Ilja van Sprundel, director of penetration testing at IOActive, reviewed BSD source code in his spare time. He says he easily found around 115 kernel bugs across the three BSDs, including 30 for FreeBSD, 25 for OpenBSD, and 60 for NetBSD. Many of these bugs he called “low-hanging fruit” Many of them have been present in code for a decade or more. NetBSD is the “clear loser” in terms of code quality, he says.”]

