News for hackers. Stuff that matters.

A comment on Was Mac OS X really the most vulnerable in 2015?.

Re:Was Mac OS X really the most vulnerable in 2015? by rdtsc on Saturday January 09, 2016 @12:56PM (#10872135)
Mac CVE numbers are not as discretized by type of component as Microsoft or Linux are. For Windows for example it is Windows 8, Windows 8.1, Windows 7, Windows 10, Windows RT, Internet Explorer. Google is Android, Chrome etc. Adobe is a large suite of products as well.

The goal of CVEs is not to point fingers to companies and compile statistics based on ownernship. I don't see any value or helpful outcome from these these "research" security firms (and the tech blogs) treating it like such and creating FUD.

[ Parent | on HN ]
Re:Was Mac OS X really the most vulnerable in 2015? by junto on Saturday January 09, 2016 @02:55PM (#10872601)
More importantly, total counts are pointless. "Average response time to released fix" would be a more valuable metric for comparison.
[ Parent | on HN ]
Re:Was Mac OS X really the most vulnerable in 2015? by vetinari on Saturday January 09, 2016 @03:43PM (#10872792)
On the other hand, the Linux CVEs count each bug several times - e.g. kernel exploit will be counted against Linux Kernel AND each distribution. I assume something similar for Windows too.
[ Parent | on HN ]
Re:Was Mac OS X really the most vulnerable in 2015? by brudgers on Saturday January 09, 2016 @02:31PM (#10872486)
There is probably greater variation in security mechanisms among versions of Windows than OSX due to OSX's remaining close to its *nix heritage. For better or worse, Microsoft has been rolling (or not rolling) its own security architecture for several decades.
[ Parent | on HN ]