Better metric: fix time from vendor's notification date Eeye says Microsoft has known about some unfixed goodies since the fall: http://www.eeye.com/html/Research/Upcoming/index.html
-C On Wed, Mar 31, 2004 at 11:20:02AM +1200, Jones, Steven wrote: > so MS wins.... > > Though it looks like the measurement is public disclosure? to fix time, not > the best metric possibly....so security experts might contact MS weeks when > they find the problem before they publicly comment .... While it looks like > Linux is its own worst enemy as "we" disclose the problem more quickly I > suspect via bugtraking.... > > how dows it go? > > lies, > > damn lies, > > and statistics.... > > regards > > Steven > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Michael Stone > Sent: Wednesday, 31 March 2004 11:10 a.m. > To: [EMAIL PROTECTED] > Subject: Re: Positive press for Debian's security team > > > On Tue, Mar 30, 2004 at 04:59:36PM -0600, Jones wrote: > >Positive press for Debian's security team. > > > >Using numbers from a pair of metrics, Forrester Research's > >recommendation was "businesses that value quick patches look to > >Microsoft and Debian". > > That's positive? They put us in the same category as Microsoft! This will > lose us some serious street cred. :) > > Mike Stone > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] >
signature.asc
Description: Digital signature