Jeff Jones Security Blog

Browse by Tags

Feb09 Security Bulletin SDL Benefit Summary

Summaries from previous months: Jan09 Security Bulletin SDL Benefit Summary When I do analysis and reports on Microsoft products, I typically look for where the Security Development Lifecycle (SDL) has helped to provide improvement and provide some stats Read More...

Posted Wednesday, February 11, 2009 12:24 PM by jrjones | 2 Comments

Filed under: Security, Studies, Windows, Vista, Microsoft, Windows Server, Windows XP SP2, Security Bulletins, SDL, Windows Server Core

Download: H1 2008 Desktop OS Vendor Report - Vulnerabilities and Days-of-Risk

This report looks at all of the vulnerabilities fixed by Apple, Microsoft, Red Hat and Ubuntu during the first half of 2008. At the vendor level, the report examines all vulnerabilities as well as Days of Risk (DoR) associated with those vulnerabilities. Read More...

Posted Monday, October 27, 2008 8:00 AM by jrjones | 10 Comments

Filed under: Security, Studies, Windows vs Linux, Windows, Vista, Open Source, Red Hat, Microsoft, Ubuntu, Mac OS X, Apple, Vulns, NVD, Vulnerabilities, Windows XP SP2, Security Bulletins, SDL

Attachment(s): 1H08-desktop-vuln-report.pdf

Black Hat : Got2 Luv the H8ers

So, this afternoon, I'm in the Microsoft booth at Black Hat when this guy comes up (badge hidden of course) and starts talking to some of my colleagues. Right away, it was pretty obvious that he was antagonistic. I will refer to him as "h8er" from here Read More...

Posted Thursday, August 07, 2008 6:07 AM by jrjones | 24 Comments

Filed under: Security, Vista, Microsoft, Mac OS X, Geek, Black Hat, Story

Q1 2008 - Client OS Vulnerability Scorecard

This paper is a compilation of vulnerability data for client operating systems for the first 3 month, January through March, of 2008. Vulnerabilities and fixes for the following products are discussed: Microsoft Windows Vista Microsoft Windows XP SP2 Read More...

Posted Thursday, May 15, 2008 12:04 AM by jrjones | 38 Comments

Filed under: Security, Linux, Studies, Windows vs Linux, Windows, Vista, Open Source, Red Hat, Microsoft, Ubuntu, Mac OS X, Apple, Vulns, NVD, UAC, Vulnerabilities, Windows XP SP2

Attachment(s): q108-client-scorecard.pdf

Windows Vista vs Windows XP SP2 Vulnerability Report 2007

In the wake of my Windows Vista One Year Vulnerability Report , I have received many questions regarding the current vulnerability record of Windows Vista as compares with Windows XP SP2. This short paper is a compilation of vulnerability data for Microsoft Read More...

Posted Wednesday, May 14, 2008 11:50 PM by jrjones | 9 Comments

Filed under: Security, Studies, Windows, Vista, Microsoft, Vulns, UAC, Vulnerabilities, Windows XP SP2

Attachment(s): 2007-vista-vs-xp.pdf

UAC, an Excellent Description and Discussion by Crispin Cowan

I was excited when Dr. Crispin Cowan joined the company a while back - what security person wouldn't be! As one of the key drivers behind StackGuard , Linux Security Modules and co-founder of Immunix, which produced AppArmor - few people are as qualified Read More...

Posted Monday, May 12, 2008 11:07 PM by jrjones | 1 Comments

Filed under: Security, Windows, Vista, Microsoft, Crispin Cowan, UAC

Download: Internet Explorer and Firefox Vulnerability Analysis

Summary: For most people, their web browser is central to their interaction with the Internet, connecting to global web sites and helping them consume online services providing everything from booking flights to banking services to online shopping. This Read More...

