Language Selection

English French German Italian Portuguese Spanish

Red Hat and Firefox more buggy than Microsoft?

Filed under
Security

Secunia has found that the number of security bugs in the open source Red Hat Linux operating system and Firefox browsers far outstripped comparable products from Microsoft last year.

Out of the operating systems monitored by Secunia - Windows (98 and onwards), Mac OS X, HP-UX 10.x and 11.x, Solaris 8, 9, and 10 and Red Hat (excluding Fedora) - Red Hat was found to have by far the most vulnerabilities, at 633, with 99 percent found in third-party components. (Linux distributions are generally composed mostly of third-party software, which is integrated by the distributor.)

Red Hat has taken issue with the figures, claiming the accurate number should be 404 vulnerabilities for last year.

Windows had only 123 bugs reported, but 96 percent of those were found in the operating system itself.

More Here




Red Hat bugs - another open source PR hit?

Red Hat and Firefox are reported to have more bugs in them than their Microsoft equivalents. But the truth is, as always, more complex. And once again, security is shown as a key point where rival approaches are bidding to distinguish themselves.

Secunia reported the discrpancy, stating in its 2007 Report that Red Hat had 633 flaws, compared with Windows' 123. However, Red Hat's Mark Cox quickly pointed out in a blog that a) the number was wrong, Cool it counted flaws in all the third party products associated with Red Hat's OS, and worst of all c) it counted several bugs six times, since it added up fixes made for the same bug, on multiple Red Hat products.

The interesting thing is why Secunia would push this story at all.

More Here

Firefox is fixed faster

Counting security vulnerabilities to compare the security of different software projects is flawed. It is only a useful metric if you are comparing a project to itself over time. I’ve discussed this topic here and here. It’s even more ridiculous to try and compare an open source bug count to a closed source project because you can see all the bugs in an open source project. You can only see the publicly found security issues for a closed source product, like Internet Explorer.

So what is interesting in the Techworld article is the measures of real risk to users:

More Here

Good additions there

When I saw the headline I was going to post these rebuttal articles too, but you beat me to it. Nice review of MEPIS BTW...

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

More in Tux Machines

Ubuntu and elementary

  • System76 wants to build its own hardware for its Linux-based computers
    System76 is building up quite a name for itself, being one of a very limited number of companies selling only computers running Linux-based operating systems. Now the aim is to branch out; System76 wants to design and build its own hardware, while representing the open source community as it does so. At the moment, the hardware used in System76 systems is outsourced, but in the future this will change. The company says that it is moving into phase three of its development cycle, and this "moves product design and manufacturing in house." And you should set your expectations high: "We're about to build the Model S of computers. Something so brilliant and beautiful that reviewers will have to add an 11 to their scores."
  • AppCenter Spotlight: Beta Testers
    Over the past month we’ve been beta testing the new AppCenter with a number of developers, from elementary OS contributors to backers of our Indiegogo campaign. After testing out the submission process and getting some apps into the store (and seeing rapid updates!), I wanted to take a moment to highlight some of the first apps.
  • elementary OS to get improved AppCenter, showing off a few new applications
    I have to hand it to the elementary OS guys, they have a massive focus on design and it does look quite incredible. It is easily one of the best looking Linux distributions, which I do admire. Their new AppCenter, for example, looks extremely clean and clear.

Beijing Zoo is No Place for Pandas

Pandas in Beijing Zoo
Photo credit: Nick Hopkins

I am a Panda lover. I work as a support engineer in an I.T company here in the United Kingdom. Most of my spare time is spent watching different Panda videos -- both old and new videos. Basically, it is my therapy; a 'stress release' for me. I find them to be adorable and precious creatures. As a matter of fact, I would like to volunteer to come to Sichuan. I want to experience and feel what it's like to be a Panda keeper, to be able to interact with them for real. The Panda is China's National Treasure, so it's a shame to watch the Panda videos from Beijing zoo, as the place is disgusting and not ideal for Pandas to live in (and for sure for all the rest of the animals who unfortunately got stuck in this prison cell).

The place looks like a ghost town. Lifeless and languished. Knowing that Pandas wear a thick fur on their body, can you imagine what it feels for them in 30C or 35C (summer temperature)? What it probably feels like all the time? Come on, if you really care, you must do something now, otherwise these Pandas will die. Please bring them back to their sanctuary where they really belong.

Linux 4.11 File-System Tests: EXT4, F2FS, XFS & Btrfs

With the Linux 4.11 kernel potentially being released as soon as today, here are some fresh benchmarks of Btrfs / EXT4 / F2FS / XFS on a solid-state drive and comparing the performance of 4.11 Git back to Linux 4.9 and 4.10. For those wondering if the block/file-system changes of Linux 4.11 have any impact on EXT4/F2FS/XFS/Btrfs for common I/O workloads or how these file-systems are comparing on this latest kernel, here are some benchmarks. Read more

Today in Techrights