controlled environment and examined all the information sent in and out of the system. It would have been time consuming in the extreme, have required a great deal of technical expertise and would not have been 100% guaranteed.

    The second way would be for someone to read the code, which is how we found the problem. For this to happen, we required “open-source” software – software where the code is clearly visible, and in this case editable. Not only could we detect the problem, we could fix it. The site still went live, without the security issues.

    These are two reasons that as an IT buyer I lean towards open-source software. If there’s a problem, I can identify it and fix it. That doesn’t mean that I audit every piece of software that I run. There aren’t enough hours in the day. But I’ll often dive in and have a quick look around before committing to certain software. Poor coding styles and obvious unnecessary outgoing links should ring alarm bells.

    Equally, it’s why I distrust proprietary software. I don’t know what it’s doing most of the time, and I assume the worst. I also don’t see the need to guard the software so closely.

    An important element of open source is that is never gives up software copyright. All it does is gives me permission to view – and usually edit – the source code. (You also get “free” open source but it’s not as socialist as the proprietary software companies would have us believe.)

    Proprietary software is like buying a car that comes with the bonnet welded shut. To check your oil or water levels would require a trip to the manufacturer, and a fee to go with it. Their biggest concern is that, should I see the engine, I would immediately go and create my own car from scratch.

    Even though I can open my car’s bonnet, I really haven’t the first clue what most of the stuff does. I don’t have the expertise, skill or inclination to attempt to recreate a car. I trust that my car manufacturer knows how to build an engine, and car, better than I can.

    Likewise, I assume that Microsoft or Apple know a lot more about building operating systems than I do. And yet they insist that the bonnet be welded shut.

    I use the Apache Web server extensively, and it is open source. I can see how they built it and make my own Web server, but I’m not going to. Apache dominates the Internet, used on more than 60% of the top servers (and rising), compared to Microsoft’s 17% (and dropping). (See Netcraft for the latest figures.)

    In the cloud
    Those who don’t see the relation between the Internet and enterprise software will not like the next five years. There’s a shift to using Internet technologies such as Flash and HTML5 for enterprise applications, and simply outsourcing large portions of traditional infrastructure to the Web.

    Though a lot can be pushed to the ever-growing Internet cloud, if a specific software project is a core competitive advantage, companies will probably still keep it in house. But if you’re still building your internal apps as desktop apps in some obscure language, or as client-server apps in Java, you’re heading for trouble. The cost of finding skills to support these apps will steadily grow, while your competitors that have moved to more open technologies and languages, such as PHP or Python, will see their skills costs reducing as they can use the biggest pool of developers. The emergence of JavaScript as a serious language is adding impetus to this movement, and it’s probably the wisest place to invest in training and skills.

    The great thing about PHP, Python and JavaScript is they all lend themselves to an open-source environment. This in turn gives companies much more security in their code investments, and the skills to audit their software suppliers’ code — provided, of course, that they ship their code without the bonnet welded shut.

    • Jason Norwood-Young is CEO of 10Layer, building the tools news publishers use to publish. A recovering journalist still struggling with geekiness, he’s also been technical manager at the Mail & Guardian Online, technology editor at ITWeb and deputy editor at Stuff magazine.
    • Subscribe to our free daily newsletter
    • Follow us on Twitter or on Facebook


    Jason Norwood-Young
    Subscribe to TechCentral Subscribe to TechCentral
    Share. Facebook Twitter LinkedIn WhatsApp Telegram Email Copy Link
    Previous ArticlePlug pulled on Gijima talks
    Next Article Greenpeace dumps coal at Eskom HQ

    Related Posts

    AI learns to slow down and smell the melting planet

    14 September 2024

    The AI tool that has changed my life as a developer

    1 July 2022

    My year of Slack

    30 December 2015
    Company News

    Mental wellness at scale: how Mac fuels October Health’s mission

    15 July 2025

    Banking on LEO: Q-KON transforms financial services connectivity

    14 July 2025

    The future of business calling: Voys brings your landline to the cloud

    14 July 2025
    Opinion

    A smarter approach to digital transformation in ICT distribution

    15 July 2025

    In defence of equity alternatives for BEE

    30 June 2025

    E-commerce in ICT distribution: enabler or disruptor?

    30 June 2025

    Subscribe to Updates

    Get the best South African technology news and analysis delivered to your e-mail inbox every morning.

    © 2009 - 2025 NewsCentral Media

    Type above and press Enter to search. Press Esc to cancel.