Slashdot Mirror


Bill Gates: Windows Patched Faster than Linux

petard writes "In a very interesting interview published by the Register, Bill Gates made several interesting claims about Longhorn. Many of them have been extensively covered recently, including plans to force users to patch automatically. Surprisingly, everyone seems to have overlooked his statement that Microsoft fixes bugs faster than Linux developers do. 'We've gone from little over 40 hours on average to 24 hours. With Linux, that would be a couple of weeks on average.' Either he's lying or woefully misinformed; their recent performance seems to be more on the order of 3+ months, or over 2000 hours."

471 of 679 comments (clear)

  1. Maybe? by grasshoppa · · Score: 3, Funny

    Maybe they meant they make bugs faster?

    --
    Mod me down with all of your hatred and your journey towards the dark side will be complete!
    1. Re:Maybe? by c4ffeine · · Score: 1

      new??? what are you talking about? we have been "serving our new masters" for years now... ERROR 404: INPUT ERROR BETWEEN CHAIR AND KEYBOARD ouch... erm.. i mean, voluntarily helping a benevolent corporation.

      --
      "73% of quotes on the Internet are made up" -Ben Franklin
    2. Re:Maybe? by binary+paladin · · Score: 1

      Obligatory at this point...

      In Soviet Russia the bugs fix YOU in an average of 24 hours in Windows, but it could be a few weeks with Linux.

    3. Re:Maybe? by Illbay · · Score: 3, Funny
      Interesting how in this case "faster" means "more often."

      HINT TO BILL: Maybe hardly EVER needing a patch is a GOOD THING.

      --
      Any technology distinguishable from magic is insufficiently advanced.
    4. Re:Maybe? by Randolpho · · Score: 2, Interesting

      And you're aware of some elusive Open Source software program that "hardly ever" needs a patch?

      'cause I still haven't found one. :)

      --
      "Times have not become more violent. They have just become more televised."
      -Marilyn Manson
    5. Re:Maybe? by PierceLabs · · Score: 1

      I use this Java based mail server called James that hasn't needed a patch in several months. Everything new added to it has been features, but I have yet to see a patch.

      Haven't had to patch Resin nor Jetty recently either.

    6. Re:Maybe? by grasshoppa · · Score: 1

      qmail, 4 years and counting.

      --
      Mod me down with all of your hatred and your journey towards the dark side will be complete!
    7. Re:Maybe? by hdparm · · Score: 1

      Are you sure 'stand' is correct in this case?

    8. Re:Maybe? by hpavc · · Score: 1

      or he is playing with the terms. perhaps they are possible innovations for a few thousand hours before they are classified as bugs.

      --
      members are seeing something, your seeing an ad
    9. Re:Maybe? by kpellegr · · Score: 1

      TeX of course!! Donald Knuth will give good money for anyone who finds a bug...

      --

      We are drowning in information, but we are starved for knowledge. (J. Naisbitt)

    10. Re:Maybe? by BlackHawk-666 · · Score: 1

      Try Postfix the mail server. It's pretty damn secure out of the box and hardly ever needs a patch.

      --
      All those moments will be lost in time, like tears in rain.
    11. Re:Maybe? by Per+Wigren · · Score: 1

      And you're aware of some elusive Open Source software program that "hardly ever" needs a patch?

      Here is one:

      /* hello_world.c v1.0 (c)2003 Per Wigren */
      /* Relesed under the GNU GPL v2 or higher. */

      #include <stdio.h>

      int main()
      {
      char str[5];
      str = "hello world!";
      printf("%s\n",str);
      }

      --
      My other account has a 3-digit UID.
    12. Re:Maybe? by scrytch · · Score: 1

      > And you're aware of some elusive Open Source software program that "hardly ever" needs a patch?

      I understand that /bin/true has been solid since its initial release...

      --
      I've finally had it: until slashdot gets article moderation, I am not coming back.
    13. Re:Maybe? by arth1 · · Score: 1
      > And you're aware of some elusive Open Source software program that "hardly ever" needs a patch?

      I understand that /bin/true has been solid since its initial release...


      Actually, it has some problems. The AT&T code relies on /bin/sh setting the RC to zero at the time of calling. This depends on an undocumented /bin/sh feature. The fix is as follows (assuming your "true" is a shell script):
      grep -c exit `which true` || echo "exit 0" >>`which true`
      Regards,
      --
      *Art
    14. Re:Maybe? by Minna+Kirai · · Score: 1

      That's not a valid use of the GPL. The license text requires that the entire license be included when you give out the program.

      RMS recommends that authors of software shorter than the GPL simply use Public Domain release, to avoid textual overhead.

    15. Re:Maybe? by JUSTONEMORELATTE · · Score: 1
      > I understand that /bin/true has been solid since its initial release...

      (emphasis mine, of course:)
      # uname
      HP-UX
      # cat /bin/true

      # @(#) $Revision: 64.1 $
      exit 0
      But maybe that's just HP. Let's check the Solaris box instead:
      bash-2.05$ uname
      SunOS
      bash-2.05$ cat /bin/true
      #!/usr/bin/sh
      # Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T
      # All Rights Reserved

      # THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF AT&T
      # The copyright notice above does not evidence any
      # actual or intended publication of such source code.

      #ident "@(#)true.sh 1.6 93/01/11 SMI" /* SVr4.0 1.4 */
      Hmm...

      --
    16. Re:Maybe? by pmz · · Score: 1

      And you're aware of some elusive Open Source software program that "hardly ever" needs a patch?

      All programs that don't provide a network service or local security service need only be upgraded when the user feels it is justified and useful.

      Also, if I disable a service entirely or, even better, don't have it installed, then, of course, patching becomes a moot point.

      UNIX/Linux/BSD offer a granularity of controlling these things that Microsoft only dreams about.

    17. Re:Maybe? by Soul-Burn666 · · Score: 1

      Hmm.. that code shouldn't even compile.
      char str[5] makes str a permanent pointer to a specific memory location in the size of 5 chars. The assignment str = anything; is illegal because str is a permanent pointer. Also, even if str was only a char*, then it would still crash, since "hello world!" is a temporary pointer to a temporary array of chars in the memory.

      Well, if the program's intention is to show bad, uncompilable code, then sure. If the intention is to make a prog that prints "hello world!" to stdout, then it sure as hell needs a patch.

      --
      ^_^
    18. Re:Maybe? by Per+Wigren · · Score: 1

      The intention was to show compilable but buggy code. It should had said char *str; instead. I was tired. :P

      --
      My other account has a 3-digit UID.
    19. Re:Maybe? by Illbay · · Score: 1
      Hmm.. that code shouldn't even compile.

      It's okay. I hear they've got a patch coming out soon...

      --
      Any technology distinguishable from magic is insufficiently advanced.
    20. Re:Maybe? by grasshoppa · · Score: 1

      Last I checked, the default distro for qmail did not include qpopper.

      Hell, I use courier-imap ( ssl ) to access my mail, so let me know if you have an exploit for that.

      --
      Mod me down with all of your hatred and your journey towards the dark side will be complete!
  2. A question of need by pwiebe · · Score: 2, Funny

    The real question is which OS needs to be patched faster.

    1. Re:A question of need by Overly+Critical+Guy · · Score: 1

      Well, that would be Linux and its apps, according to my sig.

      --
      "Sufferin' succotash."
  3. Lying or Misinformed? by SpaceLifeForm · · Score: 1

    Can *you* tell the difference listening to marketing folks?

    --
    You are being MICROattacked, from various angles, in a SOFT manner.
  4. 'Fast' Bug Fixing by The+Raven · · Score: 2, Funny

    Bill Gates is a very intelligent man... who is currently acting like a very intelligent trained monkey, spouting defensive FUD. But that's nothing new.

    I wouldn't be surprised if MS does make pages in under 24 hours. But I bet the process looks like this.

    - Microsoft notified about a problem.
    - Notification email sits in Exchange server for a week due to problems with a corrupted mailbox.
    - Flunky reads email, decides it would never happen in real life, demotes to low priority.
    - MS Updates their problem tracking database. Issue is lost in the db move.
    - Another flunky goes through and re-adds all the issues from emails.
    - Smarter employee upgrades importance, flags it as 'do now!'
    - Issue languishes for another few weeks.
    - Vulnerability 'approved for fix!'
    - Programmers fix it in under 24 hours.
    - Patch enters testing queue.
    - Patch is tested in an inadequate number of systems that all include only MS software an no 'unusual' configurations like, say, not using IE as default browser.
    - Patch is sent to deployment team.
    - Wait another week.
    - Deployment team packages fix, places it on wu.ms.c.
    - Fix breaks on many systems, system admins tear out hair, MS pats themselves on backs for their fine bug fixing system.

    Myrddin.

    --
    "I will trust Google to 'do no evil' until the founders no longer run it." Hello Alphabet.
    1. Re:'Fast' Bug Fixing by DAldredge · · Score: 1

      No. They call them contractors.

    2. Re:'Fast' Bug Fixing by The+Raven · · Score: 1

      I make no claim to accuracy or insider info. It's a parody, plain and simple, and as such is SUPPOSED to include FUD. Caricatures are the medium of satyre.

      --
      "I will trust Google to 'do no evil' until the founders no longer run it." Hello Alphabet.
    3. Re:'Fast' Bug Fixing by EvilTwinSkippy · · Score: 1
      Considering Windows 95 was out closer to 1996, 2000 closer to 2001, it makes perfect sense that problems only take 24 hours to solve.

      It's 24 hours in microsoft time.

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
    4. Re:'Fast' Bug Fixing by Read+Icculus · · Score: 1

      And a fuzzy goat belly is the medium of satire.

      --
      Anti-social? My code is just platform-specific.
    5. Re:'Fast' Bug Fixing by hdparm · · Score: 1
      Being outside the rabid Linux fanbase (don't know about Mac) hardly makes you sane.

      Oh, and look how quickly will Bill's fanboys mod this one to below 0.

    6. Re:'Fast' Bug Fixing by Ben+Hutchings · · Score: 1

      In what way is August 1995 "closer to 1996" than to 1995? Wouldn't the release date have to be in 1996 to be "closer" to it? Even if you're actually referring to the beginning of each year, how is February 2000 "closer to 2001" than to the beginning of 2000?

    7. Re:'Fast' Bug Fixing by EvilTwinSkippy · · Score: 1
      With cars the 1995 model was in showrooms starting September of 1994. If ford released it's new models in February of 2000, S&P would have their rating pegged at toilet paper.

      Microsoft picked the model designation scheme for windows to match that of the Big 3 automakers. Of course, automakers put out a new version every year and are required to support each model for at least 10 years, including recall work and repairs.

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
  5. When was it illegal to..... by 3seas · · Score: 1

    Lie?

    Or when did it become not illegal??

    1. Re:When was it illegal to..... by the_other_one · · Score: 1

      It's not a lie.
      It's an error.

      --
      134340: I am not a number. I am a free planet!
    2. Re:When was it illegal to..... by BalkanBoy · · Score: 1

      In a court of law - it's called perjury. You lie, or you tell something that is opposite of what you said you'd say under oath, and you go to jail.

      You can't lie even when you're marketing. There's something called 'truth in advertising' as well

      --
      'A lie if repeated often enough, becomes the truth.' - Goebbels
    3. Re:When was it illegal to..... by the_mad_poster · · Score: 1

      Are you lying if you don't know the truth but think you're telling it?

      Think about it... how often do you tell the boss the truth about an issue? Did you ever try? If you have the average PHB, you'll get the emptiest zombie-like stare you'll ever see in your life.

      I imagine they in the know at Microsoft (the programmers and engineers and whatnot) tell the boss(es) what the boss(es) want to hear, not the truth. Who knows... he might actually believe what he's saying.

      Then again, maybe their "statistical sample" was the fastest ever Microsoft fix against the slowest ever Linux patch.

      --
      Alito: A vote for Alito is a punch in the eye to put that bitch back in her place!
    4. Re:When was it illegal to..... by rifter · · Score: 1

      In a court of law - it's called perjury. You lie, or you tell something that is opposite of what you said you'd say under oath, and you go to jail.

      You can't lie even when you're marketing. There's something called 'truth in advertising' as well

      You don't see very many commercials, do you? Face it, there is no truth in advertising.

  6. Is Bill smoking by pair-a-noyd · · Score: 1

    Darl's crack pipe or is he smoking Darl's beef pipe??

    1. Re:Is Bill smoking by edalytical · · Score: 1

      Both!

      --
      Win a signed Stephen Carpenter ESP Guitar from the Deftones: http://def-tag.com/?r=0008781
    2. Re:Is Bill smoking by FxChiP · · Score: 1

      Speaking of inept administrators, there's one at my school who didn't even know how to work the command line. *sigh*

  7. Man hours? by mla_anderson · · Score: 1

    Maybe he means man hours, not time since the issue was discovered.

    --
    Sig is on vacation
    1. Re:Man hours? by Nasarius · · Score: 1

      Or time since they actually decided to work on fixing it.

      --
      LOAD "SIG",8,1
  8. His Watch Crashed by Rosyna · · Score: 2, Funny

    Didn't you know that Bill Gates' watch runs Windows CE and it crashed some months ago do to an exploit in RPC in the second hand. Now it just goes really slow. What is a month to you or me is 2 hours to him. He now talks that slowly as well.

  9. Jon Stewart quote: by big_groo · · Score: 1

    'Whuaaaaaaa?'

  10. It is a case of PR... by zoobaby · · Score: 1

    All Bill is doing is keeping MS in the news and in peoples mind until the next OS release (2006). Otherwise, *nix might get too much press coverage and take some minor amount of marketshare. Especially with all the releases happening, like Mandrake and the upcoming Redhat release.

  11. Lots of patches lately by Dancin_Santa · · Score: 1

    I don't know if anyone else has noticed this, but there have been a lot of security updates lately. The pace of patching has increased significantly since the time XP was released.

    I wonder if they've got some better testers in there or some new automatic code scanning software that can find exploits easily.

    There were 7 updates yesterday!

    1. Re:Lots of patches lately by Snowhare · · Score: 3, Insightful

      And NONE in the preceding month. Microsoft may (or may not) be fixing them in 24 hours. But they are now officially on a once a month patch RELEASE schedule.

    2. Re:Lots of patches lately by plugger · · Score: 1

      Is it just me, or do all the recent patches seem to have been released on a Wednesday?

    3. Re:Lots of patches lately by styrotech · · Score: 1

      Is it just me, or do all the recent patches seem to have been released on a Wednesday?

      No it's not just you, although it is usually early Thursday morning in NZ. Our company typically used Wed night for scheduled downtime and patching etc.

      It got very annoying to come in the next day after the downtime to a new bunch of advisories. This has been happening every 3 out of 4 weeks lately.

      That weekly schedule alone makes me doubt Bills claims, unless he also claims they only ever get notified of problems on Tuesdays.

    4. Re:Lots of patches lately by hdparm · · Score: 1
      That weekly schedule alone makes me doubt Bills claims, unless he also claims they only ever get notified of problems on Tuesdays.

      In other words, if he claims so, you would trust him?

    5. Re:Lots of patches lately by BlackHawk-666 · · Score: 1

      I've noticed that theire release schedule is generally to wait until at least three disclosures need to be made. They then make those disclosures on the next available wednesday. Just check your security notifications if you want proof of this.

      --
      All those moments will be lost in time, like tears in rain.
  12. patches speed by neves · · Score: 1

    He wasn't lying, but talking about the time between the moment he yell that has found a bug in his windows desktop, and the fix arrives from a Microsoft engineer. It's not about average users.

  13. He's making an assumption... by Eric+Damron · · Score: 1

    Gates is assuming that when you do something enough times you get better at it than people who don't do it as often...

    --
    The race isn't always to the swift... but that's the way to bet!
  14. Re:hahah by arnoroefs2000 · · Score: 1

    btw: FP

    good point.

  15. Hmmmm by Asprin · · Score: 1

    wouldn't patch time depend on the bugs involved?

    --
    "Lawyers are for sucks."
    - Doug McKenzie
  16. Ok everyone ready by AvengerXP · · Score: 1

    Everyone choose your side!

    Round 1,168,139,856

    Fight!

    --
    Trolls dont like to be Flamebait, because they burn so well. Protect our Troll heritage!
  17. *I* think he's referring to... by leonbrooks · · Score: 2, Funny

    ...his personal desktop. "It's good to be da king!" (-:

    --
    Got time? Spend some of it coding or testing
    1. Re:*I* think he's referring to... by SoSueMe · · Score: 1

      That is the MS attempt at "right to left" scripting for the Hebrew Office-Mac solution.

  18. Progress by Our+Man+In+Redmond · · Score: 1

    Quoth Bill: But apart from Photoshop, I can't think of desktop applications where you would need more than 4 gigabytes of physical memory

    He's broadening his outlook (so to speak). I can remember a time when he couldn't think of any reason why you'd need more than 640K.

    --
    Someone you trust is one of us.
    1. Re:Progress by The+Raven · · Score: 1

      This quote won't go down in history though, primarily because whether or not he thinks it is important, very soon more than 4GB will be available on the desktop. We were stuck with 640KB for a good 5 years past the point when it inconvenienced us. We will get past 4GB before it is a significant problem, whether or not he thinks it is important.

      --
      "I will trust Google to 'do no evil' until the founders no longer run it." Hello Alphabet.
    2. Re:Progress by DAldredge · · Score: 1

      I can't believe he talked about a non Microsoft product...

    3. Re:Progress by zambuka · · Score: 1

      Seems a lot of people are making fun of this statement but apart from photoshop what desktop applications out there would need 4G of memory?
      I can thnk of maybe 3ds Max or Maya and other 3d packages benefiting. Otherwise nothing much else comes to mind.

      I know databases and application servers would benefit significantly but these are far from being desktop applications.

      waiting now for the barrage of "next version of MS Office" jokes

    4. Re:Progress by ocelotbob · · Score: 1
      Uh, desktop video perhaps? Making it so that you can record and edit a decent amount of movie footage with the entire movie in memory so that there is little to no perceivable lag in playback.

      Similar cases can head down to the filesystem level. Set up your entire hard disk as one large virtual memory subsystem so that any action is just an mmap(2) away. Seems to me it would make programs a lot simpler, as many file operations would be able to be handled by easier to use memory management operations instead.

      --

      Marxism is the opiate of dumbasses

    5. Re:Progress by zambuka · · Score: 1
      I had thought about that one but from current experience a fast hard drive, a clean partition and a fast processor is more useful than bucketloads of memory.
      Yes memory can help but currently I find no perceptable lag with video playback provided I am not trying to view any special effects in real time.
      I work with a dual 500mhz G4 with 1 G of memory. A Video of any length (currently working with a 5 hour video) rarely pushes the memory usage more than 75%.
      I do however regularly grind the processors to 100% of long periods of time, 5-6 hours typical.
      Others may have different experience so I don't speak for all those who do video editing.

      Similar cases can head down to the filesystem level. Set up your entire hard disk as one large virtual memory subsystem so that any action is just an mmap(2) away. Seems to me it would make programs a lot simpler, as many file operations would be able to be handled by easier to use memory management operations instead


      This actually sounds like a great idea for a file system. It would make life easier and seriously blur the line of memory.
      Oh.. not being a programmer I can only guess that mmap(2) is some kind of memory handle or something similar in c or c++.
    6. Re:Progress by juan2074 · · Score: 1

      Watch out Adobe! You are on the list.

    7. Re:Progress by ocelotbob · · Score: 1
      I work with a dual 500mhz G4 with 1 G of memory. A Video of any length (currently working with a 5 hour video) rarely pushes the memory usage more than 75%.
      I do however regularly grind the processors to 100% of long periods of time, 5-6 hours typical.

      The issue with your memory usage is the fact that the program is internally swapping that memory in and out, adding to your CPU load as it has to fetch part of the file from the hard drive, and then bring it into main memory so it can actually use it. Thus, going to 64 bits and greater memory, even with all else the same, can most likely cause your CPU load to drop when using memory-intensive programs. It's not much CPU load, but it's still there, and can make the process a bit friendlier.

      I can only guess that mmap(2) is some kind of memory handle or something similar in c or c++
      Yeah, mmap is a function that binds some other item, like I/O or disk space to memory.
      --

      Marxism is the opiate of dumbasses

    8. Re:Progress by Scorpionad · · Score: 1

      AH!! But you all forget that windows itself will gobble up all the memory it can get it's greedy little kernel on. Don't believe me? put 128meg in your machine then reboot with 1gig...trust me the more memory you have the faster it will run. I thought 1gig would be overkill when I upgraded to it but now I see that if I put 2gig in it would still not be running as fast as it could. It's not the apps that need the memory its the friggin overhead in there OS."LUG's are AA for computer junkies"Tux Rocks

    9. Re:Progress by Overly+Critical+Guy · · Score: 1

      It won't go down in history because he's talking about the current state of things. Currently, there aren't any desktop applications needing over 4 gigabytes of physical memory.

      It's really silly to harp on these statements. Is that all people have got?

      --
      "Sufferin' succotash."
  19. I think you don't understand what bugs he's... by Assmasher · · Score: 1

    ...referring to.

    --
    Loading...
  20. forcing patches? by Dreadlord · · Score: 1
    ... including plans to force users to patch automatically...

    Most Windows admins know that patches should be installed only when they are really needed, because M$ has a bad history of releasing patches that break systems instead of fixing them, Windows XP SP 1 is an example.
    This doesn't sound good to me, unless they are willing to test their patches extensively before forcing users to install them.

    --
    The IT section color scheme sucks.
    1. Re:forcing patches? by rbird76 · · Score: 1

      wouldn't that be out of character? Testing and security don't seem to be their strong points. Forcing users to do what they want, on the other hand...

    2. Re:forcing patches? by Belgand · · Score: 1

      More than just breaking systems Microsoft has a poor history of forcing new changes in licensing in patches. The license text that gives them complete access to my computer (IIRC) for installing SP 1 is the main reason I haven't done so. Now they'll have the option to force me to accept the terms of a license I didn't have any real option to turn down. I wonder what the possible legal implications of this are? Must I adapt to a new license at such time? Am I not allowed to continue to use the unpatched software under the previously licensed terms? How in the hell is this legal at all?

    3. Re:forcing patches? by westlake · · Score: 1
      The license text that gives them complete access to my computer (IIRC) for installing SP 1 is the main reason I haven't done so.

      You've put off installing a Windows service pack for a year because of a EULA whose terms you have forgotten?

      Am I not allowed to continue to use the unpatched software under the previously licensed terms?

      In a word, yes, but suck it in or take your system off-line.
      It isn't dear old Granny on AOL who is poisoning the net with every worm and virus, it's you.

    4. Re:forcing patches? by Belgand · · Score: 1

      Damn, I'd also better take down that firewall and stop following basic anti-virus measures. I should probably also make friends with a lot of very stupid people that send me viruses. Guess this is why I haven't recieved a single virus or worm in my entire life.

      As for the terms of the EULA, well... I read them at the time, I didn't agree with them, so I exercised my right to not install it. End of story.

      Basically you should be blaming Microsoft. When they see a service pack as a means of forcing new licensing terms on the public, of putting highly questionable clauses in there, well... they're the ones not interested in security. Want to make things more secure? Test the hell out of it and release a good, solid patch with reasonable speed that doesn't try to force new crap on people who just want to fix problems that shouldn't be there in the first place.

  21. True... by BorgHunter · · Score: 1

    Windows bugs are patched faster. Microsoft has a whole team out working on this stuff. What is not mentioned is the fact that there are so many more bugs in Windows than in Linux anyway. I won't give Microsoft much, but they do do a lot of patching. Problem is, this patching should not even be necessary: Microsoft should test their OSs more thoroughly and anticipate these problems before shipping their product. Open source is the easiest way to do this, via open source beta versions. Hence, Linux has fewer bugs on Final release day.

    --
    "Excuse me, did you say 'Trekker'? The word is 'Trekkie.' I should know; I created them." -- Gene Roddenberry
    1. Re:True... by shaitand · · Score: 1

      ok, windows bug is reported (wait 3months), someone in the know gets an interview published in which he mentions the bug (wait a month), patch is released.

      now, linux security bug is reported (wait 3hrs), most people already have the patch.

    2. Re:True... by frdmfghtr · · Score: 1

      Well sure...MS is driven by marketing, not technological goals. Linux is driven by technical achievement. Linus has no financial incentive to speed the development of the kernel, so why rush it? Microsft, OTOH, has a product line that, despite what may be said in the press, seems to be driven by the marketing department and not the software engineers.

      I'm not that heavy into Linux, but I do recall that the talk of the town was when the 2.4 kernel would come out. IIRC, it was delayed and delayed, but when it came out, it came out right.

      Now, MS has a big task at hand in generating a "for the masses" OS that works on a infinitely varying set of hardware combinations. With so much code needed to handle that much hardware diversity, of course there are going to be bugs and patch after patch after patch.

      I'd also like to point out that I can download updates and patches from Red Hat on a nearly weekly basis, seemingly as often as I do with Microsoft.

      I'm not sure where I'm going with this, but let's not fool ourselves into thinking that Windows is Swiss Cheese (while it does have a lot of holes, simple precautions such as virus scanning and firewalls can protect against a lot of exploits) and Linux is solid as a rock (which it certainly isn't).

      Disclaimer: I'm not pro- or anti-Microsoft (I use Outlook and Mozilla Firebird, Word and OpenOffice), nor am I a programmer by any stretch of the imagination; I am pro-OS choice and favor what helps me get my job done the easiest.

      --
      Government's idea of a balanced budget: take money from the right pocket to balance...oh who am I kidding?
    3. Re:True... by oldgeezer1954 · · Score: 1

      Have any source for this? In my experience it's absolutely not true using the time from bug disclosure(note 1) to patch issue. I've been managing linux boxes since 95, using it on my desktop for three years and managing ~350 windows pc's since 95.... Note 1: My only real frame of reference has to be back to when disclosures were made.... Now that's infrequent since ms became a founding member of the cosnortium intent on not disclosing bugs till fixes are released or until the vendor has had an undefined 'reasonable time' to do so. I'd love to see your sources.... I doubt they exist.

  22. It's probably... by phxhawke · · Score: 1

    ...Bill's machine that gets patched that quickly.

  23. hmm by helix400 · · Score: 1

    Gates: "I can't think of desktop applications where you would need more than 4 gigabytes of physical memory."

    Heh, so, 20 years from now, will we laugh at that like we do with the old quote "640K ought to be enough for anybody"?

    Here's hoping to yes =)

    1. Re:hmm by phxhawke · · Score: 1

      Heh! Why wait 20 years when you can start now. Get a leg on the rest of us :)

    2. Re:hmm by Brandybuck · · Score: 1

      His old 640K quote was woefully uninformed. Even without the GUI and a multiuser environment, that's still a pretty low number. All you got to do is say "16 bit microprocessor" and suddenly the limitions of 640K become obviously apparent.

      But the 4Gig quote might be more on target. I'm not going to look out fifty years from now and say it will still hold, but neither is Bill. He's saying he can't think of any desktop applications that would need more than that. Frankly, neither can I. I can think of some database applications running on a server administered by a nincompoop that might need more. I can think of some atmospheric modeling simulations that might need more. But for the life of me I can't think of any word processor that would need more than that.

      Of course, the operative word here is "need". I can easily imagine software out there that might require it because the programmer was lazy, but it won't "need" it in the sense that you could get the exact same feature set with one gig with a competent programmer.

      --
      Don't blame me, I didn't vote for either of them!
    3. Re:hmm by ocelotbob · · Score: 1

      Yes, in many cases, an app running with >4GB RAM can be made to be run in a 1GB memory space, but at the cost of efficiency. You've got to run your own swapping and virtual memory management routines so that the massive dataset can actually be used. And before you say you can't think of an app off hand that would benefit the common person, imagine how much nicer it would be to have faster random access when dealing with the 20gigs of uncompressed footage you shot using your video camera. Suddenly, 64 bit memory access starts making sense, non?

      --

      Marxism is the opiate of dumbasses

    4. Re:hmm by Brandybuck · · Score: 1

      Do you really need to hold 20Gigs of video footage in RAM+swap all at the same time? Really?

      I fear the day when MSWord requires 4Gig RAM to run just because five users out there might want to embed a uncompressed video in their weekly status report...

