He said if he 'wanted' to compile things he would run Fedora. He did
not
say he could not.
Sorry, I'm not buying it. Compiling and installing the patched version
of BIND took like 4 minutes. Yes, Apple could have moved faster.
However, it's not such a big earth shattering thing that he has to do
it himself.
If Apple want's to repackage open source applications and package
them as
part of their server OS they should take responsibility for those
applications; that is why people pay Apple instead of running Fedora
or
freeBSD.
That's partially why people might choose Apple -- another might be the
feature set, interface, etc. At any rate, I would not expect to run a
server in a production environment without compiling and installing
some components through its life cycle.
Also, the key there is "part of their server OS". There's a lot more
going on then just dumping software into the channel.
It is an issue that Apple, with more than enough time to do so, has
elected to not patch their client or server products.
Well, I'm sure the real story will come out in the wash. I'm not so
sure it's going to boil down to "elected".
My biggest point would be: Has anyone contacted Apple and said "Hey,
you're screwing up by not posting a Security Update". Like, you know,
the power of the consumer.