How much of this is accurate?

Jeremy Fowler jfowler at westrope.com
Fri Mar 21 15:54:57 CST 2003


Yeah I've seen that article before (and I'm in that Discussion Center). Check
out this article:

http://www.internetweek.com/story/INW20021121S0009

"CERT believes Aberdeen drew too much from its numbers. The organization doesn't
draw any conclusions from its advisories on the vulnerability of open-source
software vs. Microsoft or any other seller of proprietary applications. Instead
of comparisons, the group focuses on identifying and studying security problems
it considers most serious based on CERT's own metrics. That covers about 20
percent of all known vulnerabilities, said Shawn Hernan, senior member of the
CERT technical staff."

> -----Original Message-----
> From: owner-kclug at marauder.illiana.net
> [mailto:owner-kclug at marauder.illiana.net]On Behalf Of Chris Wagner
> Sent: Friday, March 21, 2003 8:44 AM
> To: kclug at kclug.org
> Subject: How much of this is accurate?
>
>
> http://www.techrepublic.com/article_guest.jhtml?tag=news-rr&id=r002200
> 21209mco01.htm
>
>
> I was just wondering.
>
> I know nothing about securing Linux, and was seriously thinking about
> using it, but I have a few concerns (mostly related to my experience).
>
>
>




More information about the Kclug mailing list