From: "Paul Ranson" 

I tried to cancel that message....

Nevermind.

Sony meet their responsibilities in the case of Microsoft related
vulnerability by passing the duty onto MS who operate a relatively
effective update service. In the case of RedHat it's trickier. RedHat
probably built all the parts of their distribution, a patch from the
originators of the software may or may not build, and may or may not be
compatible with RedHat in general. So RedHat have to be more pro-active.

I don't care to score 'holes' on OSes. It seems remarkably pointless. To be
useful you have to consider systems. There's no evidence that for
equivalent functionality Linux is less vulnerable than Windows, although it
is naturally less exploited due to its relative scarcity...

Paul

"Adam Flinton"  wrote in
message news:f091ee.4d53fc{at}harborwebs.com...
> > From: "Paul Ranson" 
> > It doesn't matter if you count them in as OS vulnerabilities or not.
They're
> > vulnerabilites. If Sony distribute vulnerable software then Sony have
some
> > kind of duty to their customer to fix and publicise.
>
> So how then should Sony fix the recent hole in Windows? Do they have the
> Windows source & are they allowed to create their own fixes? Ditto for
WinDVD
> etc.etc.
>
> If windows app makers are responsible for holes in their apps then why are
> Linux app makers different? The recent prob with GAIM was with 0.75. The
most
> recent Windows GAIM is the same version. Ergo if GAIM on Linux is a Linux
> problem, then if any IHV bundles up/pre-installs GAIM on Windows then it's
a
> Windows hole.
>
> Ditto say DB2. If IBM sells you a server as a bundle complete with Win2KS
& DB2
> or Turbo Linux & DB2 then if there is a DB2 hole it would seem that you'd
have
> a DB2 hole if you chose Win2K but a linux hole if you chose turbo linux.
>
> G*d alone knows what the case might be if an IHV bundled Windows & cygwin.
>
> Adam
>

--- BBBS/NT v4.01 Flag-5