You know, having made a few NTexploit lists in the past, I wanted to make the point the M$ was less secure. Unfortunately the facts were against me.
You do realize that in this case the "facts" have more to do with how things are reported by the two companies.
Case in point : a typical IIS security advisory will read ... "MS06-xxx" Vulnerability in IIS whereas ones for Apache will be much more specific ... "CVE-xxx" fixed tiny little bug in some script "CVE-xxx" fixed different tiny little bug in other script I agree though that $anyOS is dangerous in the case of 'clue <= 0'. /mike. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/