The question I have when I see research like this is usually, "Is Windows really more secure, or is Microsoft just better at hiding bugs?" None of us have access to Microsoft's internal bug database, like we have access to the bug databases for open source projects. And none of us can search Microsoft's source code for buffer overflows, like many people have done with open source software. Naturally, then, fewer security vulnerabilities will be reported for Microsoft products -- they're harder to find! That doesn't mean they don't exist.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/127/17279#17279