RE: Legal Liability for Company - IDS - Commercial Vs Open Source .

From: Andrew Blevins (ABlevins@arrowheadgrp.com)
Date: 01/29/02 

From: Andrew Blevins <ABlevins@arrowheadgrp.com>
To: "'Hall, Duane'" <hallu@hastings-ent.com>, security-basics@securityfocus.com
Date: Tue, 29 Jan 2002 11:25:12 -0800

Are you referring to Snort? Maybe you could point to all the Industry Awards
that the product has won (I'm sure the list is long). I also would figure
they'd like the cost aspect.
-Blevins

-----Original Message-----
From: Hall, Duane [mailto:hallu@hastings-ent.com]
Sent: Monday, January 28, 2002 2:02 PM
To: security-basics@securityfocus.com
Subject: Legal Liability for Company - IDS - Commercial Vs Open Source.

Ok. I have convinced management of the issues for the vendor liability.

BUT.....

What about the legal liability of the company using the product.
Here's an example:

From an investor standpoint or SEC standpoint would there be any
different legal liabilities from using
an open source product or a commercial product.

The reason I am asking all of this is I want to implement an open source
solution. Because, I believe it's a superior product to what's out on
the market. And not to mention its updated more frequently, but
management is hesitant.

What do you think?

Duane Hall

**************************
Duane Hall
Security Administrator
Hastings Entertainment, Inc.
806-351-2300 X-3945