Welcome to TechNet Blogs Sign in | Join | Help

Browse by Tags

All Tags » Windows vs Linux   (RSS)

Download: H1 2008 Desktop OS Vendor Report - Vulnerabilities and Days-of-Risk

This report looks at all of the vulnerabilities fixed by Apple, Microsoft, Red Hat and Ubuntu during the first half of 2008. At the vendor level, the report examines all vulnerabilities as well as Days of Risk (DoR) associated with those vulnerabilities. Read More...
Posted Monday, October 27, 2008 8:00 AM by jrjones | 10 Comments
Attachment(s): 1H08-desktop-vuln-report.pdf

Q1 2008 - Client OS Vulnerability Scorecard

This paper is a compilation of vulnerability data for client operating systems for the first 3 month, January through March, of 2008. Vulnerabilities and fixes for the following products are discussed: Microsoft Windows Vista Microsoft Windows XP SP2 Read More...
Posted Thursday, May 15, 2008 12:04 AM by jrjones | 38 Comments
Attachment(s): q108-client-scorecard.pdf

Download: Internet Explorer and Firefox Vulnerability Analysis

Summary: For most people, their web browser is central to their interaction with the Internet, connecting to global web sites and helping them consume online services providing everything from booking flights to banking services to online shopping. This Read More...
Posted Friday, November 30, 2007 4:01 PM by jrjones | 24 Comments
Attachment(s): ie-firefox-vuln-analysis.pdf

Hats off to Mr. Mark Cox and Team

Let me take a moment to clarify something, as some folks seem to have gotten the wrong impression. I having nothing but the utmost respect for Mark Cox and the Red Hat security team that he leads. They do a hard job and they do it well, balancing the Read More...
Posted Thursday, October 11, 2007 10:21 AM by jrjones | 1 Comments

Windows Vista - 6-Month Vulnerability Study

I was nudged by some colleagues this week, telling me that some folks may only be reading my technet blog, but that I hadn't been doing a great job of cross-posting some things. Six months is a much more interesting time frame than the previous Windows Read More...
Posted Saturday, June 30, 2007 1:34 PM by jrjones | 1 Comments

2006 Days of Risk Comparison

Among the other metrics that I track, I also periodically look at days-of-risk, or the average amount of time that customers are exposed to public vulnerabilities before a vendor provides a patch. You can take a look at the full findings on Days-of-risk Read More...
Posted Friday, June 15, 2007 12:07 PM by jrjones | 2 Comments

Mr. Jones Goes to TechEd

TechEd 2007 is coming next week and I am excited to have two sessions this year. If you sometimes find the information I post on the blog here interesting, then I think you'll enjoy these sessions. In any case, stop by and say hi. MONDAY - SEC208 - Jeff Read More...
Posted Tuesday, May 29, 2007 7:39 PM by jrjones | 1 Comments

Background and Overview for Days-of-Risk

I just published a Basic Guide to Days of Risk over on my CSO Magazine Blog , in preparation for a new quarterly days-of-risk study I'm going to start publishing. If you don't have a good understanding of the days-of-risk metrics, the post will give you Read More...
Posted Friday, May 18, 2007 11:52 PM by jrjones | 1 Comments

March 2007 - Vuln Scorecard

I just posted my March 2007 - Operating System Vulnerability Scorecard over on CSOOnline, which includes charts comparing the vulnerabilities in Windows, Red Hat Linux, Ubuntu, Novell, Sun, and Mac OS X, broken down by server and workstation. Here is Read More...
Posted Thursday, April 05, 2007 9:01 PM by jrjones | 2 Comments

February 2007 - Vuln Scorecard

I just posted my February 2007 - Operating System Vulnerability Scorecard over on CSOOnline, which includes charts comparing the vulnerabilities in Windows, Red Hat Linux, Ubuntu, Novell, Sun, and Mac OS X, broken down by server and workstation. I do Read More...
Posted Friday, March 30, 2007 12:14 AM by jrjones | 1 Comments

Windows Vista 90 Day Vulnerability Analysis

February 28 th marked 90 days that Windows Vista had been available to business customers. Has it been a good or a bad 90 days for security vulnerabilities? Dang, this is a sweet chart, but click here to read all the details and download the full report Read More...
Posted Wednesday, March 21, 2007 9:45 PM by jrjones | 10 Comments

Red Hat Launches 11 RHEL5 Security Advisories

Dual standards at work again. When the first vulnerability was announced in Windows Vista a month after release, it was big news. 11 security advisories, including 3 Critical ones, on the day of launch? Apparently no big deal for Red Hat ... read more Read More...
Posted Thursday, March 15, 2007 8:00 PM by jrjones | 6 Comments

January 2007 - Vuln Scorecard

I just posted my January 2007 - Operating System Vulnerability Scorecard over on CSOOnline, which includes charts comparing the vulnerabilities in Windows, Red Hat Linux, Ubuntu, Sun, and Mac OS X, broken down by server and workstation. I do include the Read More...
Posted Tuesday, February 27, 2007 9:13 PM by jrjones | 3 Comments

Common Objections - Comparing Linux Distros with Windows

Once again, my effort to explore common misperceptions (more recently exploring unpatched statistics ) has brought out some of the common objections from those that don't necessarily like the results. Very rarely do I get comments that can find a substantive Read More...
Posted Monday, January 29, 2007 6:32 PM by jrjones | 2 Comments

Exposed? : Examining Secunia Unpatched Warnings - Part 3

This is the final post in my 3 part series trying to get an accurate view of disclosed, but unpatched issues for Windows and Linux. In Part 1 , I looked at Secunia "unpatched" warnings and raised the question of whether the unpatched data was accurate Read More...
Posted Friday, January 19, 2007 8:41 PM by jrjones | 8 Comments
More Posts Next page »
 
Page view tracker