      --
      Don't blame me, I didn't vote for either of them!
  24. Lies, damn lies, etc. by mr.+methane · · Score: 1

    I'll give MS credit for being faster on average. Sometimes, linux apps have patches out in a matter of hours. Other times... not so fast. Or the patch would put you out-of-sync with the distro you're using, unless you wait for the "approved" patch.

    Long story short, I think the "windows-vs-linux" thing is a lot like "cars-vs-SUV's". Someone call someone else a Nazi so we can move on. :-)

    1. Re:Lies, damn lies, etc. by binary+paladin · · Score: 1

      You NAZI! (I feel better having said that.) The problem with "Linux" patches is that often times it's not "Linux" being patched. Windows is far more than an operating system anymore. It's a software suite included with a kernel. If Apache has a vunerability it has nothing to do with Linux. I realize this is along the lines of the GNU/Linux naming ordeal, but seriously... If there's a vunerability in say... Winamp, that's a Winamp thing. But it seems like if it takes four weeks for an XMMS patch, it's a "Linux" issue.

    2. Re:Lies, damn lies, etc. by EvilTwinSkippy · · Score: 1

      Sorry, you can't deliberately invoke Godwin's law. The thread still lives...

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
    3. Re:Lies, damn lies, etc. by antiMStroll · · Score: 1
      MS patches = oranges

      Linux app patches = pears

      It's popular to think of Linux + GNU + apps as a single entity but it leads to nonsensical comparisons like the one Gates made. If you're going to include all the third party apps available for Linux, be fair and include patch response times for all the third party apps available for Microsoft.

      A truly fair comparison is to assemble a list of packages that comprise a functional equivalent to a shipping Windows OS - say Linux + Apache + Mozilla + Linuxconf or Webmin, but not Sendmail, SSH, etc. - and compare patch/vulnerability histories.

    4. Re:Lies, damn lies, etc. by mr.+methane · · Score: 1

      Agreed, but the semantic differences become lost in the stream of expletives when a clueless consultant plugs in his msblaster-infected laptop, or you arrive at work in the morning to find that what used to be your mysql database server is now a warez/irc bot server.

    5. Re:Lies, damn lies, etc. by harikiri · · Score: 1

      This happened at our office, with Welchia. But in this instance the consultant was from IBM.

      Now we're forcing all third-parties using our internal lan to either use our standard operating system (SOE) build, or VPN in using secureclient (which enables us to manage a firewall on their system).

      Of course, when you can still plug in your PC and get a dhcp ip address... Bleh.

      --
      Man watching 6 MSCE's around a sun box, looks alot like the opening scene's of 2001:space odyssey...
  25. Well... by Kelz · · Score: 1

    I think he's talking about major holes, such as the recent worm attacks and the such. While I agree that Linux patches bugs and the such faster, if there is a major attack on windows systems, M$ is usually very fast in responding.

  26. Hogwash by mabu · · Score: 1

    Yes, Microsoft is faster at patching things AFTER the weaknesses they've known about for the previous ten months are finally exploited, AFTER people that report their problems months earlier don't see a fix and publicize the vulnerabilities.

    Microsoft is indeed very quick at fixing things after their corrupted servers have DDOS'd the rest of the Internet. Congratulations Microsoft!

  27. As far as patches and updates go... by Mondain98 · · Score: 2, Insightful
    I really wonder if Microsoft has so many more bugs and so many more patches than Linux.

    I mean, after I install an average workstation of redhat 9.0 I see a lot more patches downloaded from up2date than the 36 or so for a fresh XP Pro install. Of course I mean for all the apps, not just core kernel stuff.

    Minor version numbers for *nix packages seem to increase faster, which is a good thing because that means more holes getting patched faster [than Windows].

    I guess my comment is that we need to see more Windows patches at a much faster rate, and stop being surprised when MS issues 4 patches in one day. Hell, up2date issues 4 new updates a day on a slow day ;)

    1. Re:As far as patches and updates go... by cranos · · Score: 1

      Are you including the Service Pack for XP in that number because you are going to have a shitload of patches in that one.

    2. Re:As far as patches and updates go... by Nintendork · · Score: 1
      Are you including the Service Pack for XP in that number because you are going to have a shitload of patches in that one.

      Only a limited number of those patches will be security related. If you really want to see how many security patches have been released for a microsoft product, simply go to technet's security bulletin page.

      -Lucas

    3. Re:As far as patches and updates go... by Slime-dogg · · Score: 1

      heh. With Linux, I can expect a kernel upgrade every few weeks or so.

      With Microsoft, I expect one. When I go to Windows Update for the first time, it notices that I have an Athlon, and then downloads the Athlon compiled Kernel.

      It's like ... Windows: Whoop-dee-fucking-doo, I get the same kernel compiled for the Athlon. With Linux, I get a kernel that's been worked over for security and efficiency, which I can then compile specifically for an Athlon-XP.

      --
      You need to restart your computer. Hold down the Power button for several seconds or press the Restart button.
    4. Re:As far as patches and updates go... by archen · · Score: 1

      patches for what though? Updates for the 10 different mail clients, the database applications, the zillion other programs that come with rh9? XP doesn't come with much, and it doesn't patch much either (ie it only patches the OS, not SQL server, or Office, etc). Besides which it's not the patches that bothers me, it's the warnings. A typical Linux advisory reads "may be able to cause a denial of service attack" - ie crash a daemon or lock up something. A typical MS advisory reads "could allow an attacker to gain total control of your computer" - ie own you.

  28. Sorry Bill, by BCW2 · · Score: 1

    Ive had notification of patches from Red Hat in my email before I read about the need for it on Slashdot. Sameday service, something MS has never done on anything. How many bugs has Microsoft ignored? There are things in Win 95, 98, 2000, and even 3.11 that never got fixed, then corrupted the next release.

    --
    Professional Politicians are not the solution, they ARE the problem.
    1. Re:Sorry Bill, by Aqua+OS+X · · Score: 1

      Moreover, a lot of MS patches are released after a security hole has been exploited or a bug has causes havoc.

      In the Linux, Unix, Mac world, patches are usually released well before the shit hits the fan.

      --
      "Things are more moderner than before- bigger, and yet smaller- it's computers-- San Dimas High School football RULES!"
  29. No knee jerk responses needed by PhysicsExpert · · Score: 1

    Althought I think the average slashdotter will have a knee jerk reaction to this, I think Microsoft have been pretty good at realeasing patches so far and that most windows viruses have either been spread by either unpatched machines or buggy third party software.

    Here in the lab we have a cluster of windows machines that regularly have uptimes of over two weeks (essential when evaluating climatic models involving quadratic equations). Our Linux machines have slightly longer uptimes, but they often require (admittedly infrequent) kernel rebuilds which can leave them out of action for up to a day. In addition we find windows update far easier than compiling linux fixes from source (we are after all partical physcists and not sys admins)

    --
    All that glitters has a high refractive index.
    1. Re:No knee jerk responses needed by Omicron32 · · Score: 1

      It takes a day to recompile a kernel?

      What the hell are you doing? The only thing that would take a day to recompile a kernel on is something like a 486.

      I can upgrade to the latest kernel version usually in less than an hour. Less than 10 minutes if I can `make oldconfig` without causing too many problems.

    2. Re:No knee jerk responses needed by Lockjaw · · Score: 1

      (we are after all partical physcists and not sys admins)

      I agree - I don't think a qualified sysadmin would be compiling fixes from source when there are plenty of distributions with good binary package (and kernel) update mechanisms.

    3. Re:No knee jerk responses needed by TheLastUser · · Score: 1

      Why do you have to compile your own kernel? Maybe should switch to a commercial distro instead of making your own. Get redhat and up2date. You will have nice patched kernels, tested and ready for you to download. Easier than windows update in my expierience. Having your lunix servers down for a day seems like your choice here, not a flaw in the OS.

    4. Re:No knee jerk responses needed by Wolfrider · · Score: 1

      --You *do* know that you can (re)compile the kernel and modules on another machine, and copy them over, right? (Unless you compile on an AMD and try to use it on Intel, that doesn't work in my experience.) That little tip might help you cut back on downtime.

      --
      .
      == WolfriderV6 == I'm willing to admit that *I just might* be wrong... Are you??
    5. Re:No knee jerk responses needed by AstroDrabb · · Score: 1
      Here in the lab we have a cluster of windows machines that regularly have uptimes of over two weeks
      Wow! Two hole weeks? I think you are trolling, the newer versions of MS Windows should be able to stay up longer then that. Granted, they start to slow down and need a reboot, but they should be able to stay up.
      Our Linux machines have slightly longer uptimes, but they often require (admittedly infrequent) kernel rebuilds which can leave them out of action for up to a day
      What kind of boxes are you using? 486's? I can compile my kernel in about 6 minutes. On SMP boxes, that number gets much lower. Why not just use a distro that uses binary packages such as Red Hat, Mandrake, SuSE, Debian, Slackware, etc? All these will provide you with a binary compiled for you that you just install.
      --
      If Tyranny and Oppression come to this land,
      it will be in the guise of fighting a foreign enemy. -James Madison
    6. Re:No knee jerk responses needed by ONOIML8 · · Score: 1

      "(we are after all partical physcists and not sys admins)"

      No offence, but I'm just a radio tech and I can patch the linux kernel on a running machine in just a minute or two. If these are important machines (and they must be if you're that concerned with them being up to date)then maybe you should have a sysadmin taking care of them.

      When you need legal work you hire a lawyer. When your car is broken you take it to a mechanic. When you need a tumor removed you see a surgeon. When you need whatever a partical physcist does done you see the partical physcist. Call me when your communication system needs work.

      So when you've got computers that you rely on, and those computers need things like kernel patches, have a sysadmin come take care of it. He'll do it in less time and you can focus on your physics.

      --
      . Quit playing Monopoly with Bill. Switch to one of many non-Microsoft products today.
  30. Suppose this is true... by Eberlin · · Score: 1

    Wouldn't such a fast patching be nullified by the new practice of releasing patches monthly?

    Sure, we've got the fix...but you'll have to wait next month 'til we release it.

    Of course this 24hr patch average sounds a lot like a case of bogosity.

  31. He admits MS doesn't test the patches ... by fjpereira · · Score: 1

    If it takes 24 hours to look at the problem, find a solution, change the code and make it available on the web site, then they are admiting that they aren't fully testing the patches before releasing it...
    Where's the quality assurance ?

    1. Re:He admits MS doesn't test the patches ... by hesiod · · Score: 1

      > > Where's the quality assurance ?
      > Right back at ya, Linux user.

      With Linux, the end-users can do QA. With MS, we have to assume (sometimes incorrectly) that the new code isn't worse than the "buggy" code.

  32. Linux the kernel or Linux the system? by Mark19960 · · Score: 2, Interesting

    It seems that Microsoft is attacking the system, not the kernel.
    I havent really heard anything about Linux, really.
    I have heard about the SSH issues, ect, but never about Linux. SSH, OpenSSH,ect. are just parts of a Linux system, or BSD for that matter.
    has there actually been a Linux KERNEL exploit in the last few years?
    and besides, when there is a Linux KERNEL exploit its fixed in hours, or minutes! I think it would be impossible for M$ to match that.
    this article qualifies for more M$ Fud.

    1. Re:Linux the kernel or Linux the system? by mcroot · · Score: 1

      Ptrace hole ring a bell ? How about ftp.gnu.org getting rooted as a result of it ? Please.. if you aren't informed on security matters, cease commenting about them.

    2. Re:Linux the kernel or Linux the system? by drinkypoo · · Score: 4, Insightful

      When is the last time a vulnerability in the windows kernel was found? To be fair, we will include vulnerabilities in the HAL, since in Linux the kernel contains that functionality as well.

      OpenSSH is a part of Linux as much as RPC or Windows Messaging is a part of Windows.

      If a linux kernel exploit is fixed in minutes, then it was a pretty dumb bug. Microsoft has been good lately about doing proactive security reviews, and they often find holes before anyone else does. Linux mostly seems to do reactive fixes, at least from where I'm sitting. Which is to say, at a Windows XP machine, but right next to a gentoo Linux system.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    3. Re:Linux the kernel or Linux the system? by GammaTau · · Score: 1

      It seems that Microsoft is attacking the system, not the kernel. I havent really heard anything about Linux, really.

      There have been local root compromises and remote DoS issues this year. I'm not sure about remote root compromises. (I've just patched the systems without trying to understand every single detail in security advisories.)

      and besides, when there is a Linux KERNEL exploit its fixed in hours, or minutes!

      Dream on.

    4. Re:Linux the kernel or Linux the system? by BurritoWarrior · · Score: 1

      Of course there have been kernel exploits over the last few years. Multiple. My rough guesstimate without doing any research (from memory) is this averages about 1 per quarter.

      It is still light years better than MS, who seems to have a remote code execution exploit about 1.5 to 2 times per month (once again from memory).

    5. Re:Linux the kernel or Linux the system? by DA-MAN · · Score: 1

      turning off OpenSSH does not cause the entire system to stop working properly. RPC on Windows does.

      There is no real way to compare apples to apples. I can disable anything on my Linux box that I don't need and have it boot up and work as before (minus the disabled service). I can't expect the same of Windows.

      --
      Can I get an eye poke?
      Dog House Forum
    6. Re:Linux the kernel or Linux the system? by binary+paladin · · Score: 1

      Not really... because he's referring to Microsoft products. He's not talking about programs beyond Microsoft's scope. Apache, MySQL, and PHP are all different groups whereas IIS, MSSQL and ASP are all Microsoft.

      All in all a "Linux System" and a "Windows System" are very different animals. I think it's silly the way a lot of things are identified with Linux. Like... Apache. It runs on EVERYTHING! Win32, BeOS, BSD, etc. It has nothing to do with Linux.

    7. Re:Linux the kernel or Linux the system? by holstein · · Score: 1
      Linux mostly seems to do reactive fixes

      Not exactly. There is a lot of "potential holes" that are patch from version to version. But there is just nobody that feels that this is worth a press release...

    8. Re:Linux the kernel or Linux the system? by lone_marauder · · Score: 1

      OpenSSH is a part of Linux as much as RPC or Windows Messaging is a part of Windows.

      So you can run Windows without a scrap of either of those applications running and/or run completely different renditions of each produced by other parties?

      --
      who are those slashdot people? they swept over like Mongol-Tartars.
    9. Re:Linux the kernel or Linux the system? by Billnvd65 · · Score: 2, Insightful

      "OpenSSH is a part of Linux as much as RPC or Windows Messaging is a part of Windows."
      To test that theory, I will turn off ssh on linux and you turn of RPC on XP, no let's both reboot and see who gets back first! Enough said!

    10. Re:Linux the kernel or Linux the system? by roystgnr · · Score: 1, Insightful

      If a linux kernel exploit is fixed in minutes, then it was a pretty dumb bug.

      Yup. The last one I remember like that was the IP stack bug in late 1997 that would crash your system; Alan Cox didn't have the fix out in minutes, but IIRC it was about three hours from discovery to patch.

      He can be forgiven for the delay, though, because his patch fixed not just that particular exploit, but all it's variations. When I was booted to Windows 95, on the other hand, I was vulnerable to any prankster exploiting the same type of bug for months, not just because it would take MS weeks to come up with a patch but because Alan Cox's patch fixed the underlying problem, whereas MS would patch up one attack only to remain wide open to nearly identical exploits. Try Googling for "teardrop", "syndrop", or "newtear" if you want to find a more precise timeline than my fuzzy 6yo memory.

      Linux mostly seems to do reactive fixes, at least from where I'm sitting.

      You mean reactive to all those awful Linux worms that have been sweeping the net? I don't think so. Try pulling up a list of security updates (here, for example) for Linux and see just what percentage you can find exploit code for. I'm pretty sure the squirrelmail, balsa, and Xpdf developers aren't scrambling to write patches reacting to the many exploits aimed at their programs.

    11. Re:Linux the kernel or Linux the system? by styrotech · · Score: 1

      OpenSSH is a part of Linux as much as RPC or Windows Messaging is a part of Windows.

      I see your point, but my Debian installs don't include OpenSSH. If I want it, I have to add it myself.

      Is there a current Windows edition without RPC? Or can you untick installing RPC during setup?

    12. Re:Linux the kernel or Linux the system? by Espectr0 · · Score: 1
      has there actually been a Linux KERNEL exploit in the last few years?


      Yes, there has. Including as recently as 2.4.18
    13. Re:Linux the kernel or Linux the system? by Anonymous Coward · · Score: 1, Interesting
      OpenSSH is a part of Linux as much as RPC or Windows Messaging is a part of Windows.

      Not true. OpenSSH is third party software, to fill a specific task. RPC is vendor provided software that the system (says it) won't function without.

      Microsoft has been good lately about doing proactive security reviews, and they often find holes before anyone else does.

      *cough cough* Now there's a stretch. From the Microsoft security list:
      • Greg Jones of KPMG UK (http://www.kpmg.co.uk) and Cesar Cerrudo (cesarc56@yahoo.com) for reporting the issue described in MS03-042.
      • The Last Stage of Delirium Research Group (http://lsd-pl.net) for reporting the issue in MS03-043.
      • David Litchfield of Next Generation Security Software Ltd. (http://www.nextgenss.com) for reporting the issue in MS03-044
      • Brett Moore of Security-Assessment.com (http://www.security-assessment.com) for reporting the issue in MS03-045
      • Joao Gouveia (joao.gouveia@vodafone.com) for reporting the issue described in MS03-046
      • Ory Segal of Sanctum Inc. (http://www.sanctuminc.com/) for reporting the issue described in MS03-047


      That's just the six most recent vulnerabilities. Older items sometimes don't mention the part played by others, but merely list them as acknowledgements, such as:

      • eEye Digital Security (http://www.eeye.com/html)
      • NSFOCUS Security Team (http://www.nsfocus.com)
      • Xue Yong Zhi and Renaud Deraison from Tenable Network Security (http://www.tenablesecurity.com)
      • Jim Bassett of Practitioners Publishing Company (http://www.ppcnet.com)
      • Mike Price of Foundstone Labs, http://www.foundstone.com
      • Oliver Lavery (oliver.lavery@sympatico.ca)


      It's almost impossible to find a vulnerability that Microsoft found and fixed entirely by themselves. Mod parent down.
    14. Re:Linux the kernel or Linux the system? by Qzukk · · Score: 2, Interesting

      OpenSSH is a part of Linux as much as RPC or Windows Messaging is a part of Windows.

      Wow, you mean theres no way at all I could run a box without OpenSSH? You should tell that to my workstation I'm writing this on right this second.

      Sure, you can turn off RPC after you install windows, but I had Debian installed without any servers at all. Do you think you could log in and shut off RPC fast enough to avoid picking up a worm or two while on a network (like, say, when you register XP over the internet)? Just to let you know, my friend brought his laptop over and hooked it to the internet for the first time, and he picked up the worm while we were still waiting for windows update to get started downloading the fixes.

      they often find holes before anyone else does. Linux mostly seems to do reactive fixes

      Define "before anyone else does". You mean some indeterminate time between some group with a zero-disclosure policy discovers the bug and reports it directly to microsoft months ago and when Bored College Student discovers it a week ago and takes down his school's registrar's office? Just because the bug doesn't show up on major-name-brand buglists doesn't mean people don't know about it. Take the recent OpenSSH bug, there were exploits in the wild and rumors of it being used long before the bug itself was announced.

      So, given microsoft's history of whining at the full-disclosure lists where its obvious that microsoft takes weeks to months to patch a problem, isn't it obvious that they much prefer the zero-disclosure method where they take weeks to months to patch a problem but you don't know about it?

      Microsoft has been good lately about doing proactive security reviews

      The only reason we got a half-dozen patches this week was because Microsoft was already fixing two holes in a row in the RPC code that someone else found. If this had been policy, then IIS would have been entirely fixed within weeks of the first bug in it, and it wouldn't be the bug-ridden unused pile of junk it is now (which disproves the old saying that "if it was more popular there would be more attacks for it" which doesn't hold for apache). But alas, nobody took the time to proactively fix IIS, or much of anything else Microsoft has released. Though its hard to tell what all is getting patched these days since Microsoft has dumbed down their patches to the point where they read "install this patch or a remote attacker could take over your system" and be completely devoid of any information whatsoever.

      --
      If I have been able to see further than others, it is because I bought a pair of binoculars.
    15. Re:Linux the kernel or Linux the system? by ndogg · · Score: 1
      Linux mostly seems to do reactive fixes

      Careful there. What is reactive and proactive is rather grey in the OSS world. If someone decides to poke around in the source for the first time, then they find a flaw and fix it, is that reactive or proactive? Since the user community around a piece of software potentially is also the developer community, what is reactive and proactive to problems isn't so clear. It could be argued that it's all reactive since bugs can't be fixed until they're known. It could be argued that it is always proactive since someone is always trying to find a bug to fix.
      --
      // file: mice.h
      #include "frickin_lasers.h"
    16. Re:Linux the kernel or Linux the system? by EvilTwinSkippy · · Score: 1

      Well, you could theoretically replace OpenSSH with a functional equivilent. (But it's so candylike...)

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
    17. Re:Linux the kernel or Linux the system? by AntiOrganic · · Score: 1
      When is the last time a vulnerability in the windows kernel was found?
      How about that bug that let you inject code into any running process with a window handle to use that process's logon/user credentials? This, of course, is just one humorous testament to why window management and GUI code should not be integrated into the kernel. It's not a big deal on a desktop system, but there really ought to be a good layer of separation in a "serious" server environment.

      Or how about the kernel message boundary checking bug from April?

    18. Re:Linux the kernel or Linux the system? by _Sprocket_ · · Score: 1


      OpenSSH is a part of Linux as much as RPC or Windows Messaging is a part of Windows.


      Others have pointed out that they can easily turn off OpenSSH and continue to function. I'd like to add a variation of that.

      I don't have to run OpenSSH. I can run SSH2 from SSH, Inc. I can also look in to LSH. Granted - I don't. But there are options one doesn't have within a Windows environment.


      Microsoft has been good lately about doing proactive security reviews, and they often find holes before anyone else does.


      Let's look at the recent CERT advisory CA-2003-27 (Multiple Vulnerabilities in Microsoft Windows and Exchange). Somewhere near the bottom it reads:

      Our thanks to Microsoft Corporation for the information contained in their security bulletins. Microsoft has credited the following people for their help in discovering and responding to these issues: Greg Jones of KPMG UK and Cesar Cerrudo, The Last Stage of Delirium Research Group, David Litchfield of Next Generation Security Software Ltd., Brett Moore of Security-Assessment.com, Joao Gouveia, and Ory Segal of Sanctum Inc.

      One can follow the links to the individual Microsoft Bulletins to find out who gets credit for finding / reporting what. The upshot is that there are plenty of vulnerabilities being discovered outside of Microsoft. The difference is that these are being reported through the Microsoft-prefered "Responsible Disclosure" methodology. The general public won't find out about the vulnerability until Microsoft has a patch to offer with the announcement.

    19. Re:Linux the kernel or Linux the system? by windex82 · · Score: 1

      Sure, you can turn off RPC after you install windows.

      Sorry, No you can't.

    20. Re:Linux the kernel or Linux the system? by schon · · Score: 1

      OpenSSH is a part of Linux as much as RPC or Windows Messaging is a part of Windows.

      Bullshit.

      OpenSSH is an application. It's not necessary for any Linux system. You can choose not to install it if you don't want it - and the system will continue to be perfectly usable. If (like me) you want secure remote administration, you can even install an alternative.

      And if you do choose to install OpenSSH, you can remove it at any time, with no adverse consequences.

      Try not installing RPC or Windows Messaging when you install Windows - you can't - you're not even given the choice.

      Try disabling RPC. You'll find that the OS stops working (no cut and paste.)

      Microsoft has been good lately about doing proactive security reviews, and they often find holes before anyone else does.

      This shows exactly how much knowledge you have on the topic.

      Pretty much all of the remotely exploitable holes in the past year (in fact, every hole I know of in MS software) have been discovered by third-parties. MS makes an announcement - it doesn't meant that they discovered the vulnerability.

      Take your trolls somewhere else.

    21. Re:Linux the kernel or Linux the system? by Lehk228 · · Score: 1
      I thought we were discussing Windows and Linux.... when did anyone say anything about Apple?

      people beta test a MS product every time they boot windows--NtG
      --
      Snowden and Manning are heroes.
    22. Re:Linux the kernel or Linux the system? by strabo · · Score: 1
      OpenSSH is a part of Linux as much as RPC or Windows Messaging is a part of Windows.

      OpenSSH is a part of Linux as much as OpenSSH is a part of Windows.

    23. Re:Linux the kernel or Linux the system? by mpe · · Score: 1

      Do you think you could log in and shut off RPC fast enough to avoid picking up a worm or two while on a network (like, say, when you register XP over the internet)? Just to let you know, my friend brought his laptop over and hooked it to the internet for the first time, and he picked up the worm while we were still waiting for windows update to get started downloading the fixes.

      It probably isn't that hard for a worm to subvert anything which might be subsequently download from Windows Update or an anti-virus software update site. Thus you end up with an infected machine which appears to be fully up to date.

    24. Re:Linux the kernel or Linux the system? by praedor · · Score: 1

      Erm, no. Because microsnot throws EVERYTHING into the kernel proper (thus, IE is now an inextractable part of the OS itself), it is well and royally screwed when vulnerabilities come out. It is a technicality but nonetheless, a vulnerability in OpenSSH is NOT a vulnerability in linux. It can be simply patched with a small file that wont break anything else unintentionally. Because of the all-encompassing nature of the M$ system, a vulnerability in whatever is a true vulnerability affecting the OS itself and any patch for it endangers the stability and useability of the entire system.

      --
      In Bushworld, they struggle to keep church and state separate in Iraq as they increasingly merge the two in America.
    25. Re:Linux the kernel or Linux the system? by petermdodge · · Score: 1

      "Proactive fixes" sounds to me much like Microsoft is simply fixing bugs that have been in the system for ages. As for Linux kernel bugs, being mucking around in it meself and all, I can tell you that it's easy to forget to code tight in one section and have it lead top a security compromise. You can call that a "stupid" bug if you want, but thats where 99% of the Windows bugs likely arise from. And don't tell me Microsoft's priority is security. It's very low on the list, I'm sure. Their top priority is, and always has been, to make money. That is why the ideal of Open Source Programming appeals to me - when you remove profit as the top priority, you an focus on things like security and your user base. Just my $0.02

      --


      Peter M. Dodge,
      Chief Executive Officer,
      LiquidFire Studios

      Platinum Linux - www.
    26. Re:Linux the kernel or Linux the system? by hesiod · · Score: 1

      > if you want to find a more precise timeline than my fuzzy 6yo memory.

      Wow, you're pretty smart for a 6 year old.

  33. Nothing is as fast as /.'er ....... by 3seas · · Score: 1

    Posting to an MS article!!!

  34. Forced Patches? by Jason1729 · · Score: 1

    That will be a nightmare. Even when MS tries to issue what they think are legitimate security patches they do horrible things (like render Outlook Express unable to receive attachements that don't end in extensions MS approves - this is supposed to stop viruses but it doesn't have any override so I can't receive tarballs or stuffit files at all wihtout asking the sender to rename it to a .zip extension and resend it). Imagine what it will be like when they force you to install patches to break your DivX codec or stop you from running non MS software.

    Jason
    ProfQuotes

    1. Re:Forced Patches? by The+Raven · · Score: 1
      Jason believes:
      this is supposed to stop viruses but it doesn't have any override
      Not true, you can override it. It's still an insanely stupid option, but you can turn it off by going to Tools->Options->Security and disable the option called 'Do Not Allow Attachments blah blah'.
      --
      "I will trust Google to 'do no evil' until the founders no longer run it." Hello Alphabet.
    2. Re:Forced Patches? by herrvinny · · Score: 1

      I had the same problem, so I forwarded any email with attachments to a Yahoo Mail account, then downloaded the attachment. It's more work, but I'd rather have Outlook Express prevent me from accidently opening an attachment that had a virus. Before the patch, I received two virus laden emails, and when I looked at the emails in the preview pane, outlook express asked me if it should autorun the attached executables. What the hell kind of behavior is that? Almost spat out my drink on my keyboard...

    3. Re:Forced Patches? by rock_climbing_guy · · Score: 1

      I was probably the same kind of behavior that resulted in me having to stay out until 2 am the day before I had to get up before 6 am in order catch a plane the next day. You see, some people will think, I need to open this to see the message.

