bugtraq - RE: New Paper: More than 600 million users surf at high risk

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <DD561AEEE842D20EE03C726F@Macintosh.local>
Date: Tue, 01 Jul 2008 15:39:11 -0500
From: Paul Schmehl <pauls@...allas.edu>
To: Larry Seltzer <larry@...ryseltzer.com>,
	Stefan Frei <stefan.frei@...hzoom.net>, bugtraq@...urityfocus.com
Subject: RE: New Paper: More than 600 million users surf at high risk

--On July 1, 2008 3:31:32 PM -0400 Larry Seltzer <larry@...ryseltzer.com> 
wrote:

> From your paper:
>
>>> It is noteworthy that it has taken 19 months since the initial general
> availability of IE7 (public release October 2006) to reach 52.5%
> proliferation amongst users that navigate the Internet with Microsoft's
> Web browser. Meanwhile, 92.2% of Firefox users have migrated to FF2.
>
> Could this be due to the fact that Mozilla stops supporting, and issuing
> updates for old versions just a few months after the release of a new
> one?
>

My completely non-scientific, unsupported-by-empirical-evidence answer is 
no.  It's because people who use Firefox tend to be more aware of security 
threats and the need to keep software up to date.  It could also be (at 
least in part) because Firefox has a built-in, enabled-by-default, update 
available warning system.

Paul Schmehl (pauls@...allas.edu)
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/

Content of type "application/pkcs7-signature" skipped