Linked by Thom Holwerda on Fri 6th Jan 2006 22:56 UTC
Privacy, Security, Encryption Open source experts have hit back at a study published by the United States Computer Emergency Readiness Team that said more vulnerabilities were found in Linux/Unix than in Windows in 2005, labelling the report misleading and confusing. The report has attracted criticism from the open source community. Linux vendor Red Hat said the vulnerabilities had been miscategorised, and so could not be used to compare the relative security of Windows and Linux/Unix platforms.
Permalink for comment 82685
To read all comments associated with this story, please click here.
RE[4]: this is ridiculous
by ivans on Sat 7th Jan 2006 02:21 UTC in reply to "RE[3]: this is ridiculous"
Member since:

Because there are few multi-user Windows machines.

It's just 5000 of them in my college ;) And every corporate desktop is ran in LUA, and you certainly cannot dismiss them so easily.

Also you seem to confuse the "privilege escalation" with "multiuser" - it's not the point to have hundreds of different accounts on the machine, two (Administrator and LUA) is just enough.

Fetchmail isn't available for Windows ;)

That's what you think ;)

Ah, but RHEL ships how much software, and Windows ships how much software? Where's that Windows PDF viewer again?

But it DOESN'T MATTER, if the package is a part of RHEL installation, it has to be counted! That's the bad thing of popular linux distros - thousand different programs, each having their own holes, most of them are a part of default install and most users WILL install them all.

Remote exploits do not involve user interaction. As you said, and I said, but for some reason you're still arguing.

It's because WMF fits into the same category as this FF flaw (user has to visit a malicious web page), and yet you see that bugtraq, secunia, frsirt..all marked this WMF and FF flaw as "remotely exploitable". You need to check on your terminology usage ;)

Reply Parent Score: 2