      --
      Wh47 d1d j00 541, 31337 15n't t3h r0xor5 ne m0r3???
    4. Re:Forced patches? by mikeswi · · Score: 3, Interesting

      Many of them(solutions) have been extensively covered recently, including plans to force users to patch automatically.

      Yea, I don't forsee any potential problems with that plan.

      I think the original post is misleading. Gates didn't say anything about forcing updates. He said that by default they would be installed automatically. There was no mention of forcing that.

      From the article:

      Microsoft is also going to make sure that people install firewalls and updates by default. "None of the security problems recently affected people who had their software up to date," Gates said. "But we made it too complex for most people. Critical security patches should be applied with the speed of the internet."

      From now on, Microsoft will install these patches automatically. And it will bring the size of the patches down to satisfactory portions. "We used to send megabytes of software to fix a 20 byte file," Gates said.

      That's fine by me. Make it the default but leave a way to turn it off for those who wish to. Microsoft has a habit of puting out buggy patches that create worse problems than whatever they are fixing.

      I wouldn't even mind if they made the off switch hard to find. If someone can't figure out on your own how to turn the thing off, most likely they are exactly the type that needs it turned on.

  35. Yep by Feztaa · · Score: 1

    their recent performance seems to be more on the order of 3+ months

    Not only that, but most linux vulns get patched within a few hours.

    Most of the time, I hear about the patch before I hear that there was ever a vuln. Contrast this with the 30+ known IE vulnerabilities that haven't been patched in years.

    Go figure.

  36. Re:Someone RAM Bill by linzeal · · Score: 1

    What would 4 gigabytes of texture and physical data look like in a system like Celestia? We really need good orbit, insolation, and other physical prediction systems for setting up mining, colonization, observation, communication and the rest of the space milieu's needs for the immediate future as we plan human habitat and technological systems in orbit. There is a suriety that this will mostly be used for entertainment but I would hope that as more of the population becomes educated we can begin work on the future of human society with more advanced and complete models that are more predicative in their accuracy.

  37. Bill Gates is a genius of rhetoric by peezer · · Score: 1

    He means the time it takes to patch a bug once it's been found by his people. What he should mean is the time it takes to FIND and patch a bug. Who cares if by the time microsoft finds it they issue a patch in 1 hour. That's not impressive if it takes them 4 months to find it in the first place... (and it takes virus writers 3 months).

  38. in context by fireteller2 · · Score: 1

    No doubt Bill is referring to the speed at which they can fix critical earth shattering holes in the code such as the recent worms that hit windows systems on the net.

    And Linux man though I am, I'd have to agree that in all likelihood if Microsoft agrees that the issue at hand is actually a problem worth addressing then they can fix and distribute it faster then the Linux equivalent.

    In other words they only take the fights they can win, and therefore of the fights they take they always win.

    . fire
  39. Re:M$ is fast by Snoopy77 · · Score: 1

    I'd rather rely on a company responding quickly to problems than an open source community where I have no idea how long it will take.

    Bill, is that you? So you'd rather rely on a company whose track record in bug fixing is poor at best or on a community of developers whose track record is on the whole good and for some projects bordering on fantasmigorical.

    It's all well and good to say that you would rather rely on a company to respond quickly but this just hasn't been the case in the past with Microsoft. Now they may have turned over a new leaf but the unknown time with the open source community is usually 'will this be fixed in under 12 hours or will it take the full 24 hours'.

    --
    "She's a West Texas girl, just like me" - G.W Bush Iraqis
  40. Then Stop Misinforming /. Readers Please by MSTCrow5429 · · Score: 1
    "Either he's lying or woefully misinformed; their recent performance seems to be more on the order of 3+ months, or over 2000 hours."

    This is quite an odd assertation, as the link only details one security flaw, and only mentions the date it was discovered, not the date it was patched. Besides, it would be utterly incompetent (and dare I say malicious?) to draw a conclusion from one datapoint.

    --
    Slashdot: Playing Favorites Since 1997
    1. Re:Then Stop Misinforming /. Readers Please by HillBilly · · Score: 1

      You have to remember that most posters will never read the article, so who ever posts the story can troll for some great windows bashing.

      --
      "Go into the hall of mirrors and have a bloody hard look at yourself" - HG Nelson
    2. Re:Then Stop Misinforming /. Readers Please by onomatomania · · Score: 1

      Yeah right, so that's why there are web pages dedicated to listing all the security flaws that are still unpatched months after being discovered. Gates is applying some form of whacked out selective logic, where apparently the only flaws that exist are those that make it up the chain to upper management -- those are patched pretty quick. But the dozens of others that MS replies to with "nah, we don't think this is serious at all" just cause the person who discovered it to write an exploit and wait his 30 days or whatever after notification before divulging the exploit... Only THEN does MS even begin to take note.

      If I had a dime for every message posted to BugTraq that followed this pattern, I'd be rich: "Discover bug. Notify MS. Be ignored. Write exploit. Post exploit. Patch arrives, several months after initial notification."

    3. Re:Then Stop Misinforming /. Readers Please by MSTCrow5429 · · Score: 1

      You'll have to find another example, that is simply a Google caching ghost of a now non-existent page. If you had taken the time to read my post, and the article referenced (link in news post), you would have known that I was simply pointing out the article did not contain any of the information that petard attributed to it.

      --
      Slashdot: Playing Favorites Since 1997
  41. Alternate headline: by brucifer · · Score: 1

    Linux Users: Windows Breaks Faster Than Linux

  42. Re:M$ is fast by shaitand · · Score: 1

    That's because your getting your information from microsoft's notices that they found bugs. You need better information sources. Also I've generally found that most fixes to open source security holes come within 2hrs.

  43. Bah! The suits at Microsoft are running scared by Trolling4Dollars · · Score: 4, Interesting

    Why do you think they are giving Linux so much attention these days? I think this means we are now in between the "They laughed at us" and "They tried to fight us" part.

    And if we follow Mahatma Gandhi's approach, the best approach is to keep doing what we do while letting MS bash away. Eventually it will become quite evident as to which side is interested in doing good for their fellow man.

  44. Then and now... by jmichaelg · · Score: 1
    Bill Gates in 1981:
    "Nobody will ever need more than 640k RAM."
    Bill Gates in 2003:
    "64 bit is coming to desktops, there is no doubt about that," he said. "But apart from Photoshop, I can't think of desktop applications where you would need more than 4 gigabytes of physical memory, which is what you have to have in order to benefit from this technology."
    He must have skipped the lecture on exponents.
  45. Desperation... by curious.corn · · Score: 1

    Our Prime Minister too told the press some outageous comment on Mussolini about "... just recluding dissindent to exclusive summer resorts..." He backed off claiming he had drunk too much wine during the interview... watch Billy say the same... ;-)

    --
    Mi domando chi à il mandante di tutte le cazzate che faccio - Altan
  46. Re:Someone RAM Bill by itchy92 · · Score: 2, Informative

    Bill never said the 640K Quote, and I'm willing to bet he never said the 4GB one, either.
    I know everytime this quote is used, someone has to debunk it, but there's no reason to perpetuate a false quote by one of the geniuses of our time.

    --
    Slashdot: News for nerds. Stuff tha-- MICRO$OFT IS THE DEVIL!!1
  47. Secure By Default by inertia187 · · Score: 1

    What is going to be important, Gates told reporters yesterday, is security. Microsoft invested over $100 million to refocus on building products that strive to be secure by design, by default and by deployment. In the Windows Division development work was put on hold while Microsoft conducted security training, threat modeling, source-code review and penetration testing.

    Blasphemy. Pure unadulterated blasphemy. Note, he says it's going to be important. All this time, and secure by default is now going to be important.

    Note, it takes $100 million for Microsoft to figure out how to be secure by default. Somehow, OpenBSD and the like figured it out with little or no funding. Certainly not $100 million.

    Can't fight the Systemagic ... uber-tragic.

    --
    A programmer is a machine for converting coffee into code.
  48. Who Solves Security Problems Faster? by Crispin+Cowan · · Score: 4, Informative
    My favorite study on this question was "Linux vs. Microsoft: Who Solves Security Problems Faster?" by Jim Reavis. The data is from 1999 and 2000, but it is nicely systematic. At least back in 2000, Linux was much faster than Microsoft, averaging 11 days vs. 16 days.

    Crispin
    ----
    Crispin Cowan, Ph.D.
    Chief Scientist, Immunix Inc.
    Immunix: Security Hardened Linux Distribution

    1. Re:Who Solves Security Problems Faster? by jonbrewer · · Score: 1

      "The data is from 1999 and 2000, but it is nicely systematic. At least back in 2000, Linux was much faster than Microsoft, averaging 11 days vs. 16 days"

      I hate to discount your favorite study, or your presentation of it, but I have a few issues:

      1. The data is from 1999
      2. Linux data is from Red Hat only
      3. You neglected to mention Sun
      4. Only three operating systems were included
      5. Evaluation criteria were not explicitly stated
      6. Raw data are not available

      Now I like Linux as much as the next guy, but partial citation of a rather shaky study does little to enhance your stature as a Chief Scientist. I know my profs would ding me for such a moral lapse.

    2. Re:Who Solves Security Problems Faster? by Crispin+Cowan · · Score: 1
      The data is from 1999
      True, but its the data we have, unless you know of a more recent study.

      Linux data is from Red Hat only
      True. But talking about response time for patches to the Linux kernel is pretty meaningless, so you end up talking about distro vendors. Red Hat seems like a pretty reasonable vendor to look at.

      You neglected to mention Sun
      The original article also did not mention Sun, so I considered it irrelevant to comment on Sun. That Reavis studied Sun is a bonus. Enjoy :)

      Only three operating systems were included
      So what's your point? I'm just refuting Gates' claims that MS patches faster than "Linux".

      Evaluation criteria were not explicitly stated
      I don't get your point. The evaluation criteria was "how many days does the vendor leave you exposed to a published vulnerability?"

      Raw data are not available
      Raw data for Microsoft, Red Hat, and Sun.

      Crispin
      ----
      Crispin Cowan, Ph.D.
      Chief Scientist, Immunix Inc.
      Immunix: Security Hardened Linux Distribution

    3. Re:Who Solves Security Problems Faster? by swordgeek · · Score: 1

      "True, but its the data we have, unless you know of a more recent study."

      The fact that it's the best available doesn't automatically make it relevant data. What you're saying here boils down to this: Bill Gates is lying or wrong, because what he says his company does today wasn't the case four years ago.

      Honestly, that's totally nonsensical. You should know better, Crispin.

      --

      "People who do stupid things with hazardous materials often die." -- Jim Davidson on alt.folklore.urban
    4. Re:Who Solves Security Problems Faster? by Crispin+Cowan · · Score: 1
      What you're saying here boils down to this: Bill Gates is lying or wrong, because what he says his company does today wasn't the case four years ago.
      Except that I did not say that. I presented it as the only relevant hard data that I know of, and explicitly pointed out the date issue. What Gates is claiming clearly was not true 4 years ago; this begs the question of whether something has changed recently.

      Past behavior does not necessarily predict future behavior, but it often does. This old data draws Gates' claim into serious doubt, and motivates a repeat of this study using current data. Students looking for a term project might want to consider doing it.

      Crispin
      ----
      Crispin Cowan, Ph.D.
      Chief Scientist, Immunix Inc.
      Immunix: Security Hardened Linux Distribution

    5. Re:Who Solves Security Problems Faster? by swordgeek · · Score: 1

      Actually, you did say that. :-)

      "I'm just refuting Gates' claims that MS patches faster than "Linux"."

      Heh. Now past behaviour is certainly an indicator--I'll agree with that. The counter-argument is that four years is a LONG time in computer history (back in the NT4.0 days), and also that Microsoft has (supposedly) made a very deliberate, explicit, and massive change in their whole security patch policy (procedures, change management, etc.).

      Now I'm not suggesting that MS really IS faster than Linux at patching, but I really don't think that data from nearly half-a-decade ago can be considered relevant anymore, even as much of a trend indicator.

      --

      "People who do stupid things with hazardous materials often die." -- Jim Davidson on alt.folklore.urban
    6. Re:Who Solves Security Problems Faster? by Moofie · · Score: 1

      Whether your argument is correct or not, it did not beg the question. This phrase does not mean what you think it means.

      --
      Why yes, I AM a rocket scientist!
    7. Re:Who Solves Security Problems Faster? by Crispin+Cowan · · Score: 1
      Well, ok actually I did, but he's quoting me out of context. Where I said it was in response to a complaint that Reavis' study only covered three operating systems. Apparently if you don't cram all pertinent facts & caveats into the same sentence, you get whacked for mis-representation :)

      Crispin

    8. Re:Who Solves Security Problems Faster? by serutan · · Score: 1

      The foregoing exchange was one of those interesting Slashdot arguments that someone invariably caps with a nitpick about grammar, spelling or phraseology. I'm one of those dolts who always thought "begs the question" was synonymous with "raises the question." After reading your page I'm afraid I still don't understand the correct usage. Do you mind giving an example?

    9. Re:Who Solves Security Problems Faster? by Moofie · · Score: 1

      Certainly. (incidentally, the Wikipedia link also contains good examples)

      Fundamentalist: The Bible is the Word of God.
      Me: How do you know?
      Fundamentalist: Because the Bible says that it is the Word of God.
      Me: How do you know that?
      Fundamentalist: Because the Bible is the Word of God.

      If you answer a challenge to one of your axioms by stating that axiom, you are begging the question. See the entire Objectivist philosophy for more examples.

      --
      Why yes, I AM a rocket scientist!
  49. He was misheard by AtariAmarok · · Score: 1

    He was misheard. He was really claiming to generate bugs faster than Linux.

    (though, truth be told, they generate more bugs than a 5-month-long New York City garbageman strike)

    --
    Don't blame Durga. I voted for Centauri.
  50. Amazing Windows Vuln Hasn't Been posted by szyzyg · · Score: 1

    Amazingly enough there appears to be little discussion of the fact that the recent MSRPC fixes *still* leave the host vulnerable - that's after 2 previous patches. Still no word from Microsoft on a fix, but a DoS exploit has been around for over a week now.

    1. Re:Amazing Windows Vuln Hasn't Been posted by Keeper · · Score: 1

      RPC is a gateway into many services inside of window.

      Saying that they "still haven't fix that rpc hole" is like saying that they "still haven't fixed that windows hole".

      The bug you are referring to exploits a defect the SMB (windows filesharing) authentication code. The previous two patches covered different problems inside of DCOM (ie: one was not related to the other, aside from the fact it was exploitable).

  51. Forced patches? by SengirV · · Score: 1
    Many of them(solutions) have been extensively covered recently, including plans to force users to patch automatically.

    Yea, I don't forsee any potential problems with that plan.

    --

    Prof. Farnsworth - "Oh a lesson in not changing history from Mr I'm-My-Own-Grandpa!"

  52. What are his start/end times? by k12linux · · Score: 3, Insightful
    We've gone from little over 40 hours on average to 24 hours

    I'd like to know what part of the process he is talking about? Is that the time between when the hole is made public and when the patch is released? That would explain things a bit... since MS typicaly can keep the news under wraps until they release the patch simultaneously.

    Including a lot of "0 seconds between bug announcement and patch release" is bound to give you a much lower average. So, it would be possible for MS to receive 85 bug reports, surpress all but one for three months, release 85 patches and average just a bit better than 24 hours between public announcement and patch.

    1. Re:What are his start/end times? by jonnyfivealive · · Score: 1

      even better, they could get down to a negative rate by releasing a patch before announcing the vulnerability

  53. IE by hackus · · Score: 1

    The man is smokin crack.

    Half the products Microsoft produces are not patched at all and when 2000/XP are found to be lost causes to Microsoft's multiple security initiatives over the past years, products are just decommisioned.

    Yeah, they patched all the holes in Win98 permenantly this year because it is no longer supported and end of lifed.

    I still have patches comming in for my Linux 2.0.xx kernel!!!

    -Hack

    PS: Bill your doin serious weed man, you should stop that.

    --
    Got Geometrodynamics? Awe, too hard to figure out? Too bad.
  54. This is why by mcc · · Score: 1

    This is why Ballmer wants security experts to "just shut up" about security problems in MS products.

    How are they supposed to keep their "fixed in 24 hours" record going if they have to count from the point at which the exploit is discovered and in the wild, rather than from the point at which Microsoft decides to actually admit the vulnerability exists?

    "How does Microsoft change a light bulb?" "They don't, they just redefine darkness as the new standard for light"...

  55. Longhorn PR speech. by JWSmythe · · Score: 1
    That whole article was a sad piece of PR crap.
    1. "This release is going to be driven by technology, not by a release date"
    2. "But we have to make sure that we really take on something dramatic, like 32 bit computing eight years ago, or the NT kernel in Windows XP."
    3. Gates told reporters that Microsoft won't stop the development of its browser Internet Explorer
    4. "How could we ignore the browser?," Gates responded. 'The Explorer is fully integrated with the operating system, take it away and the OS grinds to a halt. When you call up Help, you're using the browser. In Office 2003 instead of going to the local files, the browser will go online and fetch the latest documents."
    5. "XML is going to be the key technology here too."
    6. The BIOS will always be separated from the operating system. Actually, it's gotten out of date. If you run Windows XP, it calls very little of the BIOS.
    7. "But apart from Photoshop, I can't think of desktop applications where you would need more than 4 gigabytes of physical memory, which is what you have to have in order to benefit from this technology. Right now, it is costly."
    8. "It appears more magical than it really is. Even with 32 bit computing, I couldn't help noticing a level of enthusiasm that went beyond its technical merit."
    9. Microsoft invested over $100 million to refocus on building products that strive to be secure by design, by default and by deployment.
    10. "None of the security problems recently affected people who had their software up to date,"
    11. We invented personal computing. It is the best tool of empowerment there has ever been.

      Like I said, a big load of PR crap.

      If I read that right, he's right back to having us on 16bit processors with minimal memory. Unfortunately, his own OS can't handle it.

      I liked that 32bit was a big deal in the second quote, but in the 8th quote it wasn't. Sounds like he's trying to set himself up for not having to support 64bit processors, except in a 32bit compatability mode (remember the DEC Alphas?)

      It's a big "We made the PC, we make the software, you will take it, and you will love it!", then the crowds applaud, and a couple hundred thousand *nix folks roll their eyes and `ping -f microsoft.com` (ya, I know, dozens of better things to do, it's for illustrative purposes)
    --
    Serious? Seriousness is well above my pay grade.
  56. forced to patch by whiskey+riot · · Score: 1

    so what if it takes them 24 hrs to make a patch - so how long is that in QA then? and why would I want them to force me to patch - I usually wait a while before patching in order to see if there are any problems - C'MON I play Halo and UT2003 on this box!! - QAChaos

  57. Re:Someone RAM Bill by s20451 · · Score: 4, Insightful

    Now I'm no Gates apologist -- I haven't even used Windows for years, except when I am forced to kicking and screaming -- but harping on these statements bothers me.

    In 1981, NOBODY needed 640k on the desktop. IBM PCs shipped with a tenth that amount of memory. Even assuming memory growth is exponential in the same manner as Moore's Law, this meant that the average user probably wouldn't need 640k for five years or more. Even in 1987, I remember programs (such as WordPerfect 4.2) that could fit on a single 360k floppy -- so the 640k prediction held for several generations of machine. Not a bad prediction in the computer industry.

    There were good reasons for making the 640k assumption. All I'm saying is, don't fault an engineer for making a design decision, even if you don't like him personally.

    Having said that, you want a desktop application that takes up more than 4 GB of physical memory? Go download the OpenOffice source and add a line:

    calloc(4294967296,sizeof(char));

    Take THAT, Bill!

    --
    Toronto-area transit rider? Rate your ride.
  58. Here we go again... by Trolling4Dollars · · Score: 1
    From the article: I can't think of desktop applications where you would need more than 4 gigabytes of physical memory

    Didn't he make a statement like that a few decades ago? And wasn't he wrong? I figure that UIs in the future are going to need a LOT of RAM. In fact, this one VERY good voice recognition software that a company I'm dealing with has, requires a mimimum of 1 Gig of RAM just for their app. This is what makes it poerate so well. I'm sure there will be plenty of apps (especially in the UI realm) that will make use of more than a gig of RAM.

    Hah! 640K. WHAT was he thinking?

    1. Re:Here we go again... by EvilTwinSkippy · · Score: 1
      I think that's pretty funny considering Longhorn is going to be embedding SQL as part of the file structure.

      We have a pretty beefy database that is running our membership info. The vendor just told us that 512MB of memory is too little for SQL. We need 2GB to fit all of the tables in memory.

      I don't know about you, but the index files on my NTFS partitions are pretty beefy...

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
  59. Who cares? Really. by TheFrood · · Score: 1

    Granted, he's wrong. But does it really matter?

    Two or three years ago, when Linux was still struggling for widespread adoption and everyone still thought Microsoft was the greatest thing going in computing, this would have been a big deal. The press used to treat anything Microsoft said as the gospel truth, and were hugely skeptical of Linux. A comment like this from Gates would have meant a lot.

    But now Linux has made huge inroads into the server market and is already beginning to penetrate the desktop market. After their recent legal battles, Microsoft is no longer given a free ride by the press. At this point, a simple lie from Microsoft won't make much of an impression on anyone.

    So, not to sound flip, but who cares what Bill said?

    TheFrood

    --
    If you say "I'll probably get modded down for this..." then I will mod you down.
  60. reminds me of.... by MoFoQ · · Score: 2, Funny

    reminds me of the Iraqi "Information" Minister.
    "What Americans? There are no American troops on Iraqi soil"

    Also good to note that Linux patches have been kicking more ass than Windows EVER will, from back in the day with the port 139 "bug" (Linux patch was out within hours, Windows, took ALOT longer for obvious reasons) to any in the unforeseen future.

    Hell...I think Ol' Gatesy is mistaken; bugs that are intentionally placed in software in order to patch and call it an upgrade, well....they don't count.

  61. he's probably not lying... by Malor · · Score: 4, Insightful

    Most likely, he's just reporting what he's being told. And most likely, it's being mis-measured by someone.

    Microsoft is a big company, and Windows is a very complex beast. My initial thought is that perhaps the security developers do indeed code and submit a patch within 24 hours.

    But then the patch has to wend its way through the labyrinth of QA and regression testing. Because Windows is so highly integrated, even small changes can have big unforeseen consequences, so they can't rush patches out the door without breaking things. I believe Microsoft makes patches available via their support pages well before it hits Windows Update. What *we* are measuring is the time from bug report to being in Windows Update; what *they* are probably measuring is time to patch submittal or time to initial availability via support.

    I really, really prefer the improved code separation in the Unix environment; if, say, BIND has a problem or exploit, it's highly unlikely that a patch it will break Postfix or Apache. Because things are better-separated, the developers understand their packages better and can more confidently push patches into their stable branches.

    I worry a little about the way the Unix desktops are becoming increasingly interdependent, with lots of libraries and lots of integration... are we going to end up in the same place, eventually? Microsoft doesn't employ idiots, and considering the amount of trouble they've had scaling, well.... I just hope the free software developers are thinking about this.

    1. Re:he's probably not lying... by Paradise+Pete · · Score: 1
      Because Windows is so highly integrated

      I think you misspelled "a tangled mess of dependencies"

    2. Re:he's probably not lying... by WNight · · Score: 1

      Microsoft doesn't employ idiots perhaps, but they are ruled by the marketing departmenet. They add features based on what customers want and stability isn't what most customers want. I bitched about rebooting Win9x twice a week at my last job and someone asked what the big deal was. He didn't believe a computer could stay up and running for two weeks, let alone the year or two that some machines are up, essentially zero reboots between kernel upgrades.

      Linux is different in that its developers add features that they, the developers, want. Developers tend to care more about stability than users and because Linux's development is led by Linus, an developer, we'll see stability continue to be a fairly high priority.

    3. Re:he's probably not lying... by Mastadex · · Score: 1

      ...Linux's development is led by Linus, an developer, we'll see stability continue to be a fairly high priority......

      And thats why Linux is Slowly taking over the desktop market! We are not all developers. But were smart enuf to tell the difference between stability and the blue screen of death!

      --
      A morning without coffee is like something without something else.
    4. Re:he's probably not lying... by bombadillo · · Score: 1

      No, He probably is lying. It's called propaganda. You keep saying something with conviction and if people aren't informed they will believe it.

    5. Re:he's probably not lying... by Bingo+Foo · · Score: 1

      No, he's just confusing "patched" with "bitched about on Slashdot."

      --
      taken! (by Davidleeroth) Thanks Bingo Foo!
    6. Re:he's probably not lying... by bussdriver · · Score: 1

      EXACTLY!!

      LOOSE INTEGRATION RULES! that is what scripts are for--tigher integration for more custom uses.

      however, I think he is lying. he is not unaware of the stuff MS pulls; however, he does not have as much influence over things as people think. He can claim ignorance; which is a common defense these days.

    7. Re:he's probably not lying... by RobHood · · Score: 1

      I would have to agree with the essence of Malor's comment. But to add to that, it is not a purely Japanese phenomenon to only report good news to superiors.

      Having worked at multiple large corporations, it is very common to spin the news. "Yes Mr VP, we always call back within 15 minutes per process" Just don't mention that the call was to tell the person that they were going to have to wait another hour or two for real help.

      Way too common.

      --
      -RobHood
      I'm not an anti-{insert OS} zealot. I just like blowing people's little minds.
    8. Re:he's probably not lying... by Evil+Adrian · · Score: 1

      They add features based on what customers want and stability isn't what most customers want. I bitched about rebooting Win9x twice a week at my last job and someone asked what the big deal was. He didn't believe a computer could stay up and running for two weeks, let alone the year or two that some machines are up, essentially zero reboots between kernel upgrades.

      Umm, Windows is stable now -- Win9X is back in 199x. We're in 200X now. Not to mention, stability is what a lot of their customers want. There are plenty of production IIS, Exchange, database, etc. servers out there that need need NEED 99.9999% uptime.

      Linux is different in that its developers add features that they, the developers, want. Developers tend to care more about stability than users and because Linux's development is led by Linus, an developer, we'll see stability continue to be a fairly high priority.

      And that may be why Linux hasn't been the breakout hit of user's desktop's everywhere -- because they're adding features that developers want, not regular users...

      --
      evil adrian
    9. Re:he's probably not lying... by Vellmont · · Score: 1

      Umm, Windows is stable now -- Win9X is back in 199x. We're in 200X now Yah, that's why I reboot my windows 2000 machine every 2 weeks because of patches. That's also why when I was running XP the machine crashed once a week (turned out to be an Nvidia sound driver problem). The crashes and instability seemed to go away when I went back to Win2K, but the "reboot from every patch" problem hasn't. When I regularly see uptimes of 2 months or more, and have the possibility of my machine being up for a year I'll consider Windows "stable" And that may be why Linux hasn't been the breakout hit of user's desktop's everywhere -- because they're adding features that developers want, not regular users... That may be part of the reason, but quite honestly I think distributions have become very useable. The bigger reason is just legacy software issues, and less hardware support. Every business has some legacy software product they're loathe to move away from that only works on Windows.

      --
      AccountKiller
    10. Re:he's probably not lying... by Penguinshit · · Score: 1

      Microsoft doesn't employ idiots

      Oh yeah? Then explain Ballmer...

    11. Re:he's probably not lying... by Exatron · · Score: 1

      He's an extraterrestrial. All of his bizarre behavior is perfectly normal on his home planet.

      --
      "I think so, Brain, but 'instant karma' always gets so lumpy." - Pinky
      "Decepticons FOREVER!!!" - Ravage
    12. Re:he's probably not lying... by sheldon · · Score: 4, Interesting

      "And most likely, it's being mis-measured by someone."

      It's certainly being mismeasured by the Linux community. While I haven't done a thorough study, I make note of a Konqueror patch that came out last year.

      - Linux community touted it as proof patches were fast, because it was into the source tree in 90 minutes
      - It took one month before KDE released a new binary compiled with the patch
      - It took an additional month before Redhat incorporated this into a patch for their Linux distribution.

      The issue also impacted IE, and it took Microsoft two weeks to release a binary patch on Windows Update.

      The Linux community claimed 90 minutes, when it was really two months.

      Microsoft counted it accurately as two weeks.

      Just reporting good news to yourself doesn't make you better.

