Language Selection

English French German Italian Portuguese Spanish

Symantec report sparks safe-browser debate

Filed under
OSS

In its latest Internet Security Threat Report, released yesterday, security vendor Symantec Corp. noted that in the first six months of 2005, the open-source Firefox Web browser had more confirmed vulnerabilities than Microsoft Corp.'s Internet Explorer browser.

So does that mean that the Mozilla-based browser is less secure than proponents have said and that Internet Explorer is more secure than believed?

Not exactly, according to security experts.

But that's not the whole story, said Vincent Weafer, senior director of Symantec's Security Response Team.

"Vendors tend to report vulnerabilities differently," said Mike Schroepfer, director of engineering for the Mozilla open-source project. Microsoft tends to group several confirmed vulnerabilities together in one announcement and patch, whereas Mozilla announces each confirmed vulnerability individually. That skews the number of confirmed vulnerabilities.

Other security monitoring companies, such as Secunia in Copenhagen, show different results than Symantec. We still believe Firefox is the safest browser around.

Full Story.

More in Tux Machines

Raspberry Pi powered juggling performance

Flashing pins are spinning tens of feet into the air on a pitch dark stage. It's a juggling performance. All of the pins are perfectly synchronized to flash different colors in time to the music. It's part of the magic of theater and a special night out with friends to enjoy a distraction from daily life. Part of the magic—and why it's called magic—is that the audience doesn't know how these secrets are made backstage. Read more

Munich Reversal Turnaround, Linus on the Desktop, and Red Hat Time Protocol

Monday we reported that Munich was throwing in the Linux towel, but today we find that may not be exactly the case. In other news, Linus Torvalds today said he still wants the desktop. There are lots of other LinuxCon links and a few gaming posts to highlight. And finally today, Red Hat's Eric Dube explains RHEL 7's new time protocol. Read more

NHS open-source Spine 2 platform to go live next week

Last year, the NHS said open source would be a key feature of the new approach to healthcare IT. It hopes embracing open source will both cut the upfront costs of implementing new IT systems and take advantage of using the best brains from different areas of healthcare to develop collaborative solutions. Meyer said the Spine switchover team has “picked up the gauntlet around open-source software”. The HSCIC and BJSS have collaborated to build the core services of Spine 2, such as electronic prescriptions and care records, “in a series of iterative developments”. Read more

What the Linux Foundation Does for Linux

Jim Zemlin, the executive director of the Linux Foundation, talks about Linux a lot. During his keynote at the LinuxCon USA event here, Zemlin noted that it's often difficult for him to come up with new material for talking about the state of Linux at this point. Every year at LinuxCon, Zemlin delivers his State of Linux address, but this time he took a different approach. Zemlin detailed what he actually does and how the Linux Foundation works to advance the state of Linux. Fundamentally it's all about enabling the open source collaboration model for software development. "We are seeing a shift now where the majority of code in any product or service is going to be open source," Zemlin said. Zemlin added that open source is the new Pareto Principle for software development, where 80 percent of software code is open source. The nature of collaborative development itself has changed in recent years. For years the software collaboration was achieved mostly through standards organizations. Read more