Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]

RE: followup Qs on license changes

Subject: RE: followup Qs on license changes
Date: Tue, 11 Oct 2005 15:23:35 -0400
On Mon, 2005-10-10 at 15:18 -0400, Mercer, Jeff wrote:
I suspect that's something Renaud hopes would actually happen, i.e.
this change may inspire people to contribute major code. Often, folks
who are capable of contributions won't bother if someone else is
already doing it. In other words, Renaurd could be considered a victim
of his own productivity, :)
All you can do is *suspect* as there was no call for participants, no
public shouting that more input is needed to Nessus.

Huh? Have we been reading the same list?

It's certainly not been a topic every single day, but Renaud has brought up
the issue of Nessus contributions more than once.

The decision was made by Tenable, apparently without consulting the
people they wanted to help them. Shouldn't the first step have been
to ask for help if help was what was required ?

a) If it's an open source project, there's nothing to stop folks from
volunteering.

b) Per the point I was making, Renaurd has been the primary contributer to
the Nessus project. This is not at all unusual, most open source projects
have a tiny number of major contributors. Even Firefox is the work of only a
small core group of coders.

c) Renaud has said in his recent messages to this list that the main reason
for
   not open sourcing Nessus3 is there's been no significant contributions to
the
   project AND they are tired of supporting their competition which
unethically
   uses Nessus without acknowleding such.

You'll notice that there are now a couple of groups considering forking
the code, because they feel it's important to them.

And that's fine with me.

They *might* have contributed rather than forking if this had been
requested of them.

You've just proved my original point. Folks were too lazy to contribute as
long as someone else (i.e. Renaud) was doing all the work. Now that he's not
going to contribute to the GPL Nessus anymore, they are forced to get up and
do some work.

Or are you saying people are impossible of volunteering without constant
harassment?

Then again they might not have, the point is there was no attempt from
Tenable to ask for what they wanted.

I strongly disagree with that statement. Nessus started as an open source
project, BEFORE Tenable existed. There's been many years now for folks to
contribute. While there's not been an "adoption" campaign like with Firefox,
Linux, etc, Tenable has made it clear that contributions are welcome.

Merely being GPL is not a enough to create a successful OSS project,
you have to invite the help. Some OSS projects don't like outside help
and actively reject anything that comes their way through arrogance, I
don't believe Nessus has, but unless there is an open invitation and a
plea when code is scarce people won't know there is a shortfall. I'm on
the User/Devel/Plugin/Announce mailing lists and didn't notice any
pleas for help.

It's about the Tenable business model, not lack of contributions.

Tenable is a company that makes money off of appliances that uses Nessus. So
they hire programmers to work on Nessus. They've decided to write a bunch of
proprietary code and create a new version of Nessus and not GPL it. In other
words, the code has ALREADY FORKED.

It's not a big deal, because no one can rightfully say that Renaud or others
at Tenable are obligated to continue to contribute to Nessus. What would
have happened if Renaud just quit writing code and decided to become a tree
surgeon, and Tenable went out of business? Nessus would be in about the same
state it's going to be in now...


_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>