There is a little bit of
talk about some "amazing" statistics that
Secunia is releasing on its web site. Apparently we can now see how secure, or un-secure, an OS is by the number of advisories that are released. This seems like a great way to raise some press about a company. Simply publish some statistics that disprove popular perception and watch the profile of your company rise.
Everyone knows how reliable statistics are, given how easy they are to manipulate. For instance, the article in question,
Mac OS X security myth exposed, suggests "Windows is more secure than you think, and Mac OS X is worse than you ever imagined" all based on the number of advisories for Windows XP, 46, and OS X, 36.
However, before you go out an replace your PowerBook, consider
this slant on the figures. Microsoft's
list of products in its Advisories section totals 154, and Apple's product
list totals 11. If I had time I'd go in and count all the Microsoft advisories to compare them to Apple's
grand total of 54, but the list is just too long. Being a bit more realistic, a Windows XP system, with Direct X 9, Media Player 9, Internet Explorer 6, Office 2003 and Outlook 2003 had 133 advisories. Mac OS X with Quick Time, iTunes, Safari and OpenOffice had 46. I could suggest from these figures, given that a user doesn't just use an OS but also the applications that sit on top, that Microsoft's products are several orders of magnitude less secure than Apple's. 289% more un-secure based on advisories.
I won't suggest that though. I'll just suggest that you should always be careful when relying on statistics.