Linked by Thom Holwerda on Fri 16th Mar 2007 17:02 UTC, submitted by Shawna McAlearney
Privacy, Security, Encryption "Starting today, I plan on posting a monthly vulnerability scorecard for common server and workstation Operating System products. I'm going to keep these scorecards pretty clean of discussion, but you can review my methodology, sources and assumptions." Note that these results speak only of fixed vulnerabilities; the author aims to include information on non-fixed problems and the time it takes to fix problems as well. You should also read this, by the way.
Thread beginning with comment 222332
To view parent comment, click here.
To read all comments associated with this story, please click here.
PlatformAgnostic
Member since:
2006-01-02

I think you have to look pretty hard to find remotely exploitable security vulnerabilities in WinXP SP2 or in Vista (I'd be happy if you could point one out to me). Running AV is not strictly necessary on the open internet, and the major form of exploit these days is in fact PEBCAK.

I think platform security these days is given more attention than it deserves. I'm confident that finding holes and insecurities in websites with custom PHP, ASP.NET, or any other dynamic content generation will yield far more fruit. Stop trying to pick on Windows, and try to go after live.com, you'll get more change from that. (Not to mention 'live' anagrams with 'evil').

Reply Parent Score: 2