I am still fuming over this.
Today, in a meeting at work, I mentioned that one of our senior doctors was looking at an open source product that might be a worthy replacement for the aging and soon-to-die (it won't run under Win7) clinical information system we use.
One of the IT attendees said straight away that he wouldn't allow anything open source running in our environment. Why? I asked. "Well, it's insecure. If the code's available to anyone, then anything could happen. A security nightmare."
Aghast as I was, I had no instant answer. I mumbled something incoherent about open source encryption tools that probably nobody there gave any credence to at all and the conversation moved on.
...
-oblivion
Well let's "evolve" an answer. (Eek! Don't hurt me for sounding all PHB!) The "let's share a laugh" joke-but-half-true fantasy is:
"Oh, remember that free day you all got two months ago? I already replaced it. But I copied the front end exactly, so you never noticed, and remember how much y'all said it was better than ever? Exactly."
But yes. Fantasy land.
"...and the conversation moved on."
Bingo. Because there was no secondary higher level Mgt proponent who said "hold on, let's look at this!"
So sounds to me like there's a bit of networking to do before some Big Meeting. Because Joe from the Controller's Office might have chipped in, "ya know, he's got a point, it does X and Y and Z that we can't do, and it would save five grand per audit..."
But even a General Manager could have called a halt and said "let's go into this a few minutes. Why is it insecure? Do we assume Windows is safer?"