    13. Re:he's probably not lying... by greygent · · Score: 1

      if, say, BIND has a problem or exploit, it's highly unlikely that a patch it will break Postfix or Apache

      *cough* OpenSSL *cough*

    14. Re:he's probably not lying... by antiher0 · · Score: 1

      Well... the reason for regression testing isn't only for OS complexity (which of course is included here), but also for third-party apps. If shipped third-party apps depended on an incorrect behavior, or was fragilely written, then something needs to be fixed. Can Microsoft afford to ship an update that breaks Photoshop or, say, Corel Office?

    15. Re:he's probably not lying... by horza · · Score: 3, Funny


      - Linux community touted it as proof patches were fast, because it was into the source tree in 90 minutes
      - It took one month before KDE released a new binary compiled with the patch
      - It took an additional month before Redhat incorporated this into a patch for their Linux distribution.

      The Linux community claimed 90 minutes, when it was really two months.


      Or overnight for those of us using Gentoo.

      Phillip.

    16. Re:he's probably not lying... by mpe · · Score: 1

      Microsoft doesn't employ idiots perhaps, but they are ruled by the marketing departmenet. They add features based on what customers want

      This is only likely to be the place in a cometitive market, a situation Microsoft hasn't been in for a long time. Anyway different groups of customers will want different things, some of which are mutually exclusive.

      and stability isn't what most customers want.

      Really when did customers specifically request an unreliable over complex system.

      I bitched about rebooting Win9x twice a week at my last job and someone asked what the big deal was. He didn't believe a computer could stay up and running for two weeks, let alone the year or two that some machines are up, essentially zero reboots between kernel upgrades.

      Sounds more like Microsoft's marketing working to convince people that a very poor level of reliability, which would never be acceptable with any other machine, is ok.

      Linux is different in that its developers add features that they, the developers, want. Developers tend to care more about stability than users and because Linux's development is led by Linus, an developer, we'll see stability continue to be a fairly high priority.

      A lot of the time Linux developers either are users or work for users. Thus implying that left to their own devices users do consider reliability to be important. As opposed to all sorts of bells and whistles which some marketing people claim are user requests, without putting up any evidence.

    17. Re:he's probably not lying... by mpe · · Score: 1

      Because Windows is so highly integrated

      Or as the rest of the world knows it "deliberatly written in sphagetti code"...

    18. Re:he's probably not lying... by mpe · · Score: 1

      Having worked at multiple large corporations, it is very common to spin the news. "Yes Mr VP, we always call back within 15 minutes per process" Just don't mention that the call was to tell the person that they were going to have to wait another hour or two for real help.

      As in there are "lies, damned lies and statistics" :)

    19. Re:he's probably not lying... by harikiri · · Score: 1

      You compiled KDE overnight!? What beowulf cluster have you got tucked away...?

      --
      Man watching 6 MSCE's around a sun box, looks alot like the opening scene's of 2001:space odyssey...
    20. Re:he's probably not lying... by listen · · Score: 1

      Doesn't it ever get just a tiny bit boring trolling for Microsoft?
      KDE do *NOT* release binaries.

      Lets put it this way - a patch was released that allowed any user to fix their system, in 90 minutes, by KDE. The competitive market place of Linux distros led to some vendors offering this fix in less than a day.

      The same was only done by Microsoft in two weeks.

      How the *fuck* can you try to spin that Microsofts way?

      Saying something doesn't make it true.

    21. Re:he's probably not lying... by truthsearch · · Score: 1

      I think the problem is they're only counting those bugs which they choose to fix. There are 31 known security bugs in IE, some over a year and half old. This week they fixed a security bug in the ListBox and ComboBox controls that goes back to NT. There's a big difference between "We fix all bugs in 24 hours" and "We fix all bugs we choose to fix in 24 hours". I'm developing in .NET lately and I run into one bug after another. They're all "known" bugs on Microsoft's web site, yet none are fixed. I find that in general Linux's bugs are fixed quicker. Too many Microsoft bugs linger around for years without ever being fixed.

    22. Re:he's probably not lying... by sheldon · · Score: 1

      Doesn't it ever get just a tiny bit boring trolling for Microsoft?

      Can one ever get tired of reporting the truth? I don't see how.

      KDE do *NOT* release binaries.

      Have you looked at the KDE.org website lately to see what they release?

      KDE can be obtained in source and numerous binary formats from http://download.kde.org and can also be obtained on CD-ROM or with any of the major GNU/Linux - UNIX systems shipping today.

      Lets put it this way - a patch was released that allowed any user to fix their system, in 90 minutes, by KDE.

      Or more specifically, computer professionals with experience compiling applications. A relatively small minority of those who use computers.

      How the *fuck* can you try to spin that Microsofts way?

      No spin involved at all.

      I can recompile an entire Linux system, but why the fuck should I have to? And how the fuck do you expect my mother to do this?

    23. Re:he's probably not lying... by 10Ghz · · Score: 1
      Have you looked at the KDE.org website lately to see what they release?


      Lets get few things straight: KDE releases source ONLY. They do not release binaries. The binaries are created by some third-party, and KDE just offers them a convenient place to download those binaries from. Just because KDE offers you those binaries doesn't mean they are made by them.
      --
      Lesbian Nazi Hookers Abducted by UFOs and Forced Into Weight Loss Programs - -all next week on Town Talk.
    24. Re:he's probably not lying... by nmos · · Score: 1

      Can Microsoft afford to ship an update that breaks Photoshop or, say, Corel Office?

      Depends if MS has a similar competing product or not :)

    25. Re:he's probably not lying... by antiher0 · · Score: 1

      you don't seriously think that MS is willing to risk another anti-competition trial, do you?

    26. Re:he's probably not lying... by jafuser · · Score: 1

      I worry a little about the way the Unix desktops are becoming increasingly interdependent, with lots of libraries and lots of integration... are we going to end up in the same place, eventually?

      This is what keeps linux off my desktop. I don't like dozens of dependencies to install an application that I'm just evaluating.

      I like simple self-contained applications which come with good defaults, or figure things out for themselves. If they need a lot of dependencies, then the documentation should come in PLAIN TEXT with very clean and detailed instructions on what dependencies it needs, where they are expected to be installed, and what is the normal way to get everything in place for new users who may not be aware of the "standard procedure".

      I still think the Amiga had/has everything else beat in this regard. Everything had a place where it was expected to be, programs were mostly self-contained, and things just worked together without a lot of hassle.

      --
      Please consider making an automatic monthly recurring donation to the EFF
    27. Re:he's probably not lying... by Trepalium · · Score: 1

      I don't think I've seen any vendor that will guarantee 99.9999% uptime (52.5 minutes downtime per year). Most will only guarantee 99.999% uptime, but only if you use one of their clustered systems that have automatic failover (8.7 hours downtime per year). I could believe vendors offering 99.99% or 99.9% uptime for non clustered systems (87.6 or 876.5 hours of downtime per year). Anything beyond 99.99% uptime, you get into the realm of hardware failures causing downtime, and the guarantees usually expire the moment you install any non-approved software (including non-approved MS patches) on the system.

      --
      I used up all my sick days, so I'm calling in dead.
    28. Re:he's probably not lying... by nmos · · Score: 1

      you don't seriously think that MS is willing to risk another anti-competition trial, do you?

      Why not? The wern't punished in any significant way.

    29. Re:he's probably not lying... by tom's+a-cold · · Score: 1

      Standard bean-counter trick: take something with a long lifecycle (say, time from bug detection to availability of fix to end-user), then salami-slice out a small part of that process (say, time to fix and check in code once the bug is diagnosed) and take credit for how fast turnaround time is on that salami-slice.

      You see it all the time in SLA's when someone thinks you're not reading the fine print.

      --
      Get your teeth into a small slice: the cake of liberty
    30. Re:he's probably not lying... by sheldon · · Score: 1

      Wow, talk about spin.

      The amazing thing is that this point doesn't even matter. The binary and source distribution were released on the same day to the public by the KDE team.

      I at least hope you know the difference between a patch in a source tree and a source distribution. Or are you going to try to spin that argument as well?

      BTW, the point here is that the Linux community resorts to spin to try to view themselves favorably, and you're just falling right in line with that drum beat.

    31. Re:he's probably not lying... by 10Ghz · · Score: 1
      Wow, talk about spin.


      No, no spin. KDE releases source and source only. Before the actual release, they release the source to the third-party packagers (SuSE, Red Hat etc.) who then create the binary-packages (or not, it's their choice). As new version is released, some of the packagers have binaries ready, and they are released alongside the new version. KDE may provide them with a convenient location for those binaries, but they are NOT made by the KDE-folks.

      The binary and source distribution were released on the same day to the public by the KDE team.


      Binaries were not made by the KDE-folks, KDE releases source only. It's up to the packagers to create binaries, and that process is beyond KDE's control.

      BTW, the point here is that the Linux community resorts to spin to try to view themselves favorably, and you're just falling right in line with that drum beat.


      Uh, no. Point is that KDE releases source, not binaries. Source is all they are concerned with. If someone creates binaries from that source, fine. If not, fine. Since their concern is to get the source out the door. As far as KDE is concerned, Konqueror was patched in 90 minutes. How long it took for binaries to be released, is no concern of KDE, since KDE deals with the source, not the binaries.
      --
      Lesbian Nazi Hookers Abducted by UFOs and Forced Into Weight Loss Programs - -all next week on Town Talk.
    32. Re:he's probably not lying... by sheldon · · Score: 1

      As far as KDE is concerned, Konqueror was patched in 90 minutes.

      No Konqueror was patched in the CVS tree in 90 minutes. It took one month before they released a distribution with the patch in it that users could upgrade to.

      How long it took for binaries to be released, is no concern of KDE, since KDE deals with the source, not the binaries.

      This point is still irrelevant.

      I don't see how this spin benefits your argument.

    33. Re:he's probably not lying... by 10Ghz · · Score: 1
      No Konqueror was patched in the CVS tree in 90 minutes


      So anyone willing to patch their sytems were able to do so.

      It took one month before they released a distribution with the patch in it that users could upgrade to.


      If I remember correctly, KDE-team released a new version of their desktop which had the hole fixed ASAP. I checked some past KDE-releases and they have released patched to their software. Hell, they provided patches to KDE 2.2.2, back when the current version was 3.0.2.

      I don't see how this spin benefits your argument.


      What "spin"? KDE-team noticed that there was a hole in their software. They fixed it ASAP and provided users with pathces and new versions of their software. End of story. Binaries of those patches are out of KDE's control. But patches (in source-form) were available and anyone wanting to patch their system could have done so. I fail to see the problem.
      --
      Lesbian Nazi Hookers Abducted by UFOs and Forced Into Weight Loss Programs - -all next week on Town Talk.
  62. We invented personal computing by pesc · · Score: 1

    Gates: We invented personal computing

    God what a lying idiot he is! Apple, TRS-80, S100-systems, ABC80 (in Sweden), PET, C64, Amiga, Sinclair, etc. Plus many other that I haven't mentioned. All predates the PC. They didn't invent jack shit, they are just a bunch of shoddy cloners!

    More modern GUI systems? Xerox! Mac! Microsoft don't invent. They clone, embrace, extend and extinguish, leaving the ground deserted and barren where they have passed by.

    --

    )9TSS
  63. Wow what a bad liar by bogie · · Score: 1

    He could have at least thought of something better to say than that. I mean geez I don't know any Windows diehards who would agree with him about Windows patching. They might argue about which is more secure, but not about who is better at getting patches out quickly. Every admin myself included has real issues with the quality of MS's patching. Beyond the length of time it takes to get patches there is the cross your fingers and hope the patch doesn't blow up your server factor. Then there is the patch for the patch for the patch because MS didn't get it right the first time.

    These quotes are just making Bill seem like he is either totally out of touch with what is going on with his company or he is in complete denial. Either way he looks really bad.

    --
    If you wanna get rich, you know that payback is a bitch
  64. 4gigs of Physical Ram Should Be Enough by CHaN_316 · · Score: 1

    "I can't think of desktop applications where you would need more than 4 gigabytes of physical memory" -Bill Gates

    Uhh......remember when you claimed that 640K should be enough? Bill... you're setting yourself up for another infamous quote. History has a way of repeating itself though I guess....

    --
    "There is no spoon." - The Matrix
  65. Invented personal computing by Steath+Car · · Score: 1

    Did everyone catch the comment at the end of the article "We invented personal computing." Uh, yeah...right.

  66. RPC vulnerability returns. AGAIN!!! by FreeLinux · · Score: 2, Interesting

    There were 7 updates yesterday!

    And none of those updates covered the RPC vulnerability, again! That's right the Microsoft RPC vulnerability that has already been patched twice is STILL vulnerable and an exploit exists. Word is that Microsoft has been informed but, as usual, no word from Microsoft yet. The notification was sent 10 days ago.

    So much for 24 hour patches. On the other hand, I must admit that I have no desire to reboot my servers every 24 hours so, it's just as well that Bill isn't as fast as he says he is.

    I wonder if they will actually fix RPC on the third attempt.

    1. Re:RPC vulnerability returns. AGAIN!!! by Filip+Maurits · · Score: 1

      The notification was sent 10 days ago. So much for 24 hour patches.

      Maybe Microsoft introduced a new working week:
      they now work 4 days a week, 3 hours a day... ;-)

  67. patch time by Deathlizard · · Score: 1

    My guess is that he's right. The programmers DO get the code fixed within 24 hours.

    The problem sets in when it's got to be run on millions of PC's now. Most likely this takes a good week or two to verify if the patch won't bork 90% of the PC's out there.

  68. Maybe he was just talking about Conectiva by Corgha · · Score: 1

    Conectiva routinely releases patches that are months late.

    Take, for instance, the most recent, CLA-2003:762, released October 14 for a glibc bug from August 14.

    My all-time favorite, however, is CLA-2003:628, released in April 2003 for a vulnerability in vixie cron announced in March 2001!

    So, if you count Conectiva, Gates is probably right about it taking a couple of weeks on average, even if everyone else does it in 24 hours.

    760 days for Conectiva + 1 day each for 50 other distributions is about 16 days, on average.

  69. Re:Someone RAM Bill by protohiro1 · · Score: 3, Interesting
    I did some research because I am a geek. The earliest post on usnet is from 1992 and it is someones sig. The closest real, attributed reference that might be the origination of this I could find is this:

    It's certainly enough memory. The Mac started out with 64K, which is one sixteenth of what the Lisa started out with. Because the Mac's bit map is smaller than the Lisa's, we thought we could do something with that amount of memory. But we were pushing for 128K all the way, and about a year ago we switched to 128K. We figured out how to squeeze the applications down to that size.

    When you're writing applications that are going to be simple to use, it's important to have some boundaries that prevent you from throwing in an unlimited number of features; the memory size provides that limit. Certainly what we've got in terms of Multichart, Multifile, Multiplan, and Microsoft BASIC on the Mac are as rich as on any other machine we've seen. I think the people at Apple would openly admit that Plan, File, and Chart are more powerful than their equivalents on the Lisa, and yet they run on an eighth as much memory.

    When you do get more memory, you'll be able to have multiple applications active or have more data space available. It's partly those boundaries that have forced us to find more clever ways to do things and stay within the memory size. It's caused us to be more innovative than we would have been if we'd had a megabyte.


    -- Bill Gates, interviewed by David Bunnell in Macworld, volume 1, issue 1, 1984, pages 44-45.
    --
    Sig removed because it was obnoxious
  70. I'm Thinkin... by Ha-reed · · Score: 1

    Bill borrowed Steve Jobs' Reality Distortion Field

  71. He may be lying about the BIOS... by dtjohnson · · Score: 1

    From the article:
    "Gates says he isn't aware of Microsoft expanding its relationship with BIOS maker Phoenix Technologies in a deal designed to more closely integrate the basic building blocks of the PC with the Longhorn system, as suggested by ZDNET. Both Microsoft and Phoenix are involved in plans to integrate digital rights management (DRM) technology at the operating system and hardware level, according to sources in the US.

    "To be honest, I haven't heard from Phoenix Technologies for over five years," Gates said. "Are they still in business? The BIOS will always be separated from the operating system. Actually, it's gotten out of date. If you run Windows XP, it calls very little of the BIOS."

    Gates sound disingenuous, at best, when he asks if Phoenix is still in business.

  72. Lying by Z4rd0Z · · Score: 1

    Bill Gates probably has no idea how long it takes for Linux to get patched. And he doesn't have to know, because there are few if any consequences for dishonesty for a person with power.

    --
    You had me at "dicks fuck assholes".
  73. Microsoft invented personal computing? by Single+GNU+Theory · · Score: 1

    Gates also claims Microsoft invented personal computing.

    Bwa-ha-ha!

    ISTR that Gates and Allen started Microsoft to offer products for the personal computers already in existence. To quote from the Microsoft Museum "Microsoft History Trivia" document, the appearance of the MITS Altair 8800 inspired Gates and Allen to develop a BASIC language for it.

    Microsoft can't even be trusted to get their revisionist history straight.

    --
    Little Debian: America's #1 Snack Distro!
  74. forced updates are a good thing... by herrvinny · · Score: 1

    Forced updates are a good thing, in my opinion. All those braindead computer newbies who can't tell the Netscape Online service and the Netscape browser apart (not to mention the Messenger service and the Messenger IM thing) will have their computers protected automatically.

    Only thing is, there should be a test for anyone who doesn't want forced updating. I say at minimum, you need to know at least 4 programming languages before you become nerd enough to know how to patch computers by yourself.

  75. Everyone's talking, but... by banky · · Score: 2, Insightful

    ..no one is posting any hard data, any more than he is. This post references actual numbers, but other than "what a freaking liar/what a misinformed idiot" no one is offering proof on the matter.

    --
    ZOMG I WOULD LOVE TO KNOW ABOUT YOUR FEELINGS ON MACINTOSH VERSUS WINDOWS, VI VERSUS EMACS, AND HOW YOU'RE NOT A DORK
  76. Average... by HeX314 · · Score: 1

    In order to make a correct average, you must find the starting point. If he starts averaging the number of patches released since last week, then maybe he's right. If he starts when the Universe began, then patches for Windows and Linux have been released in almost identical frequency.

  77. But of course by JamesP · · Score: 2, Funny

    I mean, MSBlast patched my box in no time...

    --
    how long until /. fixes commenting on Chrome?
  78. It's not a lie OR an error! by Avihson · · Score: 1

    It's a Marketing feature!

    ( And unfortunately not limited to MS or even the computer industry!)

    The difference between a used car salesman and a corporate wonk like Gates:
    The salseman KNOWS when he is lying.

  79. Re:M$ is fast by ebbomega · · Score: 1

    I remember when I heard about a big samba patch on slashdot. About an hour after I had already patched it.

    Microsoft is still behind. By the time you've heard about it it's already too late.

    --
    Karma: Non-Heinous
  80. YA *I* think he's referring to... by 0x0d0a · · Score: 1

    *I* think he's referring to the time until a bug gets fixed in the source tree. Furthermore, what measures as a "bug" may differ. Many "bugs" in open source software are feature requests, etc. The measurement may be from the time that Microsoft filter personnel classify something as a "bug" (i.e. a reported severe security hole may sit around for months before it reaches developers flagged as a MUSTFIX bug with MS's internal bug tracking system, for all I know). Finally, security-related bugs may differ in fix time from ordinary bugs ("this icon should be moved over by two pixels to the right").
    This doesn't mean that Bill's wrong, but it certainly doesn't tally with my past experience, and given that this is currently a senstive Microsoft weak point, I'd be expecting at least a bit of coloring of the truth.

    1. Re:YA *I* think he's referring to... by 0x0d0a · · Score: 3, Insightful

      By "time until fixed in the source tree", I'm just pointing out that Microsoft may take months to roll out a patch to users in a hotfix or service pack.

      Also, to be fair, I suspect that few users immediately apply kernel patches in the Linux world. They wait until RH's up2date or Debian's apt-get sucks down the latest and greatest. A fair comparison should might say "Microsoft does not attempt to supply a 'rapid-release' patch for technical users at all, unlike the Linux community. However, it's time-to-Joe-end-user-release is comparable to that of Red Hat." or something along those lines.

      I certainly feel that, at least applying the immediately obvious and most useful criteria, Microsoft does *not* fix bugs (release patches) more quickly than the Linux community.

    2. Re:YA *I* think he's referring to... by tdemark · · Score: 3, Insightful

      Actually, I think he's referring to the time between Microsoft admiting there is a bug and the time a patch is available.

      Example: Today's Windows bug. Microsoft announced it today and patched it today. That's less than 24 hours to "fix" it.

      This type of logic makes perfect sense to the PR or marketing departments.

      - Tony

    3. Re:YA *I* think he's referring to... by MrResistor · · Score: 1

      a reported severe security hole may sit around for months before it reaches developers flagged as a MUSTFIX bug with MS's internal bug tracking system

      That was exactly my first thought.

      given that this is currently a senstive Microsoft weak point, I'd be expecting at least a bit of coloring of the truth.

      I've come to the conclusion that corporations advertise according to their weaknesses; e.g. Hyundai advertising their "dependability" when they are in fact the most unreliable cars I've seen, or any kids cereal being "a healthy part of this complete breakfast".

      It's sad to me that they see more value in fixing the perception through marketing than in actually improving their product, but maybe that's an inevitability in a profit-driven/materialistic society.

      --
      Under capitalism man exploits man. Under communism it's the other way around.
    4. Re:YA *I* think he's referring to... by merdark · · Score: 1

      I could be wrong (probably am) but I think Microsoft releases patches rapidly as hotfixes first. But then those hotfixes sit there a long while before getting rolled into a real windows update patch. Maybe some of the severe ones move faster, but I believe that's the process for most patches.

      The huge multi-patch patches that the Linux community likes to make fun of are always distributed separately long before hand. The big patch packages are mainly for new installations so that they don't have to install 100+ separate little patches. If you patch regularly, you probably don't need most of the big patches.

      The service packs of course don't fall into this catagory. They often add new features and change fundamental things. In a way they are more like point releases of windows since they can do things like update kernels and core libraries. That's why service packs can introduce incompatibilties for *sensitive* software like Oracle.

      Anyways, I'm no expert, so please correct me if I've got anything wrong.

      "I certainly feel that, at least applying the immediately obvious and most useful criteria, Microsoft does *not* fix bugs (release patches) more quickly than the Linux community."

      A patch that requires me to get source and recompile does not count as a reasonable fix for me. In that sense, I wouldn't be surprised if they release patches at least on par with the open source community. I wound't be surprised if they are faster either.

      I agree comparing to Debain or RedHats patch distributions would be most fair. And keep in mind that few people really *try* to patch MS systems. Most let the windows update patch away, which is not the fastest way. I have jumped ahead of windows update on a few occasions because I really needed something patched. I went to the Hotfixes to do that.

    5. Re:YA *I* think he's referring to... by Mattcelt · · Score: 3, Interesting

      My thoughts exactly. The fact is, MS usually waits until it is ready to release a patch before it announces the vulnerability, and whines loudly when someone decides to notify the user community before the hotfix is available.

      The problem is, the bug may be discovered independently by some knowledgable crackers and taken advantage of for months while stolid MS works at its own pace to 'fix' the problem. (Which, incidentally, often a) doesn't fix the whole problem, or b) introduces other problems.)

      Worse yet, when the user community doesn't have knowledge of a problem and a cracker does, the user, who may have been able to obviate the problem through another means (blocking RPC at the firewall, or whatever), is now left defenseless until MS gets around to telling them about the problem.

      So if MS can keep everybody's mouth shut about the problem until it's ready to release the patch, of course they're going to have an incredible record for getting patches out quickly.

    6. Re:YA *I* think he's referring to... by Penguinshit · · Score: 2, Interesting

      IIRC, I got my Debian SSH and Sendmail patches same-day. I have NEVER seen Microsoft even respond to a bug submission that fast, let alone release a working patch.

    7. Re:YA *I* think he's referring to... by Serpent+Mage · · Score: 1
      I have NEVER seen Microsoft even respond to a bug submission that fast, let alone release a working patch.

      How many submissions have you made to microsoft?

      I've used linux exclusively for 3+ years now and they have excellent (near immediate) responses to submission made and fixes which is superb and I cannot fathom Microsoft being able to do the same. However, I have never sent them anything and have no right to accuse them of anything.
    8. Re:YA *I* think he's referring to... by Penguinshit · · Score: 1

      None. However, I monitor a few security mailing lists where folks who DO submit bug reports to Microsoft have outlined the weeks/months/years of Microsoft's inaction, inattention, or outright denial. So unless all those folks are consistently lying, I'm feeling confident in guessing that Microsoft's turnaround time on this issue is rather pathetic (especially compared to the turnaround I've seen with OSS).

  81. Re:Someone RAM Bill by Isomer · · Score: 1

    Yes but...

    Virtual memory space is very important. I have 512mb of memory, but I want to be able to mmap(2) files that are several gig in size. I don't care that it doesn't all fit into memory at the same time, thats why we have virtual memory after all. But when programs ending up taking over 90% of their code managing mmap(2)'ing in the right regions of memory to do stuff, it's rediculous. If I had a 64bit machine, I'd have 90% less code, and 90% less bugs.

    Consider editing large uncompressed images (photos?), these make a great candidate to just mmap(2) off disk and manipulate them directly, yet since we only have 2 or 3 gig of address space, we have to write our own memory management routines to page them in and out.

  82. Re:Lying or Misinformed? by Zemran · · Score: 1

    Marketing? I think he is just stoned :) People believe all sorts of daft things when they are stoned... I even believe I make sense :p

    --
    I love stacking my barbecues in the shed at the end of summer - you can't beat a bit of grill on grill action.
  83. Re:Someone RAM Bill by BrynM · · Score: 1
    "and I'm willing to bet he never said the 4GB one, either."
    There seems to be some clamor that Bill didn't say the 640k quote. I'm cool with that. I stand corrected. He did say the 4GB one though. It's in the article. You did RTFA, didn't you... Oh wait... /. -Never mind. :)
    --
    US Democracy:The best person for the job (among These pre-selected choices...)
  84. Re:MS has a track record of lies and FUD by NanoGator · · Score: 1

    "MS has a track record of lies and FUD?"

    I've got news for ya, Slashdot has a track record for FUD raised about most MS stories.

    --
    "Derp de derp."
  85. Angry by dolo666 · · Score: 1, Troll

    I can't keep from getting angry when I hear these kinds of totally false statements that Microsoft solves bugs quickly.

    It wouldn't be so bad I guess, if it was from some lowly person like me saying it off the cuff, but to hear it from that totally rich bastard Bill Gates say it, really makes my blood boil. He's made all his money on lies, deception and hoodwinkery!

    The sad thing is that many people believe him, because he's rich -- not because he is correct.

    Microsoft's approach to solving bugs is this:
    1. If it's broken, ignore it until it does major damage (because so much is broken, and you can make much more money on big disasters).

    2. If it's NOT broken, fix it so you can sell the new version of it, and make more money, since if it's not broken, you must know how it works enough to change it so that it requires a new boxed version.

    3. Repeat and feel free to interchange 1 & 2 after each step, because breaking the product is acceptable, since the public expects it sometimes.

    1. Re:Angry by BerntB · · Score: 1
      The sad thing is that many people believe him, because he's rich -- not because he is correct.
      To be more specific, even condemned criminals with a history of desinformation are believed not because they are rich -- but because of the size of their ad budget...

      (And it probably doesn't hurt when lots of companies with large ad budgets are dependent upon the criminals because of their monopoly control...)

      The classical question are -- do media sell ad views or magazines/newspapers?

      --
      Karma: Excellent (My Karma? I wish...:-( )
    2. Re:Angry by rasafras · · Score: 1

      Guess what it is that makes my blood boil? Misinformed /.ers who have no conception of Microsoft at all. Bill Gates has absolutely no say in how bugs get fixed, so if he's saying something it's probably because he was told that. I'd just like to point out one thing - Microsoft has far more to fix than Linux. The times you are all considering for Linux are most likely the time it takes for the Kernel to get patched. Microsoft as a whole is a large company, and they have significantly more programs to patch when bugs are found. As for your three points, I hate to say it, but I have heard more intelligence coming out of a pig's anus. If a bug does major damage, I doubt Microsoft makes money. They more likely get bad publicity from people like you. And, more often, the patch is released but the disaster occurs because of a) incompetent sysadmins or b) they simply didn't install the patch. As for #2, I don't really see that statement making any sense. I mean, Windows typically changes a significant amount between releases (maybe not as much from 2000->XP), but it certainly changes enough that a simple upgrade would not be possible.

