From: Thees Peereboom 

Geo,

>The question should really be what is the difference between a published
>flaw in IIS and a flaw in IIS that only the evil hackers know about.. If you
>ask it that way I think the difference becomes obvious.

Exactly, the more known, the better. But OSS adds an additional advantage
to that, not only can users defend themselves (by at least knowing that
there is a flaw) but they can also repair it themselves while users of
branded software will have to wait for their vendor to acknowledge the flaw
and secondly send out a fix for it.

- Thees Peereboom

--- BBBS/NT v4.01 Flag-4