Bonum Certa Men Certa

Great New Example of Why GNU/Linux is Inherently More Secure Than Windows

Utilities



Summary: GNU/Linux is patching flaws very quickly (almost immediately), whereas Microsoft hides flaws and patches them a long time after their discovery, sometime patching them secretly or only once attacks strike

Mr. Pogson has just found this news about a vulnerability that affects Vista 7 and all of its predecessors. It took Microsoft no less than about half a year to patch this vulnerability. Yes, check it out:

The software company on Tuesday released MS10-049 to kill the bug in Windows Server 2008, Windows 7 and 12 other versions of Windows that are still under support. The patch updates a part of the operating system known as SChannel, or Secure Channel, which is responsible for implementing SSL, which is also referred to as TLS, or transport layer security.


This patch Tuesday was the worst ever recorded (but Microsoft admits bluffing with the numbers, so it's impossible to know for sure]).

Either way, compare that to the speed of Debian's patch for the same issue:

I read that M$ has just patched SSL to comply with RFC5746, five months after Debian GNU/Linux did it... on 12 architectures and several versions. Who are you going to call when you need software for your IT system? Debian GNU/Linux!


Microsoft still promotes the mythology that half of Windows PCs are claimed to be zombies just because Windows is ubiquitous. Maybe it has a lot to do with Microsoft's shoddy patching practices, not supposed "popularity" which Microsoft loves to rave about like a cheerleader.

"The trouble with you, Andy [Hill, Microsoft developer], is you aren't willing to listen to schedules. When I tell you what the schedule is, you try to twist my arm to sign up to a schedule that I don't believe in. You learned that at the Steve Ballmer cheerleading school too, didn't you? Well, he's nuts, and so are you."

--Microsoft manager

Recent Techrights' Posts

Speaking Truth to Power (More Effectively)
Behind every 'tech' giant there's some dark secret and they already seek to demonise/discredit critics/exposers
 
[Meme] EPO Suckers
The EPO's president refers to himself as "the f**king president" (maybe he knows why)
Central Staff Committee on EPO Bribing Its Critics, Using a "Sharp and Abrupt Reduction, Estimated at 80% to 90%, in the Number of Refusals and Summons for Oral Proceedings in Areas Related to Software Patents"
silence would be a form of enhanced complicity, in effect endorsing both bribes and violation of the EPC
Links 20/09/2024: Qualcomm Layoffs, Interest Rates Fall
Links for the day
Gemini Links 20/09/2024: 3K Run and Lagrange 1.18
Links for the day
Spam of the Day (Yes, Brittany Day Again)
They leverage LLMs for SEO purposes
Links 20/09/2024: Chinese Botnet Dismantled, More EU Shake-ups
Links for the day
Links 20/09/2024: European Commission on Microsoft Competition Abuses, More Revelations About Mass Layoffs at IBM and Microsoft
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, September 19, 2024
IRC logs for Thursday, September 19, 2024
Links 19/09/2024: UPC Illegal 'Court' and Microsoft LinkedIn Called Out for Data Misuse
Links for the day
Gemini Links 19/09/2024: Invidious Problems and Install Times
Links for the day
Links 19/09/2024: Scam ‘Funeral Streaming’ and More Microsoft TCO Tales
Links for the day
In Sweden, GNU/Linux Almost 20% of the Laptop/Desktop Market, Firefox Falls to 2%
In the US, once a browser falls below 2%, many critical sites can legally ignore it (or its users' needs) altogether
When Microsoft Pays a Lot of Money to Reddit, 'Linux' Foundation, and Countless Other Entities
As does Google
A CoC Will Destroy Your Free Software Community and Help Imposers of CoC (Like Microsoft)
Abusers like to disguise censorship (of their abuse) as "manners" or good "conduct"
IBM Likely Breaking Several Laws With Latest 'Secret' Mass Layoffs
Never sign an NDA
Gemini Links 19/09/2024: Emacs Wiki and China, IRC Chatting
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, September 18, 2024
IRC logs for Wednesday, September 18, 2024
Links 18/09/2024: Web Server Survey Shows Microsoft Down Again, Omkhar Arasaratnam Leaves Microsoft-connected OpenSSF
Links for the day
Links 18/09/2024: Gaming Layoffs and New Openwashing by Linux Foundation
Links for the day
Gemini Links 18/09/2024: Home, Ashram, and Markdoc
Links for the day
Morale at Microsoft Sinking, More Layoffs Expected, Stock Buybacks Blasted
controversial because they should really be illegal
[Meme] Think. Positive. Saturate the Media.
IBM: Layoffs? What layoffs?
The Kubecost Acquisition Does Not Show IBM is Rich, It Shows It Wants to Distract From Mass Layoffs Happening This Week (Thousands Laid Off in the Dark)
So-called "news deserts" have become a national and international phenomenon (not local/regional)
IBM Has Been Lobbying for Software Patents, It's Not the Free Software Community's Ally
The ancient company has been lobbying for these patents for decades already
Over Half a Day Later the Media Still Doesn't Cover Thousands of Layoffs at IBM
Not even a single news site bothered to investigate and report this? Not even one?
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, September 17, 2024
IRC logs for Tuesday, September 17, 2024