[for-q-clinton]

Depends on how you think about it. Secure in a general sense? The OSS development model won't make it more secure, but it won't allow security through obscurity -- obscurity that could later be compromised.

Hey another point of agreement. See we can find common ground! But now here's the tougher question. Which is the lessor of 2 evils. Security through obscurity OR buggy OSS code that has little support?

I guess the answer depends on how much code you can write yourself to fix the bugs. And how much suport the closed source vendor provides.

[antiRepublicrat]

Which is the lessor of 2 evils. Security through obscurity OR buggy OSS code that has little support?

Buggy OSS code vs. buggy proprietary code? OSS code that has little support will die. Living OSS code by definition has support, like Apache, Firefox and Linux, and usually faster responses for bug fixes than proprietary code from a large vendor.

If you happen to be stuck using OSS code that is no longer maintained, then you have the option of maintaining it yourself. If you happen to be stuck with proprietary code that is no longer maintained, then you're just screwed.