New IE bug affects SP2 and no patch

[PrntRhd]

There is another bug in IE reported to MS but no patch. MS is averaging 132 days to patch bugs reported to it.
http://www.informationweek.com/story/showArticle.jhtml;jsessionid=4JGQ2KFJHVSJKQSNDBGCK H0CJUMEKJVN?articleID=170704182

Now what is Symantec talking about, they say Firefox is less secure than IE?

[Sempron]

"In August, it fixed three bugs in the browser, and since the first of the year, has patched IE five out of nine months."

Now what is Symantec talking about, they say Firefox is less secure than IE?
My guess, some kind of kick backs or royalties for vouching for MS.

[PrntRhd]

I found a link for the Symantec report:
http://news.zdnet.com/2100-1009_22-5873273.html?tag=zdfd.newsfeed

Symantec admitted that "at the time of writing, no widespread exploitation of any browser except Microsoft Internet Explorer has occurred," but added that it "expects this to change as alternative browsers become increasingly widely deployed."

[pop pop]

Well, duh.

I have to be honest and admit there is an element of security through obscurity using alternative browsers, email clients, OS's and such. The fact is though that when vulnerabilities are identified in FireFox, they get patched fast. Not so with M$ and Internet Exploder.

I think the implicit message in what Symantec says is important. They don't say "if alternate browsers become increasingly deployed", they say "as". ;)

Translation: The tide is going out on IE, even if it's doing so slowly.