Reading (For Dummies)

A new bug benchmark

Wow, go Microsoft. This makes me think. When comparing open and closed source software for bugs, everybody analyzes the "bug found to bug patched" time. Obviously open source wins. But why not compare "bug implemented to bug patched"? In the case of the recent HTML viewer and RPC bugs, it has been about 5 years since the bugs were implemented. We don't see that kind of undiscovered bug in an open source system...