> From: "Paul Ranson" 
> It doesn't matter if you count them in as OS vulnerabilities or not. They're
> vulnerabilites. If Sony distribute vulnerable software then Sony have some
> kind of duty to their customer to fix and publicise.

So how then should Sony fix the recent hole in Windows? Do they have the
Windows source & are they allowed to create their own fixes? Ditto for
WinDVD etc.etc.

If windows app makers are responsible for holes in their apps then why are
Linux app makers different? The recent prob with GAIM was with 0.75. The
most recent Windows GAIM is the same version. Ergo if GAIM on Linux is a
Linux problem, then if any IHV bundles up/pre-installs GAIM on Windows then
it's a Windows hole.

Ditto say DB2. If IBM sells you a server as a bundle complete with Win2KS
& DB2 or Turbo Linux & DB2 then if there is a DB2 hole it would
seem that you'd have a DB2 hole if you chose Win2K but a linux hole if you
chose turbo linux.

G*d alone knows what the case might be if an IHV bundled Windows & cygwin.

Adam



> Same for RedHat. If you install a
> "Robert Comer" 
wrote in message
> news:402cda2e{at}w3.nls.net...
>> > his laptop is a piece of hardware not an OS distribution.
>> 
>> So is an install CD.  I think Adam's post has merit if you guys keep
>> thinking 3rd party apps in Linux are OS components.
>> 
>> - Bob Comer 
>> 
>> 
>> "Geo."  wrote in message
news:402cb184$2{at}w3.nls.net...
>> > his laptop is a piece of hardware not an OS distribution.
>> >
>> > Geo.
>> >
>> > "Adam Flinton" 
wrote in message
>> > news:402c82c1{at}w3.nls.net...
>> > > Geo. wrote:
>> > >
>> > > > if it's part of the distribution it counts.
>> > > >
>> > >
>> > > Thnking about it.....my borther's SOny laptop came with
XP & a whole
>> > > host of apps rwady installed...so I take it that all
those apps that
>> > > came installed with the box (e.g. WinDVD etc) are all thus Windows
> vulns
>> > > if a problem is found?
>> > >
>> > >
>> > >
>> > >
>> > > Adam
>> > >
>> >
>> >
>> 
>> 

--- BBBS/NT v4.01 Flag-5