Posted Friday, November 30, 2007 4:01 PM by jrjones | 24 Comments

Filed under: Security, Studies, Windows vs Linux, Vista, Open Source, IE, Microsoft, Firefox

Attachment(s): ie-firefox-vuln-analysis.pdf

Zune Killer App - Windows Media Center

I admit it, I did not buy a Zune last year when they were first released. I don't have a large music collection and I'm generally happy listening to the radio to get my music fix, or the digital music channels available from my cable company, if you will. Read More...

Posted Monday, November 26, 2007 9:55 PM by jrjones | 2 Comments

Filed under: jeff-story, Vista, Media Center, Home Theater, Zune, iPod, Cool, Geek

Building My Windows Vista Media Center (VMC) - Part 3 - MyMovies2

[ Posted from the Bus click and read, if you don't know what I mean] Previous posts about building my Vista Media Center: Part 1 - The System Part 2 - The Tuner I posted part 2 back in June, so it has been a while, but I wanted to continue documenting Read More...

Posted Saturday, November 03, 2007 12:52 AM by jrjones | 3 Comments

Filed under: Vista, Microsoft, Media Center, Home Theater, PVR, Geek

Microsoft Security Intelligence Report - 1st Half 2007

The third volume of the Microsoft Security Intelligence Report (SIR) is now available for download at: www.microsoft.com/sir - this link will take you to a summary portal that has links to the downloadable document, upcoming webcasts about the SIR results, Read More...

Posted Tuesday, October 23, 2007 5:35 PM by jrjones | 1 Comments

Filed under: Security, Studies, Windows, Vista, Microsoft

July 2007 - Operating System Vulnerability Scorecard

Summer and work travel have really had an impact and I've missed a couple of months of scorecards, so last weekend, I decided to dig in and catch up to July. I hit a few road bumps: Sun changed their Security Alerts web site, making it a bit more challenging. Read More...

Posted Thursday, August 16, 2007 11:47 PM by jrjones | 19 Comments

Filed under: Security, Linux, Studies, Windows, Vista, Open Source, SuSE, Microsoft, Ubuntu, Mac OS X

Windows Vista - 6-Month Vulnerability Study

I was nudged by some colleagues this week, telling me that some folks may only be reading my technet blog, but that I hadn't been doing a great job of cross-posting some things. Six months is a much more interesting time frame than the previous Windows Read More...

Posted Saturday, June 30, 2007 1:34 PM by jrjones | 1 Comments

Filed under: Security, Linux, Studies, Windows vs Linux, Windows, Vista, Open Source, SuSE, Red Hat, Microsoft, Ubuntu, Mac OS X, Novell

Building My Windows Vista Media Center (VMC) - Part 2 - The Tuner

You can read the first part of this blog series at Building My Windows Vista Media Center - Part 1 - The System , where I talk about what hardware and software I selected for my home Vista Media Center, which I will refer to as VMC from now on. This entry Read More...

Posted Tuesday, June 05, 2007 12:42 AM by jrjones | 3 Comments

Filed under: Windows, Vista, Microsoft, Media Center, Home Theater, PVR

Windows XP vs Windows Vista Security

So, a couple of days ago, I happened upon the tantalizing headline of Review: Vista, XP Users Equally At Peril To Viruses, Exploits. What!? As you can imagine, the headline sucked me in and I had to read it. Frankly, the article as well as the scientific Read More...

Posted Friday, June 01, 2007 10:21 PM by jrjones | 3 Comments

Filed under: Security, Studies, Windows, Vista, Microsoft, Commentary

Mr. Jones Goes to TechEd

TechEd 2007 is coming next week and I am excited to have two sessions this year. If you sometimes find the information I post on the blog here interesting, then I think you'll enjoy these sessions. In any case, stop by and say hi. MONDAY - SEC208 - Jeff Read More...

Posted Tuesday, May 29, 2007 7:39 PM by jrjones | 1 Comments

Filed under: Security, Studies, Windows vs Linux, Windows, Vista, Microsoft, People, TechEd