      If you don't like the idea of paying for a product, simply say so. Don't bash MS for trying to make money. And please, don't write it as M$. It's stupid and ignorant.


      PS. Linux is not bad. Don't flame me for being a Microsoft 3er, I just happen to dislike people that hate Microsoft for no reason. If you have a good reason, go ahead and hate them. I'm not going to stop you.

    3. Re:Angry by Anonymous Coward · · Score: 1, Insightful

      I speak for a lot of people when I say that I hate Microsoft for quite a few good reasons.

  86. 640k by geekBass · · Score: 1
    But apart from Photoshop, I can't think of desktop applications where you would need more than 4 gigabytes of physical memory

    Yes, Mr. Gates. 640k ought to be enough for anyone.

  87. Re:hahah by lullabud · · Score: 1

    perhaps FP means fourth post? since we don't know what it truly means it is a problem like schrodinger's cat.

  88. FP? by tokaok · · Score: 1

    First Patch!

  89. Re:Bah! The suits at Microsoft are running scared by Mabataki · · Score: 1

    In case you've forgotten - Mahatma Gandhi was shot dead!

  90. He also said ... by DVega · · Score: 1
    "The obvious mathematical breakthrough would be development of an easy way to factor large prime numbers."

    and

    "640KB should be enough for anybody"

    also

    "I believe OS/2 is destined to be the most important operating system"

    And many more ...

    --
    MOD THE CHILD UP!
  91. Not Lying or Misinformed, just Distorting by GFW · · Score: 1

    I'm sure that if they start the clock at the point they decide a bug is important enough to fix and assign a programmer to work on it right away, then they can claim 24 hours.

    In the real world where we are concerned with how long a vulnerability is out there from the first moment somebody notices it ... well 3 months is often closer to the truth.

    So as Ben Kenobi said " ... from a certain point of view."

    1. Re:Not Lying or Misinformed, just Distorting by GSloop · · Score: 1

      It's from the time they tell the programmer there's a problem until they can get the thing to compile without syntax errors...

      Sheesh!

      Cheers
      Greg

  92. Gates Disillusioned by BuckaBooBob · · Score: 1

    He makes quite a few remarks that clearly show he is disillusioned.

    "We have to. We invented personal computing."

    Yeah right... It was alot more along the lines of the silicon valley based computer users group.. They layed all the ground work for personal computing... MS inventing it? Thats a huge stretch.

    Microsoft invested over $100 million to refocus on building products that strive to be secure by design, by default and by deployment.

    Where is this secruity? We haven't seen any yet.. secure by design? I thought it was obsecuirty as they have shown and commented... Just a few days ago there was a comment made about people announcing exploits to "Shut-up". Not to mention... "Secure by default" most defaults are insecure because they are in a predictable state.. The only truely secure default is unplugged hardware... You buy it unplugged so there for its in a default state and extreamly secure :)

    --
    Who needs WiFi when we can have Packet Over Sheep! http://datacomm.org/PoS-InternetDraft.txt
  93. Re:M$ is fast by HeX314 · · Score: 1

    Seems to me as though the [obviously] non-profit worm/virus writers are working faster than a multi-billion dollar corporation.

  94. You guys... by NanoGator · · Score: 1

    ... tout how "open source is great because problems get fixed right away!", but when MS catches up to that, all you can focus on is Bill Gates making a comment about Linux that isn't favorable. Geez, you guys find fault in every attempt Microsoft makes to address the issues you all have been noisy about.

    Funny thing is, this story was posted as an Anti-MS troll, and a lot of people fell for it.

    --
    "Derp de derp."
  95. Re:Someone RAM Bill by BrynM · · Score: 1
    That's an interesting little bit. Thanks for the research. I especially like this:
    "When you're writing applications that are going to be simple to use, it's important to have some boundaries that prevent you from throwing in an unlimited number of features; the memory size provides that limit."
    I guess Office is no longer supposed to be simple to use by this definition. Interesting how times change. Thanks again.
    --
    US Democracy:The best person for the job (among These pre-selected choices...)
  96. Well of course by wazzzup · · Score: 1

    Practice makes perfect.

  97. Rewriting history the history books? by MacDust · · Score: 1

    Did Billy-boy say, "We invented personal computing"? at the end of that article? What? How could they copy it from the Mac if they invented it first? Everyone knows able was first and Microsoft copied it.

  98. Yeah, right , Billy Boy by haruchai · · Score: 1

    "We invented personal computing"

    Yet another revisionist reading of computing history
    by Microshaft's Head Cheese.

    --
    Pain is merely failure leaving the body
  99. Re:You wankers... by Lobo93 · · Score: 1

    Yup. Read it and laughed. Hard.

    Synopsis:
    Winfs: We (M$) tried that shit some years ago and failed miserably. But hey: We'll try again! We are very persistent when we want the users to suffer; NTFS5 was not enough. "Windows could not start because the following file is missing or corrupt. \system32\hal.dll. Please re-install a copy of the above file." Huh? Errrr...never heard of that one...

    64bit computing: Hmm. Well, it could be useful for those gfx-dweebs and a few others. Desktop-wise, that is(cough). For now, we'll just squeeze Intel a bit and see what they have in store for us.

    Oh! And XML is doubleplusgood.

    --
    "The only clear view is from atop the mountain of our dead selves." - Peter Carroll
  100. Re:Someone RAM Bill by ComputerSlicer23 · · Score: 5, Insightful
    I'm willing to concede that it's entirely possible that Bill Gates didn't say that, if your willing to concede that Bill Gates in 1996 might really not remember saying it, or might really be lying.

    It's not like revisionist history is a new concept. In 1981, I could completely see, Bill Gates saying the 640K quote, and have it taken out of context. One of the Watson's (of founding IBM fame, I can't remember if it was Sr, or Jr. I'm guessing Sr), once said that worldwide we'd probably only need 5 computers ever. It's not like he's terrible stupid either.

    If you really want to have fun and games, write down a particular fact that you can't remember a specific event ever happening in your childhood. Now, store that piece of paper someplace safe. Now everyday imagine that event happening. Picture in your mind how you would remember it if it happened. Over the course of time, you'll "remember" it as a fact that is just like all of your other memories from childhood. You'll know it's inaccurate, but to your mind you can't tell between a the old true memories, and the newly fabricated memories. It's a simple form of brainwashing. I've specific memories that I know for a fact never happened. I constructed a conversation I never had once for the purpose of trying this out. It's the old adage about a lie repeated often enough becomes true.

    I'll willingly admit it's entirely possible Bill never said that, and he surely can't prove he never said it. However, I'll never trust Bill's memory about him not saying it. However, if you tracked down the original references to it and debunk that, now you have something. Somebody has to cite it. It's in the Usenet Archives, or in old papers and trade magazines. Find the originals and debunk them, don't cite Bill saying 15 years later that he didn't say it. That's not debunking.

    Here, I'll prove it to you. "I've done some stupid things, and I've done some wrong things, but I was never born. Nobody in the human race would ever say they were born.". Does that "debunk" the fact that I was born or not? I'd say my sitting here, and typing into slashdot is pretty strong evidence I was born at some point in the past.

    A number of statistics have been proven to be false, but are cited all the time in the past. If you follow all of the original citations back, you'll find they all start at one single reference. The original person who stated it, either lied, or had something wrong with the way they came to the conclusion. By the time anybody figures that out, it'll be a "fact". I know this happened on stuff reguarding sexual orientation (formely common cited stat that 10% of all men are gay), and I believe it's happened on several other occasions about other commonly cited stats.

    Debunking involves getting reasonable close to the source and debunking it. Not asking somebody 20 years later, who has a vested interest in not looking like an idiot, if he said something that's blatantly stupid 20 years ago. Read up on what Bill has said about what he thought of the internet.

    I believe it was Cringely who pointed out that Bill always proclaims he was a visionary about the net, and saw ahead of everyone how much that could change the world. Yet when you read his book from that time where he was spouting off about what he thought was the next big things in computers, just as the internet went mainstream he never mentioned it once. Bill's in a position where he can't afford to say, I missed that huge new technology. He's Bill Gate's, he thinks Microsoft single handedly invented the Personal Computer. Just read the end of the article.

    Kirby

  101. Today's vulnerabilities by Keebler71 · · Score: 1
    Well, I read about new Windows XP security vulnerabilities here on Slashdot earlier today and came home from work to find that XP had automatically downloaded four security updates/fixes that were awaiting a single left-click to install. I suppose the only way this can be made easier is if I went to \Control Panel\System\Automatic Updates and changed my settings to automatically apply the automatically downloaded updates, but I don't do this simply because I like to first bring up the list of updates to see what each fix is out of abject curiosity.

    The Slashdot community will no doubt issue a chorus of blather about how horrible MS security is while hipocrytically complaining that Longhorn will automatically push updates to users. Pick an argument and stick with it.

    --
    "It takes considerable knowledge just to realize the extent of your own ignorance." - Thomas Sowell
    1. Re:Today's vulnerabilities by Dolohov · · Score: 1
      Generally speaking, one group of people makes one argument and another makes the other. The so-called "Slashdot community" is not homogeneous -- as you yourself demonstrate.

      I have a few nits to pick with it, such as that I am not always connected to the internet and that Windows sometimes behaves irrationally when it expects an internet connection and none exists. From what I've heard of Longhorn, they seem to rely heavily on having an internet connection at all times.

      Second, they just haven't managed the art of not requiring reboots for even minor patches, and until they do, I don't want them automatically installing them.

      There are also legal concerns -- MS puts a EULA on every damn thing they write, including patches. Am I legally agreeing to that document if my operating system downloads and installs the patch code automatically? Their behavior in that regard has not been spotless. If I am given the opportunity to decline a given EULA, can I no longer download future patches from them?

      What control do I have over what gets patched? I seem to recall that one of the CD DRM techniques required that a given driver be installed (and that not allowing Autoplay prevented that). If MS signs an agreement with that company to automatically "patch" Longhorn with that DRM, can I stop that installation to preserve my fair use rights to my CDs?

      In short, I find the situation troubling, and that it requires scrutiny. If you choose to call that "blather", then fine. Or perhaps I should simply quote Walt Whitman:

      Do I contradict myself?
      Very well then I contradict myself,
      (I am large, I contain multitudes.)
  102. Re:Uptime by plugger · · Score: 1

    That's my main complaint with Windows, the damn reboots for most critical updates. My users must think I'm an idiot, since I'm forever telling them to save their work and log out while I reboot the office server.

  103. Learn from the best by jafac · · Score: 1

    Bill Gates has obviously been watching our current US Presidential Administration closely.

    The bigger, and more outrageous the lie - the less people will question it's veracity. As long as proving that it's a lie takes more than 5 minutes, or involves logic that a typical American High School graduate can't grasp, you can say anything - and it's as good as truth.

    --

    These are my friends, See how they glisten. See this one shine, how he smiles in the light.
  104. Nobody will ever need more then 4GB of memory... by breman · · Score: 1

    "But apart from Photoshop, I can't think of desktop applications where you would need more than 4 gigabytes of physical memory, which is what you have to have in order to benefit from this technology. Right now, it is costly."

    This line will someday be as famous as the now classic "640k" quote.

  105. Re:MS has a track record of lies and FUD by Cyno · · Score: 1

    Honestly, because anyone is stupid. I'm not talking ignorant. They've gone beyond ignorance. Anyone, today, can be absolutely retarded. Yet fully capable of arguing their retarded perspective of reality as if it were based in fact.

    This happens when the average background noise of the media and propoganda stream spreads more lies than truth while society still agrees that its important to listen to this nonsense. (I'm talking television, radio, magazines, and advertisements) Just look at CNN and Fox, and their parent companies and all the companies they own. They don't need to stretch the truth to make it lie, just leave out a few important facts. Yet somehow us Microsoft bashers "don't have all the facts".

    So they label us Score:0 Redundant, and go on continuing to ignore our lies. Gotta love it.

    When everyone finally acknowledges the truth do you think we'll ever get an appology for the frustration they put us through?

  106. Hello Bill, this is your subconscious by Dani+Filth · · Score: 1

    Yes, you're right, Linux is scary and is poised to take a chunk out of the Microsoft empire. Just don't let it slip in public how worried you are. DOH! Now go buy some company and deliver game #2 for the Xbox (Halo was 1).

  107. Re:Linuxpower demonstrates hole in linux by wo1verin3 · · Score: 1

    Yes, you can download the patch by clicking here.

  108. Well they should be patching faster by thgreatoz · · Score: 1

    ...Practice makes perfect?

    --
    When their numbers dwindled from 50 to 8, the dwarves began to suspect Hungry.
  109. He Must Be Talking About... by lloy0076 · · Score: 1

    ...his own personal machine. Seriously.

    "Hi There, my beautiful development team, it's Bill!" says Bill.

    "Wassup?"

    "I've got a virus! If you don't fix it RIGHT NOW, I'm gonna fire you. Really!" is Bill's reply.

    "You canna do that!"

    "Don't you know I own this company? If you don't get your sorry ass up here right now and fix it within 24 hours I'm gonna look like a liar and you're mince meat." says Bill and hangs the phone up.
    Heh!
  110. Ehm, anyone else get images of a sad old demented by SmallFurryCreature · · Score: 1
    dictator who has been in power to long?

    I mean geez, that entire interview is so full of holes I am starting to doubt the sanity of the guy. Or maybe it is one of those totally taken out of context interviews.

    I mean we all know that the old "640k should be enough for everyone" quote is not all it seems. Now he makes another memory prediction? Talk about stupid.

    MS spends a 100 million on security. Oh whoopie. Anyone else think MS pays more in fines for its "criminal" behaviour? It is a company with profits in the billions. 100 million is peanuts and an excellent showcase of how serious MS is about security.

    Upgrading IE? First not until longhorn. Oops that caused some bad press, so of course we are going to upgrade it. Notice no actual examples of what is going to be fixed. Granted they did patch the list of security holes. I just had hoped they would apply the patch to IE, not to the list itself.

    Then the whopper. MS releases patches faster then linux. Even the most sincere microsoft apologist can't claim that with a straight face. Not if they ever worked with both operating sytems.

    No this is like Magrat Tatcher or Ronald Reagan. Dementia is a cruel thing. Please let Bill Gates live out his remaining live with some dignity no need to show him dribling and soiling himself.

    --

    MMO Quests are like orgasms:

    You may solo them, I prefer them in a group.

  111. "Linux" by mraymer · · Score: 1
    Apparently, "Linux" is now an operating system and not just a kernel anymore. Yep, that's right. So Microsoft can patch Windows faster than patches are released for "Linux."

    No need to mention a distribution or an application. Just "Linux."

    Really a fair comparison there... I mean, does this sound right? "Patches are released for Mandrake faster than they are for the win32 kernel."

    Maybe Mr. Gates had a distribution in mind when he said "Linux" or perhaps he is just spreading FUD. Then again, perhaps he is just genuinely ignorant of the fact that "Linux" itself is a kernel, not an OS.

    --

    "To confine our attention to terrestrial matters would be to limit the human spirit." -Stephen Hawking

    1. Re:"Linux" by Reverend528 · · Score: 1

      He probably is getting his free Operating Systems confused. I bet he was thinking of HURD.

  112. Remember the SSL bug in IE5 and Konqueror by mormop · · Score: 1

    MS spent weeks denying it was a problem, admitting it was a problem, saying it was a problem but only a small one that no one need worry about, admitting it was worse than that, then finally after loads of BS releasing a patch.

    I seem to remember I had a patched konqueror about 3 days after it was announced.

    Was Gates' quote a statement, a manifesto or the result of a hallucinogenic mushroom in an omellette?

    --
    Hmmmmmm..... Deep fried and look like Squirrel.
    1. Re:Remember the SSL bug in IE5 and Konqueror by Jacer · · Score: 1

      Maybe he means 24 hours after they confirm it's a problem.

      --
      --fetch daddy's blue fright wig, i must be handsome when i release my rage
  113. It's a lie... by 511pf · · Score: 1

    This is simply Bill Gates observing that "up-is-downism" works in today's society. Call me a troll if you want, but I mean this sincerely: The current US Presidential administration tells outright, baldfaced lies constantly and they get away with it. To them, up is down, black is white and so on. Gates figures that most people won't question Microsoft, so why not give it a shot? If Bush can get away with it, the heads of major corporations probably can too.

  114. Tangled web of dependencies. by Irvu · · Score: 1

    Some of that is already appearing. Take a look at some of the more recent distributions by Redhat, Debian or Gentoo. It used to be that installing the minimal size was the default. Now some distros such as Gentoo won't even do anything without Python, Java, Perl, etc. Of course the real issue is, how do you define "Linux" are we talking the Kernel, or a fully built Redhat system with loads of interdependencies?

    I can't help but think that, left unchecked, the windows state is where some of these distros will go.

    About Bill, He's no idiot either. If he's not lying outright then he's stretching the truth and he's smart enough to know that too.

    But look at it this way, of course we aren't going to believe him. Neither are most people who know Linux. But for those that don't know it or don't care -- or say used to work at Microsoft and have since become the cybersecurity czar and need to sell it in Congress -- these statements will have wieght.

  115. Re:There is no bugless code by Machine9 · · Score: 1

    actually, I think my old dos "hello world" program was pretty much infallable...

  116. Re:Uptime by DA-MAN · · Score: 1

    Cuz us techs don't get paid overtime. If any other non-salaried employee was asked to stay till everyone left to get an important part of their work done it would be a big deal.

    Screw that, I'm all for getting work done during work hours.

    --
    Can I get an eye poke?
    Dog House Forum
  117. Why Windows is badly designed. by sashang · · Score: 2, Insightful

    From Gates himself "How could we ignore the browser?," Gates responded. 'The Explorer is fully integrated with the operating system, take it away and the OS grinds to a halt. When you call up Help, you're using the browser. In Office 2003 instead of going to the local files, the browser will go online and fetch the latest documents."
    Any software engineer/programmer who reads this can make a good case for bad design of windows because it's not modular. What morons design an OS that depends on a higher level application. In this case it's IE but it it could easily be any other application, like solitare. Of course it's rubbish that the Windows OS depends on IE but this is the story they have to front ever since they won the case against Netscape.

    1. Re:Why Windows is badly designed. by nyseal · · Score: 1

      I'm not trying to troll and maybe I'm showing a little ignorance but is IE a higher level app than an OS?

      --
      [SIG] Remember Mattel handheld games?
    2. Re:Why Windows is badly designed. by sashang · · Score: 1

      When I use the term 'higher level' I mean it in terms of a dependency relation, like the way the branches higher up a tree depend on a root branch for support. MS would like us to believe that the OS depends on IE in order to work (using the tree metaphor, the IE branch is a root branch and the OS grows from that branch). If this is true then IE is at lower level than the OS. In other words the kernel, filesystem, GDI etc require IE in some way to function. However from an engineering perspective, it's virtually impossible to see how IE can be at a lower level than the OS. If it truely is, then it's indicative of bad design, bad code and hence bad software.

    3. Re:Why Windows is badly designed. by sashang · · Score: 1

      I dislike Microsoft's practices quite a bit, but I have to take issue with you here. You are complaining that Windows help relies on an HTML user-agent. That is the defining quality of modularity - instead of writing a specialised help viewer, they reused an existing component of the system. That is good software engineering.

      I agree - what you describe is an example of good engineering. I wasn't complaining about it. I was meaning to cite this as an example of bad design this:

      The Explorer is fully integrated with the operating system, take it away and the OS grinds to a halt

    4. Re:Why Windows is badly designed. by John+Courtland · · Score: 1

      I think it's a bad design too, but I believe you can change the shell executable to whatever you want, so if you made your own shell, you could put it in Explorer's place. I realize that this isn't probably "allowed" but the OS will still run without it. In fact, if you hate explorer, you can run everything from Task Manager, just kill explorer's process, then run the programs you want from File->Run. IE may not work after you do that though :)

      --
      Slashdot is proof that Sturgeon's Law applies to mankind.
    5. Re:Why Windows is badly designed. by nyseal · · Score: 1

      I knew the explanation would come down to a bad design feature! Thank you for your comment!

      --
      [SIG] Remember Mattel handheld games?
  118. Even better than that... by donnz · · Score: 1

    is his description of how IE is so tightly bound with the oS:

    "How could we ignore the browser?," Gates responded. 'The Explorer is fully integrated with the operating system, take it away and the OS grinds to a halt. When you call up Help, you're using the browser. In Office 2003 instead of going to the local files, the browser will go online and fetch the latest documents."

    Oh, oh, ahh, the innovation...

    --
    -- Free software on every PC on every desk
  119. HUH? by bobbozzo · · Score: 1
    This just does NOT make sense.

    Microsoft lately waits until each Wednesday to release ALL of their new Windows patches (Exchange, Offic, etc may be released on another schedule).

    Therefore, giving them the benefit of the doubt, assume it takes them 24 hours to develop and debug a patch. It will then take them, on average, 3.5 more days before it is released.

    --
    Nothing to see here; Move along.
    1. Re:HUH? by Lars+T. · · Score: 1
      It gets better! Err, worse ;-)

      According to this Heise News article (in German), Microsoft will only issue security patches once a month from now on - excluding "Emergency Releases".

      --

      Lars T.

      To the guy who modded me down from perfect to terrible Karma - Apple haters still suck

  120. Depends on what a "linux bug" is... by Stonent1 · · Score: 1

    Bugs in the kernel right? That seems rather funny. Most of what he is thinking about are probably things like OpenSSH exploits or something.

  121. Review of Bill Gates' quotes by solprovider · · Score: 1

    Bill's quotes are in quotes.

    About Longhorn, "This release is going to be driven by technology, not by a release date. Which probably means it is going to be late."
    If there will not be a release date, then how can it be late?

    "We have a lot more understanding of database technology these days"
    That should scare anybody who is using MSSQLServer.

    From the article: One thing that seems to slow down the next release of Windows is the much talked about data storage system WinFS, technology designed to make information easier to find and view. Since it is based on the next version of SQL Server or Yukon, the system will essentially function as a relational database.
    Bill: "We will have pointers in the data like a URL or weblink. URLs are a perfect tool for this, but in previous databases we really had a problem with them. They screwed up the query semantics."
    So every flaw in MSSQLServer will affect the file system. And will be accessible using URLs.

    "How could we ignore the browser? The Explorer is fully integrated with the operating system, take it away and the OS grinds to a halt."
    Don't you love that every flaw in the browser affects the whole OS? (On my system, MSIE is the only application that grinds the OS to a halt.)

    This quote was responding to the lack of feature updates for MS Internet Explorer. Is this from the same company that announced there will never be a new version of Internet Explorer?

    "To be honest, I haven't heard from Phoenix Technologies for over five years. Are they still in business?"
    Bill does not follow technology news? Slashdot posted many articles about the Phoenix trademark issue when there was a Mozilla variation using the name. This answers whether Bill reads Slashdot.

    "But apart from Photoshop, I can't think of desktop applications where you would need more than 4 gigabytes of physical memory"
    But won't 4 GBs of RAM be required just to load Longhorn and the then-current MSOffice? MS seems to be one of the main drivers of the need to upgrade consumer hardware. We know this quote is going to haunt Bill for a very long time.

    "Critical security patches should be applied with the speed of the internet."
    Viruses are already applied at the "speed of the internet." Patches need to be even faster.

    "We used to send megabytes of software to fix a 20 byte file"
    But the viruses were already small!

    "We invented personal computing."
    Remember Apple? Atari? Commodore? Tandy? And anybody else that sold a personal computer before 1981?
    He could say that he brought personal computing to the masses, and taught them the definition and joy of "reboot".

    ---
    I skipped how he says MS is releasing patches faster than the Linux community. MS might be releasing MORE patches, but faster? Read the article if you want a laugh.

    --
    I spend my life entertaining my brain.
  122. What happened to objective media? by Nathan+Ramella · · Score: 1
    Remember when you talked to a reporter, and the reporter would check the facts and find out you lied, you might get a chance to correct yourself before the story went to print, or you'd get exposed as a liar?

    What happened to the media? People seem to be lying about all sorts of things these days and nobody seems to care.

    There doesn't appear to be any repercussion anymore. People are too willing to ascribe a lie to being a 'mistake'. Why cant we be held accountable for the facts?

    Journalism Programs everywhere: Please stop producing these Soft Ball pitchers. While there is a lot of money to be made in 'Infotainment' news shows, it is necessary for democracy that we have impartial journalists that know how to dig up dirt, have integrity, and follow through.

    -n

    --
    http://www.remix.net/
  123. 24 hours/bug on average may be a true statement by igny · · Score: 1

    You don't count bugs unreported by Microsoft. When their programmers work on a new patch, don't you think they encounter and have to deal with many bugs before it is posted on their update site? If you fix 99 bugs in one day, it allows you to go back and fix that old bug posted 2000 hours ago, and still beat that 24 hours/bug average. As their patches become increasingly complex, you can expect them to deal with 1000s bugs per day, thus bringing the average to under 1 hour/bug.

    --
    In theory there is no difference between theory and practice. In practice there is. - Yogi Berra
  124. Re:Someone RAM Bill by fferreres · · Score: 1

    He never cared looking like a stupid, in fact, it was an integral part of the plan of becoming the richest man on earth. Anyone that looks to smart is cut in peaces before reaching target.

    --
    unfinished: (adj.)
  125. Re:MS has a track record of lies and FUD by Lobo93 · · Score: 1

    When everyone finally acknowledges the truth do you think we'll ever get an appology for the frustration they put us through?

    I have all my Monopoly-money on "When hell freezes over", and I'm eagerly awaitin' my winnings when...wait a sec...D'OH!

    --
    "The only clear view is from atop the mountain of our dead selves." - Peter Carroll
  126. Re:Someone RAM Bill by sniggly · · Score: 1
    Bill Gates can't think of applications where you would need more than 4 gigabytes of physical memory!

    Is he new? In 10 years there will be applications SCREAMING for it because they use complex models, 3d rendering and high definition graphics and video. Not just games. Poster below me mentions celestia which is a perfect example of a program developing a pretty much insatiable appetite for computing resources.

    Longhorn delayed until 2006, longhorn server until 2007.. Microsoft will have to move to 64 bits before the end of the decade. Otherwise people will move to OSX or linux.

    --
    Of those to whom much is given, much is required.
  127. Crediting MS Trolling by _Sprocket_ · · Score: 2, Interesting


    You guys... tout how "open source is great because problems get fixed right away!", but when MS catches up to that, all you can focus on is Bill Gates making a comment about Linux that isn't favorable.


    You're right. Microsoft has gotten better. Whether they've caught up is a point for debate. But at least they have generally improved their reaction speed. Let's give credit where its due.

    Now - issues such as ignored bugs, fundimental design flaws, non-patches, destructive patches, so-called Responsible Disclosure, "I wish those people just would be quiet", etc are all fodder for other holy wars.



    Geez, you guys find fault in every attempt Microsoft makes to address the issues you all have been noisy about.


    Heaven forbid someone think that Microsoft's attempts to "address the issues" might be anything but. You refer to this whole article as an Anti-MS troll. Pray tell what you think Mr. Gate's statement is. How does Linux play in to the improvment of Microsoft's commitment to a secure product?

    Instead of trying to get in a (questionable) jab at Linux... perhapse he could have referred to his own company's record. Something along the lines of "We've gone from little over 40 hours on average to 24 hours. We've really improved since the mid-90s and Windows NT when we didn't really have any focus on security."

    But hey - that's just not Mr. Gate's style. And I'm sure he's got quite a following of fanboys who call that "agressive" and "good business". Even as they snear at "Linux zealots" and "anti-MS" criticism.
    1. Re:Crediting MS Trolling by NanoGator · · Score: 1

      "You refer to this whole article as an Anti-MS troll..."

      The submitter intentionally drew attention away from the story itself and instead focused on a comment Bill made and attempted to fan the flames on it.

      " Surprisingly, everyone seems to have overlooked his statement that Microsoft fixes bugs faster than Linux developers do."

      " Pray tell what you think Mr. Gate's statement is. How does Linux play in to the improvment of Microsoft's commitment to a secure product?"

      He provided a point of reference. Granted, it's a debatable point of reference, but it's still a point of reference. Maybe you know how long it takes to get a patch released, but that doesn't mean everybody does.

      For the record, I'm not defending his comment, I'm simply answering your question of how it came in to the interview. I think what he said was stupid.

