Vista Security Claims Debunked

An anonymous reader writes "Apparently Microsoft still hasn't learned that counting vendor acknowledged vulnerabilities isn't a good way to establish the security of an OS. As an analysis of Microsoft's claims on Full Disclosure shows, we see that the methodology used was badly flawed. A bug in Firefox (not to mention emacs), counts as a flaw for Linux, while IE bugs get ignored on Vista's chart. Then we see that vulnerabilities aren't vulnerabilities when they're security-challenged features such as Vista's Teredo. Also, there's far too little consideration given to severity, given that it stoops to counting even extra access restrictions on a file in OSX to have something to show. In short, the original Microsoft analysis was good PR and poor research."

Comments

Re:You don't need to see our identification.

[christian.einfeldt]

MOD PARENT UP! This is funny! The quote is a classic example of a Jedi mind trick used by Obi-Wan Kenobi in Star Wars III -- Return of the Sith, to get past some Storm Trooper guards running a checkpoint.

http://www.mediafirst.co.uk/news/jedi.htm

EXTERIOR: TATOOINE -- MOS EISLEY -- STREET.

The speeder is stopped on a crowded street by several combat-hardend stormtroopers who look over the two robots. A Trooper questions Luke.

TROOPER: How long have you had these droids?

LUKE: About three or four seasons.

BEN: They're for sale if you want them.

TROOPER: Let me see your identification.

Luke becomes very nervous as he fumbles to find his ID while Ben speaks to the Trooper in a very controlled voice.

BEN: You don't need to see his identification.

TROOPER: We don't need to see his identification.

BEN: These are not the droids you're looking for.

TROOPER: These are not the droids we're looking for.

BEN: He can go about his business.

TROOPER: You can go about your business.

BEN: (to Luke) Move along.

TROOPER: Move along. Move along.