Enterprise open source Toolkit

Story: Linux vendors hit back at Ballmer's email

• 
• 

Ballmer says MS has the shortest average time from the announcement of a security hole to the release of its patch.

That's statement is true. Unfortunately it misrepresents the reality.

Security holes in the Linux kernel and in Linux applications are announced *immediately* upon discovery, and posted to "bugzillas", along with demonstration scripts, so that users are immediately informed and can test their installations and take precautionary measures.

Microsoft, on the other hand, has forced security organizations to inform only them and not the general public. Microsoft has sat on some security holes for months, only to "announce" the hole the same day they release the patch. Worse, they attempt to generate upgrade revenues on their applications holes by not patching holes found in older products. Meanwhile, consumers use their Windows platform and products unware that they are placing their personal information at severe risk by connecting to the Internet.

Fortunately, Microsoft has been less than forthcoming *so often* on so many holes, that consumers are voting with their feet and moving to FireFox in HUGE numbers!

• 
• 

• 
• 
• 

Full Talkback thread