      "Instead of trying to get in a (questionable) jab at Linux... perhapse he could have referred to his own company's record."

      Perhaps. Remember, though, that Linux is a competitor to Windows, and the mindless Linux zombies out there spout off how fast a security problem can be fixed like a broken record. I'm not the least bit surprised that Bill responded.

      "And I'm sure he's got quite a following of fanboys who call that "agressive" and "good business". Even as they snear at "Linux zealots" and "anti-MS" criticism"

      Spare me the 'fan boy' crap. Seems like that name calling only comes out when I've made a point. You don't have to be in love with Microsoft to know that Slashdot has it out for Microsoft. Every time Slashdot posts a story about MS, some stupid twist is put in to make Microsoft sound evil. How can anybody trust these stories without going in and carefully reading the articles? Slashdot cries WOLF! every time a story about MS is posted.

      One day, nobody will ever take Slashdot seriously. It's already happening today. A story goes up about MS, and it'll be quietly dismissed. "Oh those Slashdot kiddies are all riled up again." The people who complain about it are called "Microsoft Apologists", in reality, they're the people who RTFA.

      --
      "Derp de derp."
    2. Re:Crediting MS Trolling by _Sprocket_ · · Score: 1


      The submitter intentionally drew attention away from the story itself and instead focused on a comment Bill made and attempted to fan the flames on it.


      What exactly is the story then? The interview has lots of little nuggets in there. As the submitter stated:

      Bill Gates made several interesting claims about Longhorn. Many of them have been extensively covered recently, including plans to force users to patch automatically.

      So the submitter thought the comparison to Linux was the interesting bit. I thought there were some other bits in there worth looking at too - but hey.


      He provided a point of reference.
      ...

      For the record, I'm not defending his comment, I'm simply answering your question of how it came in to the interview. I think what he said was stupid.


      He could have used his own company's past performance as a point of reference. In fact, he does. Used to take 40hrs to put out a patch. Now its 24hrs. Message: we're serious about security and we're improving. Mission accomplished.

      I agree with you that making the remark about Linux was stupid. But let's call a spade a spade. If you're going to label Mr. Gates' critics as trolls, then let's apply the same standard to Mr. Gates himself.


      Remember, though, that Linux is a competitor to Windows, and the mindless Linux zombies out there spout off how fast a security problem can be fixed like a broken record. I'm not the least bit surprised that Bill responded.


      It could be that the "mindless zombies" have a point - Open Source projects react quickly. And its nice to see Mr. Gates take time in his interview to mention a competitor - he used to try simply ignoring it.

      But the point isn't that Linux was mentioned. Its that Mr. Gates is doing a bit of trolling himself. Not that its suprising or unprecidented.


      Spare me the 'fan boy' crap. Seems like that name calling only comes out when I've made a point.


      Oh, c'mon. You're not beyond a bit of name-calling yourself. The point is that there are individuals posting to Slashdot using all kinds of derogetory labels while ignoring the irony of it all. Again - its a reference to calling the submitter's comments a "troll" while ignoring the subject itself.


      You don't have to be in love with Microsoft to know that Slashdot has it out for Microsoft.


      And good for them. Its a nice balance to all the Microsoft cheering we see elsewhere in IT media and techie forums.


      Every time Slashdot posts a story about MS, some stupid twist is put in to make Microsoft sound evil. How can anybody trust these stories without going in and carefully reading the articles?


      I agree on two points. First, one should always read and interpret the article for one's self. And yea - sometimes Slashdot editors and article submiters get a bit too eager to criticise Microsoft. I wouldn't catagorize it as "always" happening though. But then, I agree with a lot of the criticism expressed here. To each his own.


      One day, nobody will ever take Slashdot seriously. It's already happening today.


      Meanwhile, I'm rather amazed that a small alternative view techie site gets regular coverage in mainstream media, shows up on a suprising number of corporate and government desktop screens, and is even mentioned in meetings by individuals one would never expect to call up such a site. Not everyone will appreciate Slashdot's bias. But not everyone will dismiss it either.

    3. Re:Crediting MS Trolling by EvilTwinSkippy · · Score: 1
      Maybe someone should found "microdot", a propaganda and smearing forum for Microsoft partisans. In all fairness, the Linux folks should get a "linuxdot", and the folks who just want to fling mud head over to "bashdot."

      In the meantime, posts bitching about everyone else's predjudices predjudice me (at least) to consider you either a)naive or b) deflecting attention from the real issue.

      I for one work with both operating systems on a daily basis. Hell I have the 2 peacefully coexisting. Now I can tell you unequivocally that our Windows boxes are broken into, wormed, or die of spontaneous OS implosion (SOSI) an awful lot. Or Linux boxes suffer from about the same rate of SOSI. For every registry that croaks, we have an EXT2 partition meet it's maker. Both drop linked libraries, or lose programs to bit rot.

      What distinguishes them is the susceptibility to intrusion or worms. Linux compared to windows is like fruitcake compared to potato salad. Fruitcake will go bad, eventually. Potato salad can't be trusted for more than a few hours outside, or a few days in the fridge.

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
  128. funny by adamruck · · Score: 1

    oh the good quotes from the story

    "To be honest, I haven't heard from Phoenix Technologies for over five years," Gates said. "Are they still in business?"

    "We invented personal computing..."

    "None of the security problems recently affected people who had their software up to date..."

    -Since Bill is such a shrewd buisness man I would think he would atleast know the major buisness's in his related field, I think he is just playing dumb

    -when I read this I just about choked, yeah invented, I think he meant marketed/monopolized

    -cough rpc cough

    --
    Selling software wont make you money, selling a service will.
  129. New OS? by mugnyte · · Score: 1

    Does anyone else see the craziness of this article? Why are they building YET ANOTHER OS? Couldn't MS simply update and reform the OS code they have out there already? I mean, if they simply refined the update process, they'd have the door to pump software out to the public. Plus, it would be in their best interest to allow for "beta testers" to examine the releases before general use. Sounds a bit like Linux, eh? Instead, this sounds like IBM of the 70's, esp. given MS's throwing their weight around in the hardware world.

    The model of rebuilding, retesting, reselling, and re-patching a machine that ALREADY does what 99.9% of what users want seems insane. Then again, I'm not an MS business person. Everybody knows that if you're not selling, you're dying.

    Most home users get a new desktop theme, with a few new icons, and they think they have a "new OS". But with the MS spin machine on full churn, people will be humming a new "Start Me Up" theme and standing in line for another blue box after midnight, just to do the same crap they did the day before.

    You can bet your bottom dollar that Linux will still be around in 2005,6,7 - and it'll still support most of the popular technologies, have another giant pile of new experiments run on it for info tech, and still be the baseline for cheap reliable computing power.

    And Bill...it'll still be your competition, and still be free.

    mug

    1. Re:New OS? by Rallion · · Score: 1

      Honestly, I've seen nothing in Longhorn to be impressed about, it's true. But to understand the reasons, just look at your statements from a different point of view--from Gates' point of view. Yeah, Linux is still gonna be competition. He needs a way to beat it. That means new software, really. It works for MS, and whether Longhorn is revolutionary or not, it will make them money. XP is fine for me, though, and with a dual boot with 98 and a DOS VM, I have no reason to switch. Unfortunately, few will realize this, or even care. They'll buy Longhorn.

  130. Hmm... 40hrs = a week? by Kelmenson · · Score: 1
    The number 40 hours strikes me as a bit odd, unless Gates is talking about work-hours, and stretching that out to a week of work to get a bug fixed, rather than under 2 days.

    I still think he is clearly wrongly counting the start point in Microsoft's favor, but saying that it used to take them 5 days (40 hrs) and now takes then 3 days (24 hrs) seems a whole lot more realistic than saying they fix a bug they received at 1pm by the next 1pm...

  131. XP still doesn't play nice with NT4 or Samba by Drinian · · Score: 1
    What!?!! On some NT4 or Samba networks XP has hideously slow NetBios network speeds. Just a simple google search shows this.

    I've dealt with this problem since XP practically came out and still there is no solution (there are lots of suggestions, but little works).

    This isn't a security issue, but still...

  132. So... by repressitol · · Score: 1

    This has probably been covered in the previous 500 posts, but bears repeating: what about connecting to the f'ing internet with an "unpatched product" to get the patch & being compromised in under a minute?!

  133. Re:Someone RAM Bill by spitzak · · Score: 1

    Although I have heard that Gates never said this, you are misinformed about the state of things in 1983 (not 1981, at that time there was no 640k barrier, there was either a 64K or a 1meg barrier).

    Having 1 megabyte of memory was well within the realms of possibility. 256K chips were available and 32 of these would give you 1 megabyte. And the 8088 used by the IBM PC was designed to address 1 megabyte. It had 20 address lines.

    The complaint that probably gave rise to this was that the IBM PC design dumped the video memory at the 640K location, thus splitting the memory and making the top third almost useless. At that time bank switching the video memory was quite common and they should have done this, or at least put the video memory all the way at the end and thus given a 1044K limit. This stupidity was certainly IBM's fault, Microsoft had nothing to do with that design, I believe.

    However the 640K limit was complained about plenty, by people comparing it to the 1Meg limit that the hardware naturally had. Maybe even Bill Gates complained or defended this design, giving rise to this quote.

    Unfortunatly history has been mangled and people think the complaint was comparing to more modern multi-megabyte machines. Actually the complaint is similar to complaints about the versions of Windows and Linux that could not do more than 2Gigabytes, even though the Pentium can address 4 gigabytes. The complaint was about a factor of 2, not of 100.

  134. Forced Automatic Updates New Security Hole? by Cruxus · · Score: 1

    It would seem to me that, if a malicious coder were able to find a way to circumvent the normal security procedures, perhaps through a worm that spreads through an unknown (to Microsoft) vulnerability, the forced auto-update mechanism could be made to download even more malicious software. If Microsoft isn't taking every step possible and then some to prevent this, we could see the headline "Windows Longhorn Auto-Update Downloads Virus" in newspapers in a few years.

    --
    On vit, on code et puis on meurt.
  135. Well duh... by Alan+Hicks · · Score: 2, Funny
    'We've gone from little over 40 hours on average to 24 hours. With Linux, that would be a couple of weeks on average.'

    It's quite obvious that he's talking about the rate at which they are finding vulnerabilities, not the rate at which they are fixing vulnerabilities.

    --
    Slackware, what else when it must be secure, stable, and easy?
  136. Re:Lying or Misinformed? by wobblie · · Score: 1

    Nah, he would be making more sense if he was stoned. Bill Gates should get stoned.

  137. Patching Faster vs. Patching Easier by Taco+Cowboy · · Score: 2, Insightful



    The reality is that no one can produce, however we have tried, a perfectly bugless software.

    And there is no way we can be certain that our softwares don't have any unintentional vulnerability either.

    Nobody likes software patches, but it is a necessity if we want to make our softwares work better.

    The question is not how fast one makes the patch - although it's very important - the keypoint in making patches is how EASY we can make our patch-delivery system works.

    No doubt that the Linux patches, at least most of them, come out way faster than those of the MS-Windows camp. But there is _one_ thing that we can learn from Microsoft - they have made their patch delivery system (aka www.windowsupdate.com) something that can be used by most users.

    I am not saying that the Linux patching process is cumbersome, but we gotta admit that the average users (not sysadmins) just can't begin to understand how to patch their Linux boxes.

    If we can come up with something that approach the ease of www.windowsupdate.com, perhaps Linux can be used by even more not-so-tech-savvy users.

    I know, I know, there's a world of difference between MS-Windows and Linux, but what I am talking about is the deliverance of our software patches - and in this case, Microsoft has something that we can learn from.

    Thank you for reading.

    --
    Muchas Gracias, Señor Edward Snowden !
    1. Re:Patching Faster vs. Patching Easier by AstroDrabb · · Score: 3, Informative
      I am not saying that the Linux patching process is cumbersome, but we gotta admit that the average users (not sysadmins) just can't begin to understand how to patch their Linux boxes.
      What? Have you ever used Red Hat's up2date tool? It is easier then windows update. It is just a GUI app that you click Next in about 3 times, wait for the new packages to download and your done. What in the world could be hard about that? Red Hat even has a little icon that sits in the notification area and turns a bright red with an exclamation point when there are updates available. Clicking on that brings up the uber-newbie friendly GUI to download them. No terminal (command line) involved. No rebooting involved (unless you upgrade the kernel). You can install ALL the updates at once with NO reboot between them, unlike many MS updates, especially service packs that require a reboot. Please don't mention chain loader, no average Joe is going to be able to use that.
      --
      If Tyranny and Oppression come to this land,
      it will be in the guise of fighting a foreign enemy. -James Madison
    2. Re:Patching Faster vs. Patching Easier by Anonymous Coward · · Score: 1, Funny

      "The reality is that no one can produce, however we have tried, a perfectly bugless software."

      ---------
      #!/usr/bin/perl

      print "Hello World!"
      ---------

      damn. you're right. :(

    3. Re:Patching Faster vs. Patching Easier by Spl0it · · Score: 1

      apt-get update
      apt-get upgrade
      holy crap, thats a tough thing to grasp.

      --

      No, this is
    4. Re:Patching Faster vs. Patching Easier by Penguin+Follower · · Score: 1
      The reality is that no one can produce, however we have tried, a perfectly bugless software.

      While it is true that humans make mistakes and therefore anything we create cannot be perfect... OpenBSD comes pretty damn close. :)

    5. Re:Patching Faster vs. Patching Easier by Taco+Cowboy · · Score: 1



      apt-get update
      apt-get upgrade

      holy crap, thats a tough thing to grasp.

      The above is yet another proof that many /. readers just don't grasp it.

      The average not-so-tech-savvy users don't know a thing about `atp-get' or whatnots. All they know is to click here, click there, and perhaps change the background picture.

      The average not-so-tech-savvy users also made up of the vast majority of computer users in the world, believe it or not.

      Now, do we need to make them do the "apt-get" this, "apt-get" that, or do we make something simpler for them so they can patch their systems without having to crash their machines ?

      --
      Muchas Gracias, Señor Edward Snowden !
    6. Re:Patching Faster vs. Patching Easier by Spl0it · · Score: 1

      The auto notification / 2-4clicks to update and install patches in redhat comes to mind?
      I understand your point, but lets not be ignorant here, options exist..especially for anyone that can remember 2 commands.

      --

      No, this is
    7. Re:Patching Faster vs. Patching Easier by BlackHawk-666 · · Score: 1

      The easy solution to this is to run apt-get as a cron job that automatically keeps Joe Sixpack's machine up to date. Expert users could disable it and the general public could just enjoy it's benefits without ever knowing it was there.

      --
      All those moments will be lost in time, like tears in rain.
    8. Re:Patching Faster vs. Patching Easier by the_pooh_experience · · Score: 1
      here here. up2dateis a great tool. I am running the 7.3 version that has no notification, but I receive the security updates via email. There are only two downsides:
      1. As far as I know, I can not automate it. If I just wanted to make every security update to my computer that came out, I would like to click a button where it connects to the server every week or so to DL and install patches (and maybe sends an email to me when done saying what it did). If I am a sysadmin (which I am not), I would love to run this on 200 machines simulatneously without being at each machine and clicking next three times.
      2. If I update a package via an RPM but not via the RH site (say KDE), it doesn't know that I have updated. It keeps pitching me KDE 3.0.5, when I have 3.1.X. I don't really know how it works, but I can simply type
        rpm -qa kde*
        and figure out what version of kde I am running. Can't up2date?
    9. Re:Patching Faster vs. Patching Easier by CaptainTux · · Score: 1
      If we can come up with something that approach the ease of www.windowsupdate.com, perhaps Linux can be used by even more not-so-tech-savvy users.

      Ahh, and there lies one of the big problems in Linux that I've been complaining about for years: the attitude of most Linux software developers towards end users. I can't count the number of developers (including major Linux folk) who I've heard say "I'd rather it not be too easy to use Linux as it keeps the riff-raff out." This is one of the things that is contributing to Linux's slow acceptance in the NON-tech marketplace.

      By contrast, Microsoft - as horrid as they are - focuses on making EVERYTHING in Windows easy and simple. Including patches. There is really no compelling reason why Linux patching couldn't be as simple and straightforward as Windows (even kernel patches). Why should someone have to understand some principals of software development just to keep their system patched?

      Microsoft might have horrible security and all but they certainly have their upgrade and patch systems down. Of course, they need it a lot more too.

      --
      Anthony Papillion
      Advanced Data Concepts, Inc.
      "Quality Custom Software and IT Services"
    10. Re:Patching Faster vs. Patching Easier by illtud · · Score: 1

      As far as I know, I can not automate it. If I just wanted to make every security update to my computer that came out, I would like to click a button where it connects to the server every week or so to DL and install patches (and maybe sends an email to me when done saying what it did). If I am a sysadmin (which I am not), I would love to run this on 200 machines simulatneously without being at each machine and clicking next three times.

      If they're servers, I'd be asking what a button's doing on there anyway. Servers don't need X, and Red Hat servers don't need X. Up2date is a command-line utility - what you're looking at is just a GUI front end. Try 'man up2date'.

      What you're wishing for is a cron job that runs 'up2date -u' every night (or every hour). Alternatively, since you've paid your RHN subscription (you would have, since you've got more than one server, right?) you use the tools on rhn.redhat.com to list your servers, show which are out of date, select 'update this server automatically' (for pushed updates) etc. etc. You can even form logical groups of servers and have different update policies for each. Good stuff.

    11. Re:Patching Faster vs. Patching Easier by Robert+The+Coward · · Score: 1

      First this is how I upgrade and it is command based. I would be easy to put into a cron job and let run in the background. 2nd there are several programs out there that add a pretty front end to apt-get that would give some the fuction of apt-get without the command line requirement.

    12. Re:Patching Faster vs. Patching Easier by fucksl4shd0t · · Score: 1
      10 PRINT "HELLO WORLD!"
      --
      Like what I said? You might like my music
    13. Re:Patching Faster vs. Patching Easier by fucksl4shd0t · · Score: 1

      The average not-so-tech-savvy users don't know a thing about `atp-get' or whatnots. All they know is to click here, click there, and perhaps change the background picture.

      I don't see why I have to cater to an aggregate of individuals who have all decided to be stupid. Further, I don't see why I have to accept excuses for these people in the form of "not-so-tech-savvy users". As a matter of fact, my mother is hardly tech savvy, and she understood perfectly how to type:

      READY
      LOAD "*",8,1

      SEARCHING FOR *
      LOADING

      Yes, I realize that GUIs are supposed to make life easier for us. Just like calculators are supposed to make math easier for us. With calculators, though, you still have to know the underlying principles. Why should GUI be any different? In fact, I can give you one reason why GUI should be different:

      The average not-so-tech-savvy users also made up of the vast majority of computer users in the world, believe it or not.

      --
      Like what I said? You might like my music
    14. Re:Patching Faster vs. Patching Easier by AstroDrabb · · Score: 1
      As far as I know, I can not automate it. If I just wanted to make every security update to my computer that came out, I would like to click a button where it connects to the server every week or so to DL and install patches (and maybe sends an email to me when done saying what it did). If I am a sysadmin (which I am not), I would love to run this on 200 machines simulatneously without being at each machine and clicking next three times.
      This already exists. If you pay have an RHN account you can create groups and place servers/desktops/etc in to these different groups and categorize things. You can then deply to the different groups when you want. This is all done over the web through your RHN account. I use this to group a few AS 2.1 servers and updating them is a breeze. I can connect to the net from anywhere and check the servers status. I can also do this for my home PC's.
      If I update a package via an RPM but not via the RH site (say KDE), it doesn't know that I have updated. It keeps pitching me KDE 3.0.5, when I have 3.1.X. I don't really know how it works, but I can simply type
      rpm -qa kde*
      and figure out what version of kde I am running. Can't up2date?
      Do you run the rhnsd daemon? This is what reports back to RHN what is on your computer every few hours and also checks for update, remote reboot commands, etc. If rhnsd is not running, RHN won't know the state of the RPM's on your system. Maybe consider upgrading to Red Hat 9? It is much better and has very good AA font support. I downloaded Red Hat 9 for free and paid $60 for an RHN account that lets me have two PC's on it to manage remotely, I'd figured $30 per/PC is not too bad for that feature.
      --
      If Tyranny and Oppression come to this land,
      it will be in the guise of fighting a foreign enemy. -James Madison
    15. Re:Patching Faster vs. Patching Easier by Taco+Cowboy · · Score: 1

      If we can come up with something that approach the ease of www.windowsupdate.com, perhaps Linux can be used by even more not-so-tech-savvy users.

      Ahh, and there lies one of the big problems in Linux that I've been complaining about for years: the attitude of most Linux software developers towards end users. I can't count the number of developers (including major Linux folk) who I've heard say "I'd rather it not be too easy to use Linux as it keeps the riff-raff out." This is one of the things that is contributing to Linux's slow acceptance in the NON-tech marketplace.


      Have you read the response to my second message ?

      Read HERE and see how people talk about "CRON JOB" as if it's something that the not-so-tech-savvy average Joe users can do in their sleep.

      Also there's a response that sounded like "I don't see why I have to lower myself to those stupid idiots to make their lives easier" or something like that.

      It's THAT type of snobbish attitude that is hampering the widespread adoption of Linux.

      Unfortunately, most of the Linux people never look at themselves in front of a mirror.

      Very unfortunately.

      --
      Muchas Gracias, Señor Edward Snowden !
  138. I vote for "Managing the truth" by EmbeddedJanitor · · Score: 2, Informative
    For my sins I've done extensive work with WinCE. Often we've found serious bugs for which no fix ever came about. I've never seen a fix come out in less than a month. When you do get fixes they're in the form of "QFEs". Currently you need to download a gigabyte of this shit to fix WinCE3.0.

    In comparison, I've seen Linux fixes come out in less than 30 minutes. Likely having Linux hackers spanning all time zones helps a lot to improve bug fixing time. Report bug at 6pm, patch available 8am.

    --
    Engineering is the art of compromise.
  139. Re:Someone RAM Bill by treat · · Score: 1

    assert(1==sizeof(char))

  140. Seems counterintuitive by smchris · · Score: 1


    Almost everything I see coming through in RedHat up2date seems to be for laboratory "potential" vulnerabilities. Am I wrong and the problems are grossly understated? What percentage of fixes are reactions to actual penetrations?

  141. What Bill has forgotten, is.... by Artifex · · Score: 1

    He's comparing the response time of his muti-billion-dollar company, with thousands of paid programmers, to a global effort by thousands of volunteers, for the most part. Sure, Red Hat, SuSE, etc. pay their staff, but so many of these packages are completely maintained by volunteers.

    You'd expect Microsoft to have a much better response time, even have a 24-hour-a-day emergency response team that has immediate access to all source and a large testbed and the ability to work on a problem and get it fixed immediately, if necessary... but it's the little guy with his little utility or driver for legacy hardware that stays up all night when he gets a single email showing a problem, out of personal pride.

    --
    Get off my launchpad!
  142. Re:Lying or Misinformed? by the_mad_poster · · Score: 1

    Marketing? I think he is just stoned.

    Are you suggesting that there's such thing as a sober marketer? My experiences with marketing suggest otherwise.... and I've generally felt the only way to get away from those unpleasant experiences was for me to get stoned...

    --
    Alito: A vote for Alito is a punch in the eye to put that bitch back in her place!
  143. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  144. Re:MS has a track record of lies and FUD by NanoGator · · Score: 1

    "Yet somehow us Microsoft bashers "don't have all the facts".

    Gee? I wonder why? First you jump to the conclusion that everything Microsoft does is for the sole purpose of one day taking over the world. "Oh please, we all know the real reason that Microsoft released the XBOX is so that they can tighten up their market with Windows and Office, even though niether has been ported to the machine." (Yes, I have seriously heard somebody say something like that here.)

    Secondly, no matter what Microsoft does right, there's always something at fault about it. "Microsoft found a cure for AIDs, unfortunately they patented the technique so we automatically hate them. They should give it away for free even though they spent billions in research."

    Third, you 'Microsoft Bashers' always assume that the people who don't hate Microsoft (they don't even have to be a fan, they just have to not harbor strong feelings against them) are hopeless idiots. You're never receptive to new information or are open to changing your mind about anything.

    "So they label us Score:0 Redundant, and go on continuing to ignore our lies. Gotta love it."

    Yeah, they are at fault for your behaviour. Gotta love it. Maybe you should think about updating your image as an MS basher, it's tiring. There are legitimate reasons to want to avoid Microsoft. Nobody's going to pay attention to them if the source is close-minded zealousy.

    --
    "Derp de derp."
  145. Re:Someone RAM Bill by hsenag · · Score: 1

    Not if they were 256K_bit_ chips, which was my immediate assumption on noticing the apparently dodgy arithmetic. The 30pin SIMMs I remember had 8 (or 9 if you wanted parity) separate chips on them to make up one single module.

  146. It's okay... by Anonvmous+Coward · · Score: 1

    .. for Slashdot to publish distorted stories that paint Microsoft as evil, but if Bill Gates does it back he's suddenly commited a major no-no.

    Let he without sin throw the first stone.

    Amusingly enough, there probably is a justification for his 2-week average number. The perception could be wrong, but then again it's nothing that Slashdot isn't guilty of.

    1. Re:It's okay... by EvilTwinSkippy · · Score: 1
      (Pelt Pelt Pelt - Crash)

      Ma, someone broke mu windows!

      Then quit chuckin' rocks ya old fool!

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
  147. How to spot A Snakeoil Salsman by Avihson · · Score: 1

    This old (Jan 2003) article has some relevant points to the Gates humor piece in The Register:

    The Seven Warning Signs of Bogus Science

  148. Lies, damn lies, and..... averages by bobKali · · Score: 1

    See, the wonderful thing about averages is that you can get a whole bunch of trivial sh*t that you classify as "bugs" that you patch in say .... 20 to 30 minutes... hell, you can even classify all changes you make as "bugfixes" and if they're released without a bug report, then you have a whole host of zero-time scores to pull your average 3-month gaping security hole cracker-to-fix time down to something that sounds reasonable.

  149. Re:Who cares? Really. by mobiGeek · · Score: 1
    Two or three years ago, when [...] everyone still thought Microsoft was the greatest thing going ...
    Speak for yourself.

    I know at least five people who haven't thought that since at least 1991, if ever at all (at least one who never did ;-))

    --

    ...Beware the IDEs of Microsoft...

  150. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  151. Re:Someone RAM Bill by fermion · · Score: 1
    What the statement represented was his lack of ability to see that the world is not limited to the technology that MS decides that we need. The statement represents the companies repeated failure to foresee the needs of the customers. This failure has been precipitated their GUI interface years after Apple, their browser software years after Mosaic and almost a year after Mozilla, and there so-called net strategy years after Java. The only reason they were able to survive all these fiascos is because they were able to aggressively develop and exploit their monopoly.

    I do not want to make this Motorola vs intel thing, or whatever, but to speak directly to the memory issue, the need for more than hacked together 64K chunks were well known in in 1981, and plenty of machines were shipping out of the factory with much more memory For instance, apple memory doubled almost every year. In 1979 the Apple || shipped with 64K. The Apple ||| shipped in 1980 with 128K and was replaced the next year with a 256K model. This was still not enough memory. By 1983 the Lisa shipped with 1MB, although at a price few were willing to pay. The fact that the Intel machines had to employ extremely ugly hacks to get to 640K, and even uglier third party utilities to unreliably get beyond that is just a testament to the a lack of creativity. The Apple lines aggressively exploited technology and by 1986 had a 1MB machine expandable on board to 4MB.

    --
    "She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
  152. couple of weeks per linux patch? by cybercyst · · Score: 1

    If one runs CVS versions of everything, (which, unless I am mistaken, you Can't do under Windows) you could theoretically get a patch every day.

    1. Re:couple of weeks per linux patch? by windex82 · · Score: 1

      True, but that wont fly on a production system.

  153. Re:Lying or Misinformed? by EvilTwinSkippy · · Score: 2, Interesting
    You have obviously never rolled out a new version of Windows or Office. I've had all of those problems, AND MORE. And that's from the same vendor with the same supposed product.

    I have set up Linux and Windows workstations in production environments. Hell, most of the people who use my Linux terminals are oblivious to what's running underneath, save that it is windows. Is it a drop in replacement for Windows: hell no. Can it work on a large scale: hell yes. Do you realize that certain design assumptions built into windows are utterly assine: only if you did it right.

