Re: [SC-L] web apps are homogenous?

2010-02-25 Thread Jon McClintock
On Wed, Feb 24, 2010 at 10:46:56AM -0500, Paco Hope wrote: I don't think webness conveys any more homogeneity than, say windowsness or linuxness. What part of being a web application provides homogeneity in a way that makes patching cheaper? In a word, control. Let's compare two different

Re: [SC-L] seeking hard numbers of bug fixes...

2010-02-23 Thread Jon McClintock
On Mon, Feb 22, 2010 at 10:45:02AM -0500, Jeremy Epstein wrote: Take a look at Mary Ann Davidson's keynote at ACSAC in Dec 2009. http://www.acsac.org/2009/program/keynotes/davidson.pdf This provides a pretty good examination of the costs of patching commercial software. Has anyone done a