Is Firefox the Most Secure Web Browser?--Part 3
Microsoft's Jeff Jones discusses Mozilla's Mike Shaver's point that "You Can Only Count What The Vendor Wants You to See."
There is also the other main point raised in in Counting Still Easy... "More fixes means less security?"—which seems to say that fixing more vulnerabilities in 2006 means Mozilla was doing a better job at security. If so, then I would expect to see a downward trend in Firefox vulnerabilities in 2007 and 2008 (since they were just more rigorous in finding and fixing in 2006). If, on the other hand, we find that the trend is not downward, then I think it calls that line of argument into question.
Join me for the next part in this series, where I move away from older 2006 data and arguments and begin to look at how the threat and vulnerability landscape has evolved in 2007 and 2008 and try to discover possible answers to these questions.
security