    Your first sign of trouble is a "week long rollout." For god sakes, It's taken our organization 3 years to migrate to 2000. And that's only 300 workstations. We are installing Linux on our end-of-life machines and setting it up in a few public labs for people to beat on. I find out what people break (or percieve as broken) before I reformat one machine.

    And for the record, if you are migrating to Linux to save money you missed the point.

    --
    "Learning is not compulsory... neither is survival."
    --Dr.W.Edwards Deming
  154. Re:Bah! The suits at Microsoft are running scared by Trolling4Dollars · · Score: 1

    Hmmmm... I don't see any Windows install fests giving out free software and help to the general public. I have to question Microsoft's motives if they aren't doing good for their fellow man. Of course, I suppose some people define "fellow man" as stockholders. Now that is a sad statement on our society.

  155. They should be faster than Linux people by mikeraz · · Score: 1

    They get way more practice.

    --

    There's more to it than this.

  156. You have obviously never replied to a troll. by Ayanami+Rei · · Score: 1

    Oh wait, you just did!

    My bad.

    --
    THIS THING CAN TURN ON A DIME, MACROSSZERO STYLE ALSO FUCK BETA, ~NYORON
  157. Billie by veerudu · · Score: 1

    Bill Gates is talking about average time for patches..Those 2000 hours is just for one patch!

  158. Microsoft faster at patching bugs? Sure by dh003i · · Score: 1

    After all, they've had a whole lot of experience with fixing bugs...I mean, if you do something enough, you should get good at it, right?

  159. Re:Someone RAM Bill by spitzak · · Score: 1

    You write to an I/O address that causes the video memory to respond and turns off the normal memory in that same area. This was pretty common then and was called bank-switching, which I referred to.

    You are correct that bank-switching is pretty obsolete nowadays and not used. Partly due to the fact that modern devices take only 1/100 or so of the available memory space, while then a video screen took about 1/10 (or 1/2 on 64k machines). The other reason is that virtual memory means that "holes" such as the IBM-PC had at 640K are no longer a problem, as a continuous address space can still be presented to the applications.

  160. Re:Bah! The suits at Microsoft are running scared by EvilTwinSkippy · · Score: 1

    Hmmm. The India-Linux connection explained.

    --
    "Learning is not compulsory... neither is survival."
    --Dr.W.Edwards Deming
  161. Don't know what Bill's thinking, but by Nybble's+Byte · · Score: 1

    even at the patch rate he quotes, it would take many years for MS to patch a significant percentage of the bugs in Windows.

    With all the bugs Bill doesn't think are important, I don't know why he's suddenly bragging about how fast he thinks they can patch them.

  162. Reminds me of an internal buzilla experience by sisukapalli1 · · Score: 1

    I filed a bug in our product, and after about a couple of months, another person filed the same bug. The concerned developer marked my bug as a duplicate of the later bug. I didn't care -- until the numbers of "mean time between bug reporting and fixing" came up as a presentation during our product release.

    S

  163. Re:Someone RAM Bill by Obiwan+Kenobi · · Score: 1

    It's not like he's terrible stupid either.

    Oh, the irony :)

  164. Hmm, 1999 is prior to Microsoft's Rebirth by sheldon · · Score: 1

    Actually 1999 was one of the worst years on record for Microsoft in terms of security, they issued 100 bulletins.

    Let's see, since then...

    - Introduction of Windows Update
    - Reorg of development practices to focus on security
    - Reorg of bulletin and patch release process
    etc. etc. etc.
    - Much much more publicity and attention paid to this issue.

    While many in the security community continue to berate Microsoft and demand they do better, I am not aware of a single person who would claim Microsoft has not improved dramatically since 1999 in the speed and quality of their patch releases.

    Don't you think Linux has also improved over that time period? I've certainly seen it.

    The computing world is a moving target. 4 years is at least two generations. Get some updated facts.

    Steve Sheldon, Piled Higher and Deeper
    Chief Super Hero, SodaBlue.ORG

    1. Re:Hmm, 1999 is prior to Microsoft's Rebirth by red+floyd · · Score: 1

      Windows Update was introduced in 1998, with Windows 98.

      --
      The only reason we have the rights we have is that people just like us died to gain those rights. -- Cheerio Boy
    2. Re:Hmm, 1999 is prior to Microsoft's Rebirth by Crispin+Cowan · · Score: 1
      While many in the security community continue to berate Microsoft and demand they do better, I am not aware of a single person who would claim Microsoft has not improved dramatically since 1999 in the speed and quality of their patch releases.

      Don't you think Linux has also improved over that time period? I've certainly seen it.

      Why yes, I do think both Microsoft and Linux have improved their response times. What makes you believe I don't?

      The computing world is a moving target. 4 years is at least two generations. Get some updated facts.
      I brought the only facts I have seen in this debate. If you don't think my facts are good enough, the onus is on you to do better. I would love to see more current data, but I haven't had the time to conduct the study since the story hit Slashdot this afternoon :)

      Crispin
      ----
      Crispin Cowan, Ph.D.
      Chief Scientist, Immunix Inc.
      Immunix: Security Hardened Linux Distribution

    3. Re: Hmm, 1999 is prior to Microsoft's Rebirth by Black+Parrot · · Score: 1


      > Hmm, 1999 is prior to Microsoft's Rebirth

      An Microsoft's Rebirth was prior to when their crapware started affecting me for the simple reason that I have to share an internet with them.

      --
      Sheesh, evil *and* a jerk. -- Jade
  165. Re:Someone RAM Bill by WNight · · Score: 1

    The problem is that Bill's design decisions made it painful to use more than 640k, just like his sticking with a 32b OS is going to make it painful to use more than 4GB. This is especially important as other people have pointed out because mmap'ing files cuts into this space and yet is a very handy way to abstract away file access that we don't want to have to avoid using.

  166. The real reason for the 640K limit by steveha · · Score: 1

    I have heard that Gates never said this

    He says that he never said it, I never saw any details of where and when he was supposed to have said it, and I cannot think of any reason why a guy as smart as Gates would say such a stupid thing. I don't think he ever said it. Actual evidence could change my mind, of course.

    the IBM PC design dumped the video memory at the 640K location, thus splitting the memory and making the top third almost useless.

    It's true that video memory was placed at the 640K location. However, I can easily forgive the hardware designers who made that decision.

    You were supposed to use the BIOS to write all your software. All of your IO was supposed to be through the BIOS, and if a newer machine came out with more than 640K of RAM, there would be a newer BIOS that would handle it.

    The problem was that IBM's BIOS sucked. There was no "write a string" command in the BIOS; there was only "write one character". (Later versions of the BIOS did fix this but it was too late.) Since there was overhead to calling the BIOS, and since those early PCs were dog-slow anyway, no one wanted to use the BIOS like you were supposed to; it was so much faster and easier to just detect the video, figure out the address of the character buffer, and blast the characters directly into the video card.

    Because there were so many apps that hard-coded the address of the video card, it would have been very painful to have moved the video buffers higher in memory. Thus the 640K limit.

    If only the BIOS had provided a call that returned the address of the video buffer, and all those applications had used that. Then later PCs could have moved the video card up and we could easily have run 800K DOS apps. Oh, well.

    The true moral of the story: don't design an API that's so bad no one will use it. Or to quote Cooper's Law of Standards: "If it doesn't work, it won't stay standard."

    steveha

    --
    lf(1): it's like ls(1) but sorts filenames by extension, tersely
  167. Microsoft invented personal computing? by MacDust · · Score: 1

    Another lie Bill said towards the end of the article was, "We invented personal computing" What? So now copying the GUI from Apple accounts to and invention? What's next, Microsoft invented the internet? Oh, wait, Al Gore did that!

  168. Re:Someone RAM Bill by shadowpuppy · · Score: 1

    Actually he claims Microsoft invented personal computing. Which has slightly more truth to it than inventing the personal computer. Micrsoft's big addition was Microsoft basic. I'd say it's impact on the current outcome of personal computing though is minor. I may be crazy but I'd say the GUI had more impact than yet another version of Basic. Strangly enough Microsoft invented neither.

    I wonder if Microsoft has actually invented anything.

  169. Different Universe by ScrewMaster · · Score: 1

    Bill Gates obviously hails from a different Universe, where some form of temporal compression occurs relative to our continuum.

    Either that or he's smoking crack along with his pals at SCO.

    --
    The higher the technology, the sharper that two-edged sword.
  170. Dear Mr Gates by Harry8 · · Score: 1

    Have your engineers been good enough to fix these ones yet?
    Or should I continue to advise anyone who is doing any important statisical analyses (eg medical research, construction engineering or even any non-trivial finance) to on no account process their numbers with your number processing program
    I call you for 9 years on crucial bugs in your most popular and best piece of software.
    Gnumeric
    OpenOffice.org
    KSpread

  171. time from admitting it to fixing it? sure. by mkbz · · Score: 1

    windows typically waits to acknowledge a vulnerability until it's run rampant through the internet. so by the time they finally admit there's a problem, they already have a patch available.

    boy, doesn't that make them look good to suit-types who only read Internet World and watch CNN?

    nevermind that the suit's slick XP laptop has already been infected & 0wn3d by that 'anna kournikova' jpg.vbs that he's too ashamed to admit he double-clicked on.

  172. The main issue remains unmentioned... by Nick+Driver · · Score: 1

    ...and that is that Windows is suffering security problems at an astounding frequency of occurrance much greater than that of Linux. It is no wonder that MS is suddenly pouring such huge volumes of resources at fixing those problems that they are now starting to get better and faster at plugging the holes.

    They still need to address why Windows (acquired/continues to) acquire all these security hole to begin with.

  173. Excuse Me.... by JerC · · Score: 1

    "The Explorer is fully integrated with the operating system, take it away and the OS grinds to a halt."

    Isn't this why they were found in violation of antitrust legislation in the first place? How in the hell can he get away with saying this to someone with a live mic in front of him? Should this not be considered noncompliance?

    --
    Sigs are for squares. Like pants!
  174. Compared to what? Linux distros patch weekly... by Overly+Critical+Guy · · Score: 1

    I don't get why people troll that Microsoft requires so much patching, when a simple look at the link in my sig will show you that Linux distros have several patches released WEEKLY.

    But you never see any of it reported on Slashdot except when it's something really, really bad like a filesystem-corrupting kernel release or an exploitable sendmail/ssh/whatever that they can't easily ignore. That's right, kiddies--Linux and its userland is just as hole-ridden as any other operating system, if not more so (Slashdot posted an article entitled "Linux Most Attacked Server?" that linked to a study showing Linux as the most breached server on the net).

    This is an entire article based on a throwaway comment Bill Gates made buried somewhere in a speech he was giving. It is purely here to let everyone give their knee-jerk reactions to the fact that--surprise of surprises--Bill Gates believes Microsoft patches better than Linux.

    Isn't it time for RobLimo to write another ridiculous "Week with Windows XP" in which he only writes about the first day and can't manipulate a Quick Launch toolbar?

    --
    "Sufferin' succotash."
  175. Troll by Overly+Critical+Guy · · Score: 1

    Slashbots will search for *anything* to latch onto as flamebait. In this case, they'll take a quote out of context and pretend Bill Gates meant it to apply until the end of time.

    "I can't think of desktop applications where you would need more than 4 gigabytes of physical memory"

    He's right. Can you think of a desktop application that needs more than 4 gigabytes of physical memory?

    "640K ought to be enough for anybody"

    He never said that, and it's been proven countless times. Even if he did say it, in 1980, 640K *was* enough for anybody. What's the problem?

    Next.

    --
    "Sufferin' succotash."
  176. Re:Someone RAM Bill by Overly+Critical+Guy · · Score: 1

    Is he new? In 10 years there will be applications SCREAMING for it because...

    Are you an idiot? He didn't say "in 10 years" in that sentence. He was talking about now. Can you think of a desktop application right now that needs more than 4 gigabytes of physical memory?

    Next.

    --
    "Sufferin' succotash."
  177. Re:Someone RAM Bill by Overly+Critical+Guy · · Score: 1

    Not that it matters, since the statement wasn't false, and wasn't meant to apply until the end of time (neither does the alleged "640k" quote).

    Can you think of a desktop application that needs more than 4 gigabytes of physical memory? Did Bill Gates say "nobody will ever need more than 4 gigabytes of physical memory" or did he just say he couldn't think of one right now? I'll give you a hint, it's the one that's not a Slashbot-favored flamebait.

    Next.

    --
    "Sufferin' succotash."
  178. Bill Gates Does Not Lie by insertionPoint · · Score: 1

    Patching in 24 hours is as Obi Wan said "dependent on your point of view" Microsft is going to be announcing new vulnerabilities once a month and releasing the patches at the same time. So, I imagine this to be the announcemt:
    Microsoft announced today a horrible buffer overflow that lets grandmothers running quickbooks take control of all your pr0n, but they also issued the patch already....yay M$.

  179. Say Wha? by Rick+Zeman · · Score: 1

    "We have to. We invented personal computing. "

    Apple must not have received that revisionist memo.

  180. Bugs = Money by Mybrid · · Score: 1

    As they say, "Follow the money".

    Don't ask me who they are though :)

    I remember when I worked on a VAX. Our company bought a license with a service level agreement (SLA). Upgrades were mandated and part of the license. The incentive for getting it right the first time from DEC's perspective was that a quality product meant no bug fixes which were covered by the SLA.

    However, compare that to Microsoft's business model. You don't buy a service license, you buy a version licenese. Microsoft admittedly produces unrealiable, buggy code because the expectation is that bugs are fixed in the next version upgrade.

    Bill's not talking about a bug in the print driver that means your program prints wrong. He's really only talking about security problems in networking and more specifically Outlook and IE. Technically Outlook isn't even part of the OS although it is certainly patched with almost every security patch.

    Microsoft is responding in 24 hours to *security* bugs because their traditional money making philosophy of fixing bugs in upgrades isn't making customers happy for security bugs. However, patches for non-security bugs are still realized by buying an upgrade.

    I personally paid to upgrade to Windows 2000 professional because Windows ME which came on my Dell box was soooo buggy. There were never patches to fix the endless stream of bugs in ME except for the security bugs. Everyone I know says the best way to deal with the bugs in Windows ME is to upgrade. That is called Microsoft's golden goose. Create buggy software so people will pay for an upgrade not just for the new features, but to get rid of bugs.

    Cheers!
    Mybrid

  181. Marketing by ralphus · · Score: 3, Informative
    Tricks. It's all tricks.

    I recently was in a Microsoft webinar regarding patch management. If you are interested, or a glutton for punishment, this was it. At one point they showed a histogram on the screen that was intended to show vulnerabilities in operating systems and how MS was beating everyone on the planet. Major Microsoft products were all broken down by release, e.g. Windows 20003, Windows XP, Windows 2000, Windows NT, etc.. Linux and BSD were categorized by distribution only, e.g. Redhat, Debian, BSD etc...

    Windows 2003 appeared at the far left with only a few vulnerabilities. Windows 2003 was actually the "winner". It even "beat" BSD! Now think about that histogram for a minute. It created false divisions that did an apples to oranges comparison. The sum total of Debian vulnerabilites likely refer to all released versions of a Debian distribution with all possible packages installed while Win2003 likely refers to only a Win2003 retail box installed with the bare minimum options.

    Marketing is a black art. I have some personal experience, but NDAs to bind me. It's an art of trying to create and/or shape ideas in the mind of your customers, critics and competitors. The most successful marketing is that which makes them believe they came to the ideas you wish them to hold of their own volition.

    --
    Revolutions are never about freedom or justice. They're about who's going to be top dog. -- Kilgore Trout
    1. Re:Marketing by im+a+fucking+coward · · Score: 1

      It created false divisions that did an apples to oranges comparison. I think we're talking the ol' strawberry to moose comparison here. How did he justify the loss of billion$ in productivity on MS products then?

    2. Re:Marketing by ralphus · · Score: 1

      Just don't mention the lost billions. Pretty graphs speak for themselves and rarely is "authority" challenged.

      --
      Revolutions are never about freedom or justice. They're about who's going to be top dog. -- Kilgore Trout
  182. Re:Someone RAM Bill by DMadCat · · Score: 1

    Sorry ahead of time but I believe this needs saying... What in the hell are you rambling on about and how in the hell does this have anything to do with the topic at hand?!

    Who gives a fuck what Bill Gates said or didn't say twenty years ago?

    It has no bearing on the present. NO ONE could have predicted even ten years ago just how much the world of personal computers would grow.

    Look, Bill Gates is a fucking BILLIONAIRE. Do you really think he gives a fuck about what he said years ago or what he misjudged in his predictions?

    What he believes is inconsequential beside the fact that he became the richest man in the world by marketing an inferior product to a majority of clueless people.

  183. Easy by geekoid · · Score: 1

    A major news source announce a hole, then you fix it, reactive.
    A developer poking around the code finds a hole and you fixed it, proactive.
    or
    if you fix it before consumer demands, its proactive,
    after it's reactive.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  184. can't.. stop.. laughing by SD-VI · · Score: 1

    This is the best joke ever. I'm going to have to tell it to my friends.

  185. do you think he still knows what is going on? by penguin7of9 · · Score: 1

    Sorry, I just don't believe it. Sure, he seems to spend lots of time talking to people inside his company, but it's not like he can have informal water cooler talks with people. If you have a company boss worth, what, $35bn, someone who can buy a medium sized country out of his own pocket, someone who inside his company has the reputation of a genius (no matter what the rest of the world may think), would you be too critical of his decisions or honest about your own shortcomings?

    There are big inefficiencies in big companies; this is one of them. That's why companies like Microsoft need dirty tricks and patents to stay in business--otherwise, small competitors would be eating their lunch.

  186. Re:Uptime by hdparm · · Score: 1

    True. Our jobs are nicer, though. I consider myself blessed - I get to make decent leaving doing what I love to do.

  187. Re:Someone RAM Bill by DMadCat · · Score: 1

    In 1981 I was 8 years old and this whole fucking thread is a moot point. Do try to get back on topic and stop reminiscing about forgotten times that have no bearing on where we are now.

  188. Re: regression testing by King_TJ · · Score: 1

    What's not to believe about it? Most regression testing is done with automated tools nowdays anyway. The testing tools hammer away at code, looking for obvious errors and overflows. Probably they run that stuff against a new piece of code, find a ton of mistakes, get developers to fix 'em, repeat ... and after they get it to where the automated stuff can't break anything else, and the developers themselves haven't stumbled on any more problems, it's proclaimed "good enough" and ships.

    I can easily see that whole process taking several weeks (or more!), and yet all of this hardly means the product is really stable or "fairly bug-free".

    I mean, look at a little tiny app written by basically one guy... For the sake of example, how about the mIRC Windows client for IRC chat? That thing has gone through an amazing number of revisions, and each time, the guy STILL manages to list at least a full page of bugs found and fixed. It's to the point now, I'm just amazed at the things that people find. It's so obscure most of the time, it's hard to fathom it ever got pinned down and reported by someone. Now, mIRC is an app I think most users of it would say is "incredibly solid/stable" - yet it STILL has all these bugs.

    Granted, the developer also doesn't have an army of staff helping QA test and code it - but it's also magnitudes smaller than the average app s company the size of MS releases.

  189. Holographic displays should do the trick. by Politas · · Score: 1

    Combine free-standing holograph technology with Powerpoint, and there's a desktop app that'd likely require more than 4GiB of RAM.

    Sure, it's all experimental at the moment, but it is being worked on.

    --

    Politas

  190. Re:Someone RAM Bill by phillymjs · · Score: 1

    Bill always proclaims he was a visionary about the net, and saw ahead of everyone how much that could change the world.

    Yeah, Bill's back is calloused from him patting himself on it.

    How utterly visionary it was to completely ignore the internet until he saw there was a huge market he could steal from Netscape, starting with a stop-gap browser that was quickly licensed from another company and had the Microsoft name grafted onto it.

    Starting when they put DOS on the PC, Microsoft has never been first into a new market that I can think of... they let competitors develop the market, then they move in and take it over-- bulldozing the competition if necessary. Examples:

    -Macs had the first mass-market GUI, and Windows finally became usable in 1990.
    -AOL took off in the early 90's and the original incarnation of MSN was launched to crush it. (That was the push that was pre-empted by Microsoft's sudden Internet-awareness.)
    -Sony and Nintendo owned the game console market for over a decade, and then the Xbox was launched. This assault seems to have faltered.
    -After the original Palm devices came PocketPC (and don't forget Microsoft originally tried to call theirs the "PalmPC" until they were sued over it).

    The next target is the mobile phone/wireless communication device arena, and a couple companies have already been date-raped by partnering with Microsoft.

    ~Philly

  191. We invented personal computing by Iamwin · · Score: 1

    Yes Bill, and Al Gore also invented the internet.

  192. Half Right (MS Policy Rules!) by IBitOBear · · Score: 1

    The Mr. Bill true subtext:

    Once *I* decide something is going to be fixed I used to allow 40 hours before I fired someone. Now I only allow 24.

    Oh, how long between bug report or exploit and that order?

    By my preference, Microsoft doesn't patch anything until a MS copproate resource is compromised. That's just good policy...

    --
    Innocent people shouldn't be forced to pay for inferior software development.
    --"Code Complete" Microsoft Press
  193. slogan by Knights+who+say+'INT · · Score: 1

    "Slashdot: picketing the Matrix since 1997"

  194. Re:Someone RAM Bill by kaybi · · Score: 1

    Alias Maya.

    Newtek VideoToaster[3].

    Avid MediaComposer.

    Thats three that really work better with a couple of gigs or more ram.

  195. Two quotes by bruns · · Score: 2, Funny

    --------
    Gates also doesn't seem to have a lot of faith in 64 bit technologies in the consumer space. "64 bit is coming to desktops, there is no doubt about that," he said. "But apart from Photoshop, I can't think of desktop applications where you would need more than 4 gigabytes of physical memory, which is what you have to have in order to benefit from this technology. Right now, it is costly."
    ---------
    This coming from the same person who said 640kb is more then enough for anyone?

    and this one
    ---------------
    Gates is optimistic about meeting the challenge of the new security threats, he told reporters. "We have to. We invented personal computing. It is the best tool of empowerment there has ever been. If there is anything that clouds that picture, we need to fix it."
    ---------------
    I thought apple invented personal computing?

    --
    Brielle
    1. Re:Two quotes by scrytch · · Score: 1

      This coming from the same person who said 640kb is more then enough for anyone?

      He never said it. To this day no one has ever come up with a corroborated source for that quote.

      I thought apple invented personal computing?

      You realize that "Personal Computer" was a trademark of IBM? Apple made it pretty. I bet you think Apple invented the GUI too.

      --
      I've finally had it: until slashdot gets article moderation, I am not coming back.
    2. Re:Two quotes by vinnythenose · · Score: 1

      Actually, as I recal it went a little like this:
      Apple invents first personal computer aimed at the non-hobbyiest. Well, apparently there was one before it made in Canada, but it never took off, so that point is moot. It wasn't called a personal computer, but it was, os, apps, games, and a sleek new box, ahh the apple ][.

      Then IBM said, what the hell! And decided that had to get a personal computer or risk losing the market to Apple (IBM was only servers at this point). They made the "personal computer", and hired microsoft to write apps for it (who bought DOS from a guy that wrote a copy of the OS CP/M).

      Then come along guys like compaq, dell, etc, and they steal the PC market away from IBM, so IBM retreats from it for a while, realizing that their massive overhead guarantees that they cannot sell things as cheaply as the smaller companies and still make a profit.

      So that, is how I understand the history of the personal computer. To the best of my knowledge, Apple was first (by about a year) to have the first consumer targetted computer, or "personal computer", but IBM invented the Personal Computer, or PC, and most the software for the PC was written by Microsoft.

      So it's a matter of semantics. Personal computing, as a generic term was started by Apple, but personal computer as a reference to the personal computer, was by IBM/Microsoft.

      And no, we all know the GUI was stolen from Xerox, but they weren't going to use it anyways.

      --
      --- I used to moderate, then I read the -1 articles and decided having to filter through them was not worth it.
    3. Re:Two quotes by n8_f · · Score: 1

      I bet you think Apple's first product was the Macintosh.

  196. YHBT and modded up by Read+Icculus · · Score: 1
    It's a joke-troll friend. A variation of the classic consultant troll. The first line is lifted straight from the spiralx troll archive, (and as it happens an actual spiralx troll) - Maybe they need to change their name Another example was posted yesterday, (although it is an old troll) - True costs of Linux In fact I found it so obvious that I'm amazed you got modded up for responding to an off-topic troll. Some examples -
    Linux 9.0 with the Kool Desktop Environment Information Technology Technology Support strange hacks in the 'Preferences' section (apparently a reference to simply changing an option!) hack in the Konsole program (a terminal command) arcane nuances (another classic line, especially when referring to the simple tasks done on a purely GUI desktop)
    I know that we all expect consultants to be dumb as a box of rocks, but this troll was over the top ignorant, although it was perhaps a bit more subtle than the "VB kernel programming" in the other troll. Who the hell capitalizes and spells out all of the various terms used in the troll? Total Cost of Ownership, File-Browser, Web-Browser, Desktop, Operating System, Operating Costs, Company, Office Suite, etc. And the part at the end about H1-B Visa workers, (in the Company's Technology Support Division), being a better idea than using Linux is just so obviously a troll that I can't imagine how anyone could overlook it. It is clearly designed to incite. Flamebait mixed with troll. No wonder so many trolls congregate here on /. If the troll had been done better it no doubt could have been modded up, or caught many more pigeons. Think people! Or failing that give the spiralx /. Troll HOWTO a read.
    --
    Anti-social? My code is just platform-specific.
    1. Re:YHBT and modded up by msgregory@earthlink. · · Score: 1

      Ah fuck, I fell for it, too. I thought he just had a bad memory or something.

  197. Re:Compared to what? Linux distros patch weekly... by syrinx · · Score: 1

    In some ways I agree with you; certainly Linux distros have a lot of patches released for them.

    However, I've seen several posts by you in this article, and all of them are basically you being an asshole. I've decided to be more proactive in use of my Slashdot foes list, so, on you go.

    Or, in Usenet terms, *plonk*

    --
    Quidquid latine dictum sit, altum sonatur.
  198. Re:Who cares? Really. by TheFrood · · Score: 1

    Speak for yourself.

    It's a figure of speech. It's equivalent to saying "...the vast majority of computer users still thought Microsoft was the greatest thing going -- a majority that, just to be clear, did not include mobiGeek, who seems to take things too literally and get offended easily."

    Hope that clears things up.

    TheFrood

    --
    If you say "I'll probably get modded down for this..." then I will mod you down.
  199. The BIG LIE! by Tony-A · · Score: 1

    Particularly effective if it leaves your opponent speachless.

    The ultimate answer lies in how quickly Microsoft contains the damage from the next Microsoft worm. And the next. And the next.

  200. Re:Someone RAM Bill by displaced80 · · Score: 1

    Naturally it has wizards, but those can't possibly be responsible for the bloat....

    Yeah. I've heard the codebase for the Microsoft 'Wizard' Wizard is pretty crufty. The wizard produces really bloated Wizards that not even the Code Optimization Wizard can fix...

    --
    What's the frequency, Kenneth?
  201. Re:Someone RAM Bill by sniggly · · Score: 1

    He said that in the interview. RTFI

    --
    Of those to whom much is given, much is required.
  202. Re:Lying or Misinformed? by msgregory@earthlink. · · Score: 1

    Taking Windows away from a bunch of users and trying to replace it with Linux is just ignorant. Do you honestly think any operating system can be a drop-in replacement for any other? How can you possibly expect several hundred people to throw their skills out the window, start from scratch with a new OS, and not expect to have "user-dissatisfaction?" BIG DUH!

  203. Gates Knows by LuYu · · Score: 1

    Let's face it. Bill "The Devil" Gates knows he is lying. He knows that most people are too stupid to do anything but believe him. He is not in court. He is not going to pay for this lie. At worst, it would be publicly known that he lied. Even then, most people would still believe his lie. What does he have to lose? Nothing. What does he have to gain? More misplaced confidence in the "quality" of Windows.

    Even if in some magical fantasy world justice came about and the majority of the computer users of the world came to know that he liked this time, MicroSuck's spin doctors would quickly convince the users that their mistrust was misplaced and that Mr. Gates had meant something else entirely.

