Jeff Jones Security Blog

Browse by Tags

Download: H1 2008 Desktop OS Vendor Report - Vulnerabilities and Days-of-Risk

This report looks at all of the vulnerabilities fixed by Apple, Microsoft, Red Hat and Ubuntu during the first half of 2008. At the vendor level, the report examines all vulnerabilities as well as Days of Risk (DoR) associated with those vulnerabilities. Read More...

Posted Monday, October 27, 2008 8:00 AM by jrjones | 10 Comments

Filed under: Security, Studies, Windows vs Linux, Windows, Vista, Open Source, Red Hat, Microsoft, Ubuntu, Mac OS X, Apple, Vulns, NVD, Vulnerabilities, Windows XP SP2, Security Bulletins, SDL

Attachment(s): 1H08-desktop-vuln-report.pdf

Q1 2008 - Client OS Vulnerability Scorecard

This paper is a compilation of vulnerability data for client operating systems for the first 3 month, January through March, of 2008. Vulnerabilities and fixes for the following products are discussed: Microsoft Windows Vista Microsoft Windows XP SP2 Read More...

Posted Thursday, May 15, 2008 12:04 AM by jrjones | 39 Comments

Filed under: Security, Linux, Studies, Windows vs Linux, Windows, Vista, Open Source, Red Hat, Microsoft, Ubuntu, Mac OS X, Apple, Vulns, NVD, UAC, Vulnerabilities, Windows XP SP2

Attachment(s): q108-client-scorecard.pdf

July 2007 - Operating System Vulnerability Scorecard

Summer and work travel have really had an impact and I've missed a couple of months of scorecards, so last weekend, I decided to dig in and catch up to July. I hit a few road bumps: Sun changed their Security Alerts web site, making it a bit more challenging. Read More...

Posted Thursday, August 16, 2007 11:47 PM by jrjones | 19 Comments

Filed under: Security, Linux, Studies, Windows, Vista, Open Source, SuSE, Microsoft, Ubuntu, Mac OS X

Windows Vista - 6-Month Vulnerability Study

I was nudged by some colleagues this week, telling me that some folks may only be reading my technet blog, but that I hadn't been doing a great job of cross-posting some things. Six months is a much more interesting time frame than the previous Windows Read More...

Posted Saturday, June 30, 2007 1:34 PM by jrjones | 1 Comments

Filed under: Security, Linux, Studies, Windows vs Linux, Windows, Vista, Open Source, SuSE, Red Hat, Microsoft, Ubuntu, Mac OS X, Novell

March 2007 - Vuln Scorecard

I just posted my March 2007 - Operating System Vulnerability Scorecard over on CSOOnline, which includes charts comparing the vulnerabilities in Windows, Red Hat Linux, Ubuntu, Novell, Sun, and Mac OS X, broken down by server and workstation. Here is Read More...

Posted Thursday, April 05, 2007 9:01 PM by jrjones | 2 Comments

Filed under: Security, Linux, Studies, Windows vs Linux, Windows, Vista, Open Source, SuSE, Red Hat, Microsoft, Ubuntu, Mac OS X

February 2007 - Vuln Scorecard

I just posted my February 2007 - Operating System Vulnerability Scorecard over on CSOOnline, which includes charts comparing the vulnerabilities in Windows, Red Hat Linux, Ubuntu, Novell, Sun, and Mac OS X, broken down by server and workstation. I do Read More...

Posted Friday, March 30, 2007 12:14 AM by jrjones | 1 Comments

Filed under: Security, Linux, Windows vs Linux, Windows, Vista, Open Source, SuSE, Red Hat, Microsoft, Ubuntu

January 2007 - Vuln Scorecard

I just posted my January 2007 - Operating System Vulnerability Scorecard over on CSOOnline, which includes charts comparing the vulnerabilities in Windows, Red Hat Linux, Ubuntu, Sun, and Mac OS X, broken down by server and workstation. I do include the Read More...

Posted Tuesday, February 27, 2007 9:13 PM by jrjones | 3 Comments

Filed under: Security, Linux, Studies, Windows vs Linux, Windows, Vista, Red Hat, Microsoft, Ubuntu, Mac OS X

Fallout in Linux Land

Yesterday, Eric S. Raymond (ESR) publicly dumped Red Hat Fedora and made the switch to Ubuntu: Eric S. Raymond Gives Up on Fedora , burning bridges left and right behind him. In Eric's words: Over the last five years, I've watched Red Hat/Fedora throw Read More...

Posted Thursday, February 22, 2007 6:07 PM by jrjones | 0 Comments

Filed under: Linux, Ubuntu, People

December 2006 Catch-up

Well, between the Holidays and 2 weeks of being sick, I didn't stay very current during December. So, to get back on track, I thought I'd create this summary, backdate it to December 31 (today is January 2nd, 2007), just so I can share my comments on Read More...

Posted Sunday, December 31, 2006 5:38 PM by jrjones | 0 Comments

Filed under: Security, Linux, Windows, Vista, General, Symantec, Red Hat, Microsoft, McAfee, Ubuntu, Firefox, Patchguard

Windows vs Linux - Workstation - Q3 2006 addendum (High+Remote)

This post is dedicated to n00dles , for daring to ask for even more detail ;-) and should be considered as an addendum to Windows vs Linux - Workstation Comparison - Q3 2006 . Same caveats apply: NOTE: I am not asserting that my vulnerability analysis Read More...

Posted Friday, October 20, 2006 7:23 PM by jrjones | 2 Comments

Filed under: Security, Studies, Windows vs Linux, Windows, Open Source, Red Hat, Microsoft, Ubuntu

Windows vs Linux - Workstation Comparison - Q3 2006

NOTE: I am not asserting that my vulnerability analysis demonstrates that Windows is more secure. Rather, I frequently hear and read Linux advocates making unsupported assertions to the opposite that Linux is inherently more secure than Windows. The "unsupported" Read More...

Posted Thursday, October 19, 2006 7:19 PM by jrjones | 13 Comments

Filed under: Security, Linux, Studies, Windows vs Linux, Windows, Open Source, Red Hat, Microsoft, Ubuntu

Ubuntu 6.06 LTS (Dapper Drake) - 90 Day Security Vulnerability Scorecard

Based upon Debian, Ubuntu has cool release names like "Warty Warthog", "Hoary Hedgehog", "Breezy Badger" and "Dapper Drake" and is certainly the current fair haired Linux. Warty Warhog, aka Ubuntu 4.10, was the first release in October 2004. Dapper Drake, Read More...

Posted Tuesday, September 26, 2006 6:59 PM by jrjones | 8 Comments

Filed under: Security, Linux, Studies, Windows vs Linux, Open Source, Red Hat, Ubuntu