I want to know what does Apple have to say to us, the consumer, about the "dirty dozen" list?

Question

Anybody can tell me what about the "dirty dozen" list, and our privacy using "Safari ", from Apple?

Answer 1

Here is some info about it.
http://www.thetechherald.com/article.php/201046/6428/Is-it-fair-to-judge-softwar e-based-on-reported-vulnerabilities
Bit9 said that to qualify, an application had to have a vulnerability with a CVSS score of 7-10 reported between January 1, 2010 through October 21, 2010.
When asked how many of the vulnerabilities in the list have been patched, Bit9 said they did not have those details. Harry Sverdlove, the CTO at Bit9 did comment that while the patched vs. unpatched data isn’t fully available, almost all of the NIST reported vulnerabilities have been patched.
For us, the more interesting view is to look at how many of those Apple-based vulnerabilities sill exist, and how long did it take Apple to fix them.
IBM looked at the number of reported vulnerabilities in the first half of 2010, and then graded the vendor on their patch response. According to IBM’s figures, Google, Apple, Adobe, Mozilla, and Microsoft scored well when it came to addressing issues. Very well.
By the end of the first half of 2010, Apple and Google patched 100-percent of the high risk vulnerabilities reported. Adobe had patched 98-percent of them, while Microsoftpatched 93 percent, and Mozilla had patched 96-percent.
So if, as the IBM report shows, the vendors are quick to patch, once again we have to ask if a high number of reported vulnerabilities means that a given vendor’s software is riddled with issues and should be avoided. The answer is no.
Software will always have flaws. It isn’t the number of problems that matters. It is how long a vendor takes to address and fix those problems that counts. According to IBM, there have been a record number of vulnerability disclosures this year.
At the same time, the vendors hardest hit by those disclosures, the same vendors on the Bit9’s Dirty Dozen, fixed things the fastest. So to some, it is worth the risk to use the software listed in the Dirty Dozen, as the vendors use both proactive and reactive measures when it comes to security.