The Annual US-CERT FUD Festival

Joe Barr writes "Joe Brockmeier and I have teamed up in a story on NewsForge to point out how the mainstream and trade press misrepresent the annual summary of vulnerabilities from US-CERT. They're doing it again this year to make it appear as if it is more secure than UNIX/Linux. Pamela Jones did a similar report at Groklaw over the weekend." From the article: "One figure represents the vulnerabilities found in Windows operating systems: XP, NT, 98, and so on. The other represents a total figure not just for Solaris, AIX, HP-UX, the BSDs, and Linux, but for a hundred different versions of Linux. The sum of all the unique vulnerabilities from all the Linux distros does not equate to the sum of vulnerabilities in any single Linux distro, and one could say the same about the various versions of Windows. That's why it is a completely meaningless exercise to discuss those totals as if they present an accurate picture of the relative security of Windows and Linux. " We've reported on the US-CERT list already this year. NewsForge is a sister site to Slashdot.org, both of whom are owned by OSTG.

easier

[Ragein]

Simply just find out who counted the numbers and steal all his personal data, give him an option on which os to leave it on (add 100mb and no firewall) and there u go simple answers from statisticians.

My Own Research

[vjmurphy]

Using the patent-pending method of determining worth by comparing terms plugged into Google, I get the following:

Search for "Windows Bugs": 45,800
Search for "Linux Bugs": 23,400
Search for "Bunny Bugs": 31,100

From this method, I can determine that I should NOT watch Looney Tunes cartoons on my Windows Media Center PC. Or drink while posting.

Re:Downright Disingenuous

[MindStalker]

And yes I did just search the internet for a 1U or 2U cray for you to throw. Can't find any yet... I'll let you know when I do.

I'm richer than you are

[SHP]

I've got fifty one dollar bills, all you have is two hundreds. I've clearly got more money than you. Shine my shoes.

-SHP

Re:Huh?

[Anonymous Coward]

"anal-retentive" should be hyphenated. That is all.