Security in the Age of Open Source