Comments on: Students uncover dozens of Unix software flaws

To make the grade, students at the University of Illinois found 44 security flaws in various Unix applications.

Not a Surprise

Lets see how long it will take before a patch is out? then we can compare with MS Patch release cycle. More than likely it will take more than twice the time MS takes to release the patch.

[JuggerNaut]

Windows patches not as quick!

Linux patches are almost handed out daily if there are patches
to be made. With Microsoft, you might get a patch a month
after the fact, maybe sooner if Microsoft feels it's necessary.

In short, updates for Linux are more thorough seamless than for
Windows.

[Steven N]

It took MS 3 months to fix a config error...

Read the article:

http://news.com.com/Microsoft+posts+critical+configuration+patch/2100-1002_3-5494557.html?tag=cd.top

3 months for fixing a config error in the firewall software. If I would take this long to fix a hole in our corporate firewall, I would be fired straight away...

Finding bugs

Seems to me the easiest way to find bugs in code is simply to grep for strcpy and sprintf and check that code.

[CoachWT]

The truth is out - Windows is more secure

Amazing this article even made the news....
If this happened to Microsoft it would be Headline News everywhere.

[Llib Setag]

READ THE ARTICLE AGAIN!

The article CLEARLY states that of the 900+ flaws found in the UNIX code,that number was WAY LOWER than commercial software codes...(i.e. WINDOWS)
The Internet runs on UNIX/Java/BSD for a reason.
Pull your head out of Citizen Gates black hole.
-Eyes wide open in Seattle-
[Unix/Mac/Win user]

[David Arbogast]

Hang on now...

If you want to be fair, then be fair. Somebody may have suggested that more bugs exist in commercial software packages, but there is no mention of *which* packages, and there is no official count of flaws or record of identification. Sounds to me like somebody was shooting their mouth without having data to back up their claims. What is known, is how many flaws were found in UNIX. Nothing more.

43 left

Only 43 left !

The reported security problem has been fixed for the 2fax program. The new version of the program is available at http://www.atbas.org/2fax

Will fix the windows version later :)