Language Selection

English French German Italian Portuguese Spanish

Windows vs Linux security report card redux

Filed under
Security

Jeff Jones has expanded his project to count security flaws (publicly reported and fixed) in the major workstation operating systems and his latest numbers show Windows Vista has by far the best security profile when compared to the major Linux distributions.

eff Jones, security strategy director in Microsoft’s Trustworthy Computing group, led a TechEd 2007 discussion on the metrics and techniques used to keep track of vulnerabilities and offered a glimpse at his upcoming report card that compares flaws found/fixed during Vista’s first six months on the market against Windows XP, Red Hat Enterprise Linux 4 WS (full), Ubuntu 6.06 LTS (full), Novell SUSE Linux Enteprise Desktop 10 (full) and Mac OS X 10.4 (Tiger).

Full Post.



The Master of All FUDMeisters

This series of 'studies' gets smashed to pieces time after time and time (see comments in the article for example), but it doesn't stop Microsoft from publishing false figures (READ: lies) and sticking them in pamphlets. Some industry supervision ought to step in and handle this case of misleading benchmarks. They got caught before (e.g. cheating in IBM benchmarks in the most ridiculous of ways. They more recently did this to Novell).

Oh look, another "study"...*yawn*

*Switches to salesman voice*

Do you have a problem with a competitor?

Are you having a difficult time keeping up with them?

Well, don't worry! If you can't compete fairly, attack them publically!

With the new FUDMASTER-2000!

Order yours now, and we'll throw in a free DVD tutorial!

In the DVD, get great hints and tips to FUD your competitors! They won't know what hit them!

If you call in the next 10 minutes, we'll throw in a complementary "throwing chair"! Its a great stress reliever when your competitor annoys you! This is the same one used and certified by Microsoft CEO, Steve Ballmer!

Only 12 easy payments of US$29.95!

Act now!

*Switches OFF salesman voice*

Seriously though, we've been here before.

A Microsoft rep or a paid third-party presents a study which favours them.

They're done it with:

(1) "Get the Facts" website. (LOTS there!)

(2) Bill Hilf (Head of MS's Linux Lab) did it in an attempt to show Linux uses just as much as hardware resources as Windows...This failed miserably when you realise the system you need to run Vista (with all the eyecandy) smoothly.

(3) Attack GPL v3!
http://arstechnica.com/news.ars/post/20070522-microsoft-funds-questionable-study-attacking-gpl-3-draft-process.html

(4) And now this!

The fact is, such studies don't work on us. And how we beat them is to question and explain to others why one should be very skeptical. Any opensource geek knows charts and statistics can be manipulated to favour anyone. All one needs to do is select the right influencing factors to affect the result.

To be honest, you should ignore it. (like the other ones that fade into memory).

Come to think of it, we should file every study MS conducts or pays to be conducted in an archive.

Better yet, we should start a website that collects all MS's propaganda and document the tricks they do! It'll help MS's future competitors! (Gives them a clear view of what to expect!)

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

More in Tux Machines

CoreOS Linux 899.17.0 Released with OpenSSL 1.0.2h, NTPd 4.2.8p7, and Git 2.7.3

The CoreOS developers have released a new version of the Linux kernel-based operating system engineered for massive server deployments, CoreOS 899.17.0. Powered by Linux kernel 4.3.6, CoreOS 899.17.0 arrived on May 3, 2016, as an upgrade to the previous release of the GNU/Linux operating system, which system administrators can use for creating and maintaining open-source projects for Linux Containers, version 899.15.0. Read more

Black Lab Brings Real-Time Kernel Patching to Its Enterprise Desktop 8 Linux OS

A few moments ago, Softpedia has been informed by Black Lab Software about the general availability of the sixth DP (Developer Preview) build of the upcoming Black Lab Linux Enterprise Desktop 8 OS. Sporting a new kernel from the Linux kernel from the 4.2 series, Black Lab Linux Enterprise Desktop 8 Developer Preview 6 arrives today for early adopters and public beta testers with real-time kernel patching, which means that you won't have to reboot your Black Lab Linux Enterprise OS after kernel upgrades. "DP6 offers you a window into what's new and whats coming when Black Lab Enterprise Desktop and Black Lab Enterprise Desktop for Education is released. As with our other developer previews it also aids in porting your applications to the new environment," said Roberto J. Dohnert, CEO, Black Lab Software. Read more

USB stick brings neural computing functions to devices

Movidius unveiled a “Fathom” USB stick and software framework for integrating accelerated neural networking processing into embedded and mobile devices. On April 28, Movidius announced availability of the USB-interfaced “Fathom Neural Compute Stick,” along with an underlying Fathom deep learning software framework. The device is billed as “the world’s first embedded neural network accelerator,” capable of allowing “powerful neural networks to be moved out of the cloud, and deployed natively in end-user devices.” Read more

ImageMagick Security Bug Puts Sites at Risk

  • Open Source ImageMagick Security Bug Puts Sites at Risk
    ImageMagick, an open source suite of tools for working with graphic images used by a large number of websites, has been found to contain a serious security vulnerability that puts sites using the software at risk for malicious code to be executed onsite. Security experts consider exploitation to be so easy they’re calling it “trivial,” and exploits are already circulating in the wild. The biggest risk is to sites that allows users to upload their own image files. Information about the vulnerability was made public Tuesday afternoon by Ryan Huber, a developer and security researcher, who wrote that he had little choice but to post about the exploit.
  • Huge number of sites imperiled by critical image-processing vulnerability
    A large number of websites are vulnerable to a simple attack that allows hackers to execute malicious code hidden inside booby-trapped images. The vulnerability resides in ImageMagick, a widely used image-processing library that's supported by PHP, Ruby, NodeJS, Python, and about a dozen other languages. Many social media and blogging sites, as well as a large number of content management systems, directly or indirectly rely on ImageMagick-based processing so they can resize images uploaded by end users.
  • Extreme photo-bombing: Bad ImageMagick bug puts countless websites at risk of hijacking
    A wildly popular software tool used by websites to process people's photos can be exploited to execute malicious code on servers and leak server-side files. Security bugs in the software are apparently being exploited in the wild right now to compromise at-risk systems. Patches to address the vulnerabilities are available in the latest source code – but are incomplete and have not been officially released, we're told.