[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Positive press for Debian's security team



Better metric: fix time from vendor's notification date

Eeye says Microsoft has known about some unfixed goodies
since the fall:
http://www.eeye.com/html/Research/Upcoming/index.html 

-C


On Wed, Mar 31, 2004 at 11:20:02AM +1200, Jones, Steven wrote:
> so MS wins....
> 
> Though it looks like the measurement is public disclosure? to fix time, not
> the best metric possibly....so security experts might contact MS weeks when
> they find the problem before they publicly comment .... While it looks like
> Linux is its own worst enemy as "we" disclose the problem more quickly I
> suspect via bugtraking....
> 
> how dows it go?
> 
> lies,
> 
> damn lies,
> 
> and statistics....
> 
> regards
> 
> Steven
> 
> 
> 
> -----Original Message-----
> From: debian-security-request@lists.debian.org
> [mailto:debian-security-request@lists.debian.org] On Behalf Of Michael Stone
> Sent: Wednesday, 31 March 2004 11:10 a.m.
> To: debian-security@lists.debian.org
> Subject: Re: Positive press for Debian's security team
> 
> 
> On Tue, Mar 30, 2004 at 04:59:36PM -0600, Jones wrote:
> >Positive press for Debian's security team.
> >
> >Using numbers from a pair of metrics, Forrester Research's 
> >recommendation was "businesses that value quick patches look to 
> >Microsoft and Debian".
> 
> That's positive? They put us in the same category as Microsoft! This will
> lose us some serious street cred. :)
> 
> Mike Stone
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> 

Attachment: signature.asc
Description: Digital signature


Reply to: