Month of Apple Bugs… Does it Matter?

Posted by Ed in Analysis on Jan 5, 2007

So, you’ve probably noticed that the month of Apple bugs is going on even as we speak… Much like the month of browser bugs, the month of kernel bugs, and the month of Oracle bugs (which kinda petered out), the plan is to post a full month’s worth of bugs impacting Apple at a rate of one per day.

Now I saw that this Apple bug thing was going on and I didn’t write about it ’cause I figured “ho-hum”… and then came the wall of controversy. Thomas Ptacek weighed in early, saying that there’s no reason for a “bug a day” release schedule.

HD Moore to Dark Reading:

Search

http://www.eeye.com Ross Brown

I’ve gotten a couple of calls from the press and their general take on it is, “Yeah, we know Apple’s not exactly honest about security exposures in the Mac, but who expects a vendor to be honest? Moreover, who cares, given their limited installed base? This is like arguing about the relative crash worthiness of a Honda Civic (used by millions) vs. Jet packs (used by a few people)”

And I generally agree with the sentiment. It’s not that Mac is more secure, it’s that nobody cares due to their market share. And I own three Macs. I’m at work, so I’m writing this on a Thinkpad. I can’t swing a dead cat in this office without hitting a PC, but no Macs to be found.

http://www.angryfrozenhead.com/articles/Jan2007/TwoCities.html robert

The Month Of Apple Bugs is a very good idea, and very necessary

Smug

“And I own three Macs” nuff said.

http://security-protocols.com tom ferris

Ross:

“And I own three Macs. I’m at work, so I’m writing this on a Thinkpad. I can’t swing a dead cat in this office without hitting a PC, but no Macs to be found.”

That always seemed to be the eEye attitude that Mac’s were for girls or something. I remember when I worked for eEye I expressed some interest in finding flaws in OS X, and was immediately shot down that I was stupid or something. Now, I know that eEye products are only for Win32 but still. Also, who cares if the install base is low, its growing and growing fast. Why not look for them now..?