In general, Linux has so many people looking at its code, that the CVE and driver issues will be addressed with higher frequency. Thus, FreeBSD/OpenBSD lower 0-day incident rates tend to be illusionary, as the security incidents in fringe OS always have lower discovery probability. =3
>When I send an email that isn’t bounced back, or better yet, get an auto reply with a ticket number, I’m a lot more certain it’s going to get read.
An "auto reply with a ticket number" is not a feature of email, it is something that someone built that could just as easily be attached to a webform. Plenty of webforms work that way, I have personally built some in my career.
>> I would think email is a lot easier than a webform.
> why
Because email is a well-honed tool with lots of excellent implementations. You've got formatting, attachments, a text-entry region bigger than a peephole, etc.
A "contact us" webform is a crappy tool, usually quickly thrown together, that probably just sends an email anyway.
You are comparing 'excellent implementations' with 'crappy tool'. Technically, both can be equally good.
I would not prefer email for multiple reasons:
- First, you always need an account to send one, and therefore have to decide which identity you want to attach to a communication. With a form, you sometimes can skip that decision. However, I suspect that in this case, this argument does not apply, because you probably have to attach an identity either way.
- However, email is one of the most unreliable protocols due to its poor solutions for handling spam. For example, if someone from outside my organisation tries to contact me, I can never be sure whether the email reaches me, due to various factors in spam detection. Sometimes an email is delivered to my mailbox, sometimes to the spam folder, and sometimes it just gets lost in transmission. I had even cases where I sent an email to two people in the same organization, and one would receive it and the other would not, even though they were using the same email server.
I might be wrong but I guess it might also be easier for leadership to put pressure and influence personal communications than to avoid processing official reportings from their own website.
An article reading "they ignored emails from amnesty international" sounds different from "they are not acting on this report made on their official website"
reply