Firefox 2.x and 3.x the Most Vulnerable Software on Windows in 2008

My main work is removing virus and trojan infections for my customers computers.
I can say for certain that most infections come from IE users.
A combination of a reasonable, up to date antivirus program and Firefox produces the least amount of infections. If Firefox is more vulnerable than IE it must be the case that rogue developers just aren't bothering to write exploits for it.

Rofl... as we can see from this week's IE flaw.. the problems in IE could be unlimited.

We can find and patch faster in Firefox - as it's open source.

IE is totally unknown.. see how long this cerrent exploit has been workable in IE?

My true concern is that IE has massive security vulnerabilities that aren't even known to MS... and we can't see them to fix.. but attackers can stumble across them...

...the other problem is the true effect of a 'critical' problem - how is this defined here? Every IE critical IE exploit allows a remote attacker to compromise the entire system as it is tied into the kernel so deeply.

And really, for developers of software running on a proprietary OS to find vulnerabilities when they can't see the underlying code to develop for it! Lol.. you'd think MS themselves would be able to write code that didn't have such dangerous exploits - with the amount of customers money spend on development etc?

Finally, a more scientific consideration might have considered the rate of development of the browsers - the fact that the changes embodied in FF 2.x in it's lifetime - added functionality - vastly outweigh IE in, eg. 6...

..so, let MS tell us how many lines of code were in their work on any version and we can compare bug-to-code lines - that would be fair...

..hey we can look... oh yeah, we can't see remember, IE is proprietary :/

Lol.. simple: get Linux... problem solved! No viruses, no deliverable payload! :))))

The above poster is 100% correct, I've done the same job, replacing IE use with FF removes 90% of problems.... so....

...I think you'll find out that exploits aren't exploited on FF at the same rate as IE - as they're identified and patched faster due to it's open-source nature.

This leaves you with a more secure product in the same time of development. . Case closed methinks :)

Marius, **please** do some more investigation into software (browser) development *before* posting and gives us a really interesting piece of investigative journalism!

Yours respectfully,

Joe :)

Notice that the puiblisher of this list, Bit9, has a commercial interest in selling software that control what applications end-users may install on corporate computers, and therefore they have an interest in making people believe that their products is more necessary than they in fact may be.