    This brings me to something that really irritates me about helping friends with Linux. This would be a good Ask Slashdot question: Why is it that when something gets messed up and one is running Linux, it is always blamed on Linux? But when something goes wrong and one is running Windows, it is just pawned off to the instability of computers in general? The general public sounds a lot like some girls I know: Every time they are lied to, they believe it, but every time they are told the truth, the think it is a lie (this is why jerks get all the girlfriends).

    Maybe Linux needs a marketing department.

    Then again, if we start lying, will we become as bad as MicroSuck?

    --
    All data is speech. All speech is Free.
    1. Re:Gates Knows by 1s44c · · Score: 1

      The general public sounds a lot like some girls I know: Every time they are lied to, they believe it, but every time they are told the truth, the think it is a lie (this is why jerks get all the girlfriends).

      In less words:

      The whole world is microsofts bitch.

      After every security failure or crash causes damage people just cover the bruses and convince themselves microsoft will change.

    2. Re:Gates Knows by LuYu · · Score: 1

      It is almost like religion. When something goes right, it is God's work. When something goes wrong, it is your own fault.

      I guess I finally know who devil worshippers worship.

      --
      All data is speech. All speech is Free.
  204. Hiding security issues in bundles by SgtChaireBourne · · Score: 1, Informative
    That strategy is backed up by what Microsoft chief security officer Stuart Okin said recently, "We have developed a relationship with security researchers to avoid public disclosure of security holes."

    It is also backed up with the way they fought against full-disclosure and bundling patches / advisories several years ago. A year later, the bundled patches were spun as a reduced number of vulnerabilities/advisories.

    Everyone except the average stockholder knows it's over for Microsoft, especially as it's customers are figuring out that, despite bleatings from the marketing teams, Windows is not ready for the Internet. The bad reputation they've worked so hard to earn in the tech community is now starting to spread to the general public.

    --
    Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
  205. lies, damned lies and statistics... by floydigus · · Score: 1
    Either he's lying or woefully misinformed; their recent performance seems to be more on the order of 3+ months, or over 2000 hours.

    ...or the average he's talking about is over a longer period than your expert anecdotal analysis, Neal.

    --

    All things in moderation; including moderation

  206. Re:Someone RAM Bill by phiwum · · Score: 1
    Bill never said the 640K Quote, and I'm willing to bet he never said the 4GB one, either.

    Read the stinking article. I'm not debating the 640K quote, but the 4GB quote is excerpted from the article (omitting an explicit exception mentioned by Gates).

    "But apart from Photoshop, I can't think of desktop applications where you would need more than 4 gigabytes of physical memory, which is what you have to have in order to benefit from this technology. Right now, it is costly."


    (To be pedantically fair, it's not clear whether Gates is talking about existing applications or possible desktop applications.)

    It's fine to be skeptical, but reading the sources of that which you want to debunk is, well, bloody helpful. Unless Gates claims the interviewer misquoted him, there's no controversy here.

    I know everytime this quote is used, someone has to debunk it, but there's no reason to perpetuate a false quote by one of the geniuses of our time.

    Too easy. Must resist temptation. Must resist temptation. Must resist....
    --
    Phiwum's law: anyone that names an obvious law after himself and then puts it in his own sig is just pathetic.
  207. Biggest yuk: by Polaris · · Score: 1

    "We invented personal computing". What did Hitler say about the Big Lie?

  208. Nah by varjag · · Score: 1

    The Linux community claimed 90 minutes, when it was really two months.

    They were right in their claims. The patch was available for download in 90 minutes.

    And I don't bother when RedHat adopts patches, because I (and many other people) don't use that brand of Linux.

    --
    Lisp is the Tengwar of programming languages.
  209. He Means Patching Nvidia drivers by Recbo · · Score: 1

    like audio,ethernet, and stuff like that

    until nvidia via et all figure out they can PayPal
    money to linux developers to speed up development,
    MS can brag about "patching desktop drivers together"

    "Oh, you meant security patches?"

    We have nvidia k-2.6.0-test7 courtesy
    http://www.minion.de/nvidia.html Hint:
    A huge Paypal might get nvidia audio
    for test7, if not, it's overdue anyway,
    and it would inspire somebody to go
    for the next gig on speculation.

    1. Re:He Means Patching Nvidia drivers by ichimunki · · Score: 1

      Why would NVidia pay Linux developers to rewrite their drivers? Doesn't NVidia already release a proprietary NVidia driver for Linux?

      --
      I do not have a signature
  210. Sure, makes sense by Rogerborg · · Score: 1

    If you count from the point where they acknowledge their existence. Hey, if they stop doing acknowledging the bugs, does that mean that they can fix them before they even exist? Spooooky.

    --
    If you were blocking sigs, you wouldn't have to read this.
  211. Re:Someone RAM Bill by dcw3 · · Score: 1

    It's certainly enough memory. The Mac started out with 64K, which is one sixteenth of what the Lisa started out with. Because the Mac's bit map is smaller than the Lisa's, we thought we could do something with that amount of memory. But we were pushing for 128K all the way, and about a year ago we switched to 128K. We figured out how to squeeze the applications down to that size.

    Hmmm...the original Mac (my first home computer) started out with 128k. The original Lisa came with 1 Meg! Both had the Motorola MC68000 CPU.

    --
    Just another day in Paradise
  212. A specific example. by AYeomans · · Score: 2, Informative

    Let's look at MS03-041, examine the Windows XP Gold patch.

    Run "WindowsXP-KB823182-x86-ENU.exe /x" to extract the components.

    24 Jul 2003: date of most recent component file
    25 Jul 2003: date of patch file (using wget to obtain timestamp).
    14 Oct 2003: "Date published" according to Microsoft.

    I make that 82 days to release.

    --
    Andrew Yeomans
  213. Big boy! by _lookface · · Score: 1

    [quote]We invented personal computing[/quote] A very arrogant man, to say the very least.

  214. Erh, Source code . . . by Idou · · Score: 1

    The difference is that savvy users can just compile their own code with the patch as soons as it is released, while in the MS world you have to wait for the binary.

    Still don't see how we are deluding ourselves here . . .

    --
    Sdelat' Ameriku velikoy Snova!
  215. Re:Someone RAM Bill by Cally · · Score: 1

    I'd say my sitting here, and typing into slashdot is pretty strong evidence I was born at some point in the past.


    Well, no, because you're just a bunch of bits in a very big simulation being run by benevolent alien beings. Or possibly bored alien teenagers.

    See here: Simulation Argument

    --
    "None are more hopelessly enslaved than those who falsely believe they are free." -- Goethe
  216. Re:Lying or Misinformed? by kasperd · · Score: 1

    Bill Gates should get stoned.

    That one of you who never made a bug shall throw the first stone.

    --

    Do you care about the security of your wireless mouse?
  217. Biggest Joke of the millenium by geo_2677 · · Score: 1

    This certainly qualifies as the biggest joke of the millenium. Bill check the stats b4 saying anything

  218. Foolish Comment by blackbear · · Score: 1

    This was a likely a foolish comment on the part of Mr. Gates. We know that security bugs sometime take weeks or months to fix once they are revealed privately to the vendor. Then the public revelation is often accompanied by the public release of the fix.

    This comment will simply encourage more individuals and groups to release information about MS vulnerabilities publicly rather than go through channels. Apparently Gates thinks he's taking advantage of the fact that Linux doesn't have a PR department, and it will likely hurt MS shops in the long run.

    MS acts much like an addict. "I don't have a problem, and it wouldn't be my fault if I did."

  219. patch before announcement by Sillypuddy · · Score: 1

    To pull their average turn around time on patches, they can release the patch BEFORE they do the announement, so they have a negative turn around time, that will really pull down their average -joe

  220. How about time to apply patch? by widderslainte · · Score: 1

    I'm no Linux guru, but it's been simply enough to update the machine and go on with my life. Anytime I've got to patch a server, it means downtime. Why don't they address why every freakin' patch requires the machine to restart? How about not having a swiss-cheese web browser "integrated" into the operating system of a mission critical server? How about using freekin' text files for help and documentation?

    1. Re:How about time to apply patch? by MrPink2U · · Score: 1

      Remember: Windows #1 goal is to be user friendly. Reliability, availability and scalability are all secondary.

  221. Invent Personal Computing by fritz1968 · · Score: 1

    Gates is optimistic about meeting the challenge of the new security threats, he told reporters. "We have to. We invented personal computing....

    uhhh.... correct me if I'm wrong, but didn't IBM invent personal computing? MS may have enhanced it a bit or brought it to the masses (even that is debatable), but without IBM, there would not be a Microsoft.

    --
    It is not the strongest of the species that survive, nor the most intelligent, but the one most responsive to change.
  222. Re:old quotes coming back... by Dragoon · · Score: 1

    Hah. I Totally agree! Gates is well known for making grand sweeping statements... that can never be held to be true.

    "are they still in business?" Rather then jsut say 'no we're not doing that' he decided to go with overkill. He uses the phrase "to be honest", in a statement that can't be true. This is why the world isnt hopping on the Microsoft bandwagon.

    "To be honest, I haven't heard from Phoenix Technologies for over five years," Gates said. "Are they still in business? The BIOS will always be separated from the operating system. Actually, it's gotten out of date. If you run Windows XP, it calls very little of the BIOS."

    --
    Welcome to the End
  223. This is all because Bill Gates is insane by thedbp · · Score: 1

    But he's not crazy in the "looney tunes" sense of the word, more of a metaphysical fashion.

    No, seriously, hear me out.

    We all know that chaos is the natural state of the universe. Humans have been trying to reign it in and control it and manipulate it for a long while now, and in some ways we've done extremely well. On the other hand, we still can't reliably get a pizza to our house in 30 minutes or less. That's why they had to drop that promise. But this has nothing to do with pizza. It was just a lure to get you to keep reading.

    So here's Microsoft, trying to stem chaos in business by providing applications and operating systems that, for all intents and purposes, have created their own share of chaos through many means (switching systems, learning DOS, then windows, then patches and updates and incompatibilities and forced upgrades etc.). They are trying to stem chaos in their own organization in relation to releasing secure software out-of-the-box - and they are trying to stem the chaos of the encroaching open source model that is threatening the false and overbuilt sense of security and complacency that Windows has instilled upon the people of this computing world.

    It is a battle they cannot win. Chaos consumes all. It just may take some time.

    The open source model, however, embraces and uses the chaotic nature of the world and its computing inhabitants for furthering, extending, and assimilating itself slowly at first but exponentially. The group has no formal work structure or centralized location. They are relentless and dedicated. They operate at all hours and as a group and sometimes individually NEVER SLEEP. They are among the most intelligent minds on the planet, barring slashdot, obviously. And they all understand one thing: you cannot control the waves of chaos. But you can sure as hell catch one and ride that sucker to the beach, by cracky.

    Bill's a great philanthropist, but to be honest, with that much money, he'd HAVE to be. Otherwise the masses would tear him limb from limb. Philanthropy deducted, the man still has more money than God after playing the stock market over the course of millennia with infinite knowledge of what was to come. Again, this has nothing to do with the topic at hand. It was another lure. Got you!

    I guess what I'm trying to say is ... Microsoft is the Roman Empire of software. Their kingdom is riddled with porn and virii. Untouched by platypi. And ultimately will fall to a similar fate. It is simply nature's way. They will crumble because they are trying to put the world in a box and make it run around a track. That is not how people really are. And while you can make it work for a while, it always fails. And Bill is insane for thinking otherwise.

    Just fair warning.

  224. Re:Bah! The suits at Microsoft are running scared by AbbyNormal · · Score: 1

    I couldn't agree more with your point (Gandhi). I've found that to be true with most Open Source products nowadays. For example, a relative of mine told me about Open Office 1.1 and how great it was, yadadad. I have never been a big fan of Open Office, and the older Windows version (yes, I use windows) crashed frequently. So for grins, I tried out OO1.1, and was left dumbfounded on how clean and concise the interface was for all the tools. Scratch one Microsoft project. Then in the same week, I decided to try out Thunderbird on my company laptop, because MS Outlook was incredibly slow over VPN'ed IMAP. Scratch another Microsoft product. I've been using Firebird for a couple of months now, so I guess that counts too.

    My point is, if the Open Source community continues to "chip" away at their code, cleaning it up and stabilizing it, users will begin to flock to it. As hard is it often is, the community just has to keep trying to make their software "idiot" proof. (Editing User.JS for thunderbird, is a tad intimidating for your average user). Linux itself is making the same strides.

    --
    Sig it.
  225. Lies, not marketing, are a black art. by Futurepower(R) · · Score: 1


    "Marketing is a black art."

    Lies are a black art.

    If Microsoft knows anything about marketing, why do so many people hate the company?

    The facts fit this theory better: Microsoft is a badly managed company that can stay in business because of having a virtual monopoly.

  226. Re:There is a huge diffrence here though... by werdy · · Score: 1

    A significant portion of the linux user based could go get the source tree, recompile, and fix the bug. ANY distro could have produced a patch from that point forward. Some distros (like Gentoo) would have picked that up very quickly, possibly in a couple hours as has happened with soem of the recent SSH issues. With Windows, patching the sources does nothing for the user. It is only the final binary release that helps, and nothing before that. So if you are a competent Linux admin, and need the fix, it was there long before Windows. We already know Linux needs to grow some more for the average user.

    --
    The heights of genius are only measurable by the depths of stupidity
  227. Gates ignorant about 64-bit by Cardbox · · Score: 1

    "Need 4GB of physical memory before 64-bit is relevant"? Either he thinks he's telling the truth or he knows he isn't: either is pretty scary.

    For the record: the major reason for wanting 64-bit addressing is that you can then map all your data files into memory space and let wonderful Windows deal with caching, paging, flushing, and all the rest of it. With 32-bit Windows you're effectively limited to small files (1GB) so you have to keep all your handrolled open/read/buffer/write/close code around in case a user makes a file that's bigger than that.

    Not so relevant for Photoshop but pretty important for databases.

  228. comment still stands by gosand · · Score: 1
    I am not saying that the Linux patching process is cumbersome, but we gotta admit that the average users (not sysadmins) just can't begin to understand how to patch their Linux boxes.

    What? Have you ever used Red Hat's up2date tool? It is easier then windows update.

    Good point - but Linux != RedHat. Not to mentiont hat RedHat has to issue the patch before you can update it. IMO, the original poster's comments still stand.

    --

    My beliefs do not require that you agree with them.

    1. Re:comment still stands by AstroDrabb · · Score: 1
      Good point - but Linux != RedHat.
      True, though all of the big 3 Linux vendors have automatic update tools. SuSE has yast2, Mandrake has urpmi. Debian has apt. I don't see a newie using any other distro of Linux besides one of these. Possibly Lindows, though they have a very easy to use click-n-run thingy going on.
      Not to mentiont hat RedHat has to issue the patch before you can update it.
      Just as MS has to issue the patch before you can update it. How is it any different? And as for Red Hat, I have never seen one patch in the last 3 years or so from them that has broken anything, unlike many patches from MS that need to be tested in an isolated environment before being moved out to prodution.
      --
      If Tyranny and Oppression come to this land,
      it will be in the guise of fighting a foreign enemy. -James Madison
  229. (warning, sarcasm ahead) by paroneayea · · Score: 1

    Oh no, he's absolutely right. I mean, just look at Internet Explorer. Microsoft does an amazing job of patching that up nice and quick. Like CSS. Boy am I ever glad they fixed that whole CSS problem that we've been begging them to fix for years. Ho boy.

    --
    http://mediagoblin.org/
  230. Re:Bah! The suits at Microsoft are running scared by PD · · Score: 1

    That was good for Ghandi, but I am planning to achieve my own immortality by simply not dying.

  231. Time to patch *delivery* is important by mwood · · Score: 1

    I doubt Microsoft will match many Linux users' "write directly to product maintainer, get patch same day" experience, but there's another important metric here: how long does it take to get the patch into users' hands? IIRC Microsoft just announced that they're in effect going to give the black hats free hits for up to a month before releasing new security patches.

    (And I seriously doubt we'll ever see Microsoft duplicate the "see problem, find cause in source, write patch, send to maintainer, see it in next release" experience that I recall fondly from my days as a DEC customer. One of the attractions of Linux for me is that it gives that same feeling that I'm *part of the team*, not some outsider to be placated or even defended against.)

  232. Spreading The FUD! by webzombie · · Score: 1

    You have to smile when the big guy is trolled out to reiterate MS's position on the very topic that they thought their were going to re-intrench their monopoly... a.k.a. Trusted Computing.

    I wish the media would stop biting on these absolutely useless PR stunts that MS is saying are real information sessions or interviews.

    The media is just as much to blame as MS is for spreading the FUD!

  233. Re:Lying or Misinformed? by d2003xx · · Score: 1

    I myself often wonder if the Open Source community has either been lying or are misinformed about their flagship-product. Namely Linux.

    They do not lie.... Just fail to realize the ulitimate stupidity of most computer users ("Where is the configuration area?")


    Cheers!

  234. apples and oranges by ironfroggy · · Score: 1

    perhaps mr. gates is doing what any other company would do, making comparisons between things that arent exactly on par with one another. for example, he may be saying MS averages 24 hours to fix bugs (bugs in this sense may mean, the computer crashed kind of bugs), while Linux developers take weeks to get rid of some 'bugs', but remember that Linux folk call just about anything a bug, including feature requests. do you think mr. gates counts feature requests and plans and such as bugs? i doubt it.

  235. What Billy boy means by triptolemeus · · Score: 1

    "We've gone from little over 40 hours on average to 24 hours. With Linux, that would be a couple of weeks on average."

    Is really simple. After the patch is written Microsoft only needs 24 hours to have the patch available on windows updates. Linux distributions normally take longer, in his opinion, to update their distribution. Now the problem is that he might be right here (although I credit security.debian.org awesome work there).
    So what you see here is the typical M$ marketing answer which probably will work at the management level. The fact that you could download and manually install the Linux patch yourself, will not be told by M$.

    --
    The site where: "I'm right, as long as you ignore the things that prove me wrong", became a valid method of debate.
  236. err, I think you've got a bit skewed idea on RAM by Mr.roboto · · Score: 1

    "several generations" the IBM PC (5150) had a minimal of 16k RAM up to 64K memory. On the other hand the 5160 (PC/XT) had a minimum of 64K increasing the bottom end. Early batches had a max of 256K memory, and by 1986 (the end of the XT's production) they had boards that maxed out at 640K. There must have been some need for 640K, otherwise it wouldn't have been avalible. For the "256K" boards they made things such as the AST "6 pack plus" to allow expansion to 640K. The AT series machines had boards such as the "Orchid Blossom II" that allowed expansion to 24 megs in theory, in reality 16 was usually all you'd max out at, with the release in 1987. I'm not even gonna get into I386, I've NEVER seeen one with less then a meg of memory. from the PC to the XT to the AT to 386 there's maybe 4 generations and that's stretching it, even within 3 there was obviously some need for more RAM otherwise products such as the "6 pack plus" would have never come into existance, as well as the fact that they wouldn't have bothered adding the expanded capabilities to the 2 and 386 machines, and nowhere near "several generations." not debating wether or not he said the quote in debate, if he did he said "ever" not "for several generations" now didn't he?

    --
    Don't call my crazy, that's what they called me back in the home!
  237. Well, duh .... they have to by ResidentLinuxLunatic · · Score: 1

    Of course they'd have to supply patches more quickly .... I mean, hell, when you consider the number of security holes there are in Winblows compared to Linux -- besides, Microsloth has paid employees whose job is to provide those patches .... I'd think it's fair to say that most of the Linux community has other jobs and contributes to the community as much as they are able to do so. As usual, more MS propaganda to continue to misinform the masses.

  238. COMPLEXITY is the issue by TheConfusedOne · · Score: 1

    First off, windowsupdate.com is a poor experience for any but the most basic users. Trying to download patch sets to apply to multiple machines isn't supported in it. The system can't even decide to only highlight one patch when it knows that that patch has to be installed exclusively. History of installed patches is sketchy at best and if you install a patch outside of that environment it is completely lost. (A new W2K build right now means to install W2K, install SP4, install IE 6 SP 1, download more patches, lather, rinse, repeat.)

    The single biggest problem is that the complexity of MS's OS is out of control. IE, WMP, OE, and whatnot being welded in willy-nilly means that there's more to patch, more to potentially go wrong with a patch, and more to dilute the efforts of MS's coders.

    Yes patching is a fact of life in the software world but it doesn't have to be as bad or as often as it is today.

    --
    --- I wish I could hear the soundtrack to my life. That way I'd know when to duck.
  239. Forcing would be a mistake by Gorignak · · Score: 1

    Forcing users to download patches could be a major mistake. We have to thuroughly test patches to make sure they work with our internal software. Many of the changes they put in these HotFixes and Service Packs breaks our software written to Microsoft's own specs. I know of 2 service pack, 1 recommended update, and 2 critical updates that we are still warned not to use or the internal software will not run. Our software engineers cannot keep up to the changes. We are having to divert people from development to update our software to be compatable with the updates.

  240. Re:Nobody will ever need more then 4GB of memory.. by SuiteSisterMary · · Score: 1

    Can you name an application other than photoshop that runs on the desktop, and needs more than four gigs? No.

    Note that he doesn't say 'never ever;' in fact, he specifically says, '*right now*, it is costly.'

    In other words, yes, everything will eventually want/need 64 bit, but at the moment, it's not filling a need, it's filling a marketing checklist.

    --
    Vintage computer games and RPG books available. Email me if you're interested.
  241. Re:Someone RAM Bill by ComputerSlicer23 · · Score: 1
    Remember, it was IBM who made the hardware specs open. They thought they could control the platform by controlling the BIOS. Then they tried to put the Genie back in the bottle by releasing microchannel (MCA). It was a forgone conclusion by the time when IBM made open hardware specs, this would happen. Bill was in the right place at the right time, and was smart enough to see a way to endup monopolizing the market.

    Kirby

  242. In fact the BIOS sucked worse than you say by spitzak · · Score: 1

    The BIOS in fact required *TWO* calls to draw a character on the screen. One call moved the cursor, and another call put a character under the cursor without moving it. This is twice as bad as the worst possible design I would have thought possible.

    It seems difficult to believe that anybody smart enough to run an assember could design such a pessimissicly bad design, but those IBM engineers did it.

  243. Re:Someone RAM Bill by Mr.+Firewall · · Score: 1

    "640K ought to be enough for anybody"

    You're forgetting something very important: Gates never wrote DOS, and therefore could not have said that.

    MS-DOS (aka PCDOS) was written by Seattle Computer. One of Gates' sidekicks (I think it was Paul Allen) bought the rights to Seattle DOS after IBM offered M$ the contract to write the OS for their new PC.

    Gates got offered the contract because his mother, a wealthy Seattle socialite, had connections inside IBM. After IBM got snubbed by Digital Research (authors of CP/M), someone suggested they talk to "Mary Gates' boy."

    --
    In times of universal deceit, telling the truth gets you modded -1 Troll
  244. Re:Who cares? Really. by mobiGeek · · Score: 1
    I should have added a smiley to my post :-).

    emoticon://sorry/

    --

    ...Beware the IDEs of Microsoft...

  245. Re:Bah! The suits at Microsoft are running scared by Ben+Hutchings · · Score: 1

    Gandhi's peaceful protests had very little impact. It was violent unrest in India that forced Britain to give up on governing it and hand it over to local political parties. Gandhi pretended to stay out of politics but actually maintained a lot of influence in the Congress party. His other interests were, frankly, pretty kooky.

  246. 2000 hours by alexq · · Score: 1
    their recent performance seems to be more on the order of 3+ months, or over 2000 hours."

    that's because it's Windows 2000. obviously.

  247. Re:Bah! The suits at Microsoft are running scared by symbolic · · Score: 1

    So for grins, I tried out OO1.1, and was left dumbfounded on how clean and concise the interface was for all the tools.

    Well, all except for one. I'm still trying to figure out why in hell they changed the way that the tool palettes work - now, instead of popping up a temporary windoid allowing you to select the tool you want, it opens a completely new window, and it stays open after the tool is selected. Small, yes, but VERY annoying.

  248. requires more updates... by IAmRenegadeX · · Score: 1

    != updates faster It only LOOKS that way. :-)

  249. F'rinstance by bolix · · Score: 1

    Bullshit.

    Lets take the recent MS RPCSS vulnerability published (not by MS with a patch in hand) on 10/10/03:

    http://www.sarc.com/avcenter/security /Content/8811.html

    There still is no patch (and its gone well past the 24 or 48 hr patch date) AND all this is considering MS "patched" RPC on July 16 (MS03-026 better known as Blaster) and RPCSS in 10/03 (MS03-039).

    Now lets look at the OpenSSL vulnerability reported on 10/1/03:

    http://www.cert.org/advisories/CA-2003 -24.html

    Debian and Redhat had patches backported within 2 hours.

  250. Re:Uptime by plugger · · Score: 1

    You're absolutely right, I don't get paid to stay after hours. In fact, I don't get paid to patch the server either, but if I didn't, nobody else would.

  251. Re:Compared to what? Linux distros patch weekly... by klafhat · · Score: 1

    I've seen several posts by you in this article, and all of them are basically you being an asshole.

    I noticed a long time ago, that Overly Critical Guy (663429) often behaves like an asshole. He knows what he is doing and probably enjoys doing so. How he manages to do so without getting modded down to -1 each time is a mystery to me. But trust me, this guys every move needs to be watched very closely.

    --

    Tell me more, tell me more

  252. Re:Someone RAM Bill by Isomer · · Score: 1

    not necessarily a frame buffer, just the disk image. The advantage of using mmap(2) is that it's practically 0 copy instead of copying things two or three times in memory (from disk into kernel buffer, from kernel buffer to buffer provided to read(2) syscall etc). It avoids syscall overheads, and reduces the lines of code you write. The less lines of code you have the less bugs you have.

    The kernel stuff may be the same, but since you remove the syscall indirection, it's faster, and easier to code.

  253. Re:Someone RAM Bill by fferreres · · Score: 1

    Hahaha. Well, you have never seen Mr. Gates in person, so how would you know?

    --
    unfinished: (adj.)
  254. Re:MS has a track record of lies and FUD by Cyno · · Score: 1

    This is why I don't like capitalism. Companies are not trying to find a cure for AIDS. They're trying to make money. Finding that cure, in a patentable form, would make them lots of money. But if it can't be cured syntheticly like that its probably more lucrative to just treat it.

    Whatever happened to finding a cure for AIDS because you want to cure the people who have it? Whatever happened to loving eachother, caring about eachother or doing good things to help eachother, for the fuck of it?

    I just hope people like you aren't running the companies and organizations trying to find a cure for AIDS.

    How can any organization complain about money when PEOPLE ARE FUCKING DYING!

    Those people mean nothing to people like you, is that it? They aren't worth treating unless someone pays you. Are you a capitalist?

    Of course I expect them to give it away for free. People NEED it! Its not like some worthless piece of software or something.

    What would you rather do, cure one person of AIDS and HIV or make a billion tax-free dollars?

    I'd cure the person without stopping to think about it.

  255. Re:MS has a track record of lies and FUD by NanoGator · · Score: 1

    "I just hope people like you aren't running the companies and organizations trying to find a cure for AIDS."

    What the fuck? People like me? You're drawing a rather extreme conclusion with minimal information. Next time, ask a few questions before diving head first into preach mode.

    Man I cannot believe what sets people off these days.

    --
    "Derp de derp."
  256. Re:MS has a track record of lies and FUD by Cyno · · Score: 1

    Well, I did ask a few very pointy questions, but my venting must have upset you too much to provide any answers. Sorry about that.

    Man I cannot believe what sets people off these days.

    Honestly? Nothing you said really set me off, I was already set off before I hopped on slashdot to flame some fools. Sorry you got in the way. Sometimes its safer not to reply to my posts. Hope my words didn't hurt you too bad.

    I tend to stereotype people into two groups, capitalists and non-capitalists. One of those groups frustrates me deeply. Guess which one. :)

    So if I say something like "people like you" I'm really referring to the stereotype and not the individual. No hard feelings, eh?

    P.S. Preach mode rocks!

  257. Re:MS has a track record of lies and FUD by NanoGator · · Score: 1

    I understand man. Believe me, I've been there.
    No hard feelings. :)

    Have a good evening.

    --
    "Derp de derp."
  258. Re:MS has a track record of lies and FUD by NanoGator · · Score: 1

    Nice try. :)

    --
    "Derp de derp."