__/ [ BearItAll ] on Friday 23 March 2007 13:14 \__
> Roy Schestowitz wrote:
>
>>
>> Microsoft issues Vista security scorecard, gives itself an A-plus
>>
>> ,----[ Quote ]
>> | But simply counting up vulnerabilities, patched or not, doesn't tell
>> | the whole story, argued Oliver Friedrichs, senior director of
>> | Symantec Corp.'s security response team.
>> |
>> | "The severity of [a] vulnerability plays into this, too," Friedrichs
>> | said today. "A single vulnerability that has a high severity could
>> | lead to the next Sasser or Blaster [worm], but an OS with a larger
>> | [bug] count, but with [ones rated] less high may be in a better
>> | defensive position overall."
>> `----
>>
>>
>
http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=windows&articleId=9014080&taxonomyId=125
>>
>
> I agree, Vista is the most secure OS of all of them, at the moment
>
> Ok, so it is so secure mainly because not much can install or run on it
> including much of MS's own software, but that is beside the point. I bet
> virus writers are having just as much trouble getting their software
> running on Vista as driver writers and application writers are.
>
> So yes Vista is at this time secure.
Would you believe they compared 3 months' lump of patches to the number of
patches delivered to RHEL4 (including so many pertinent packages which
Windows does not have)? How old is RHEL4 again?
> I read something last night, maybe vendors are expecting such a large
> change when SP2 for Vista comes out that they are not really bothering
> until then. Sounds reasonable to me, development time is costly and they
> wouldn't want to have to pay for it twice, could be wasted resources if
> they try now.
Adobe is among those who tell you to upgrade (pay for new software) or stay
with XP. I'm not sure iTunes is fully ready yet. It depends on who you ask.
I still have a large pile of unread Vista-tagged items that I haven't got
around to yet. I'll probably have a load of these tomorrow when I catch up.
--
~~ Best wishes
Roy S. Schestowitz | "ASCII stupid question, get a stupid ANSI"
http://Schestowitz.com | Open Prospects ¦ PGP-Key: 0x74572E8E
Tasks: 127 total, 1 running, 124 sleeping, 0 stopped, 2 zombie
http://iuron.com - knowledge engine, not a search engine
|
|
