[dundee] Taylug Weekly Articles 8 - POMS

[gordon dunlop]

We are talking about metrics here:

http://www.theregister.co.uk/2004/10/22/linux_v_windows_security/

At least in this report they are trying to use metrics to define
security, It is a big read. Yes arguments can go round in circles, the
point is open source has its cards face up on the table therefore it
is difficult to bluff or bullshit because it is a known quantity. Only
when there is an unknown quantity the user has to try and determine
between fact and fiction.

Gordon

On 02/02/2008, Gary Short <gary at garyshort.org> wrote:
 If one system has 100 bugs, but none of them are
> exploitable in such away that the security of the system can be
> overcome, and another system as just 1 bug, but that bug allows an
> exploit which does overcome the security, then I'd have to say the
> system with 100 bugs is more secure than the one with 1 bug.
>
>
> >
> --
> Cheers,
> Gary
> http://www.garyshort.org
>
>
> _______________________________________________
> dundee GNU/Linux Users Group mailing list
> dundee at lists.lug.org.uk  http://dundee.lug.org.uk
> https://mailman.lug.org.uk/mailman/listinfo/dundee
> Chat on IRC, #tlug on dundee.lug.org.uk
>