[Info-vax] OpenSSL CSWS-2.2-1

[Simon Clubley]

On 2019-05-16, superseth369 at gmail.com <superseth369 at gmail.com> wrote:
> On Sunday, April 7, 2019 at 8:17:36 PM UTC-4, Bill Gunshannon wrote:
>
>> 
>> Even in this race is a loser.
>> Example:  There are 100 companies running HPE VMS.
>>            50 move to VSI VMS.
>>            50 move to Linux or Windows.
>> 
>> Even, right?
>> 
>
> WRONG! IF THEY LOOK AT THE CERT COUNTS FROM THE LAST 20 YEARS
> OPENVMS 19 LINUX 2205 I BET IT WILL BE 100 TO VMS 0 TO LINUX.
>

Comparing CVE counts for different operating systems means absolutely
nothing unless (at an absolute minimum):

1) There are a comparable number of security researchers looking at each
operating system being compared as well as spending the same amount
of effort looking for flaws in each operating system and

2) There is a comparable range of software installed on all the
operating systems being compared.

Neither of these are true when comparing Linux to VMS.

BTW Bob, the ASR 33 is no longer the standard input device in use
these days and it is ok to include lower case in your replies.

Simon.

-- 
Simon Clubley, clubley at remove_me.eisner.decus.org-Earth.UFP
Microsoft: Bringing you 1980s technology to a 21st century world