August 18, 2006

Jonathan Schwartz

Chief Executive Officer and President

Sun Microsystems, Inc.

4150 Network Circle

Santa Clara, CA 95054

Dear Mr. Schwartz,

I am writing to request your assistance in resolving my service request with Sun Service.

On April 20th, I read an announcement from the Mozilla Foundation about serious security vulnerabilities in their web browser software. As Sun provides the Mozilla browser with its Solaris operating system, I immediately went to Sun's self-support portal, SunSolve, to determine whether Sun's version, SUNWmozilla, was also vulnerable. I was unable to find a current SunAlert security statement regarding SUNWmozilla. As I have support contracts with Sun, I then opened service request 64991874 via Sun's Online Service Center (OSC) requesting information about whether the potential security problems had been evaluated by Sun. Soon after opening the case, I received an e-mail from OSC notifying me that support engineer, Romesh Santhiapillai, was assigned to my case. Two weeks later, he still had not obtained Engineering's evaluation of the Mozilla advisory, a temporary patch, or a projection when fixes might be provided by Sun.

On August 16th, Sun Service released a patch addressing the April group of vulnerabilities. Unfortunately, the updated SUNWmozilla crashes when visiting Yahoo!. Will I have to wait another four months before Sun fixes this new bug?

During the May 12th 2005 NC05Q2 web chat with yourself and other Sun executives, Subodh Bapat, Vice President, Customer Network Services, stated the following:

Sun has a goal of promptly issuing SunAlerts as soon as any known security vulnerabilities are known. Appropriate security fixes/patches are issued promptly as soon as they are available. We follow this policy this policy for all products.

I quoted those words in a 2005 letter to Don Grantham, Executive Vice President, Sun Services, about a similar issue regarding JDS/Solaris security vulnerabilities. While I believe his intervention was helpful in getting that case resolved, he apparently was unable to implement needed structural reforms. I hope that you will have better success in assuring that the Engineering and Services team can meet this basic customer service expectation.

Thank you.

John Groenveld

Personal Appeal to Jonathan Schwartz 2006-08-18 Jonathan Schwartz NC05Q3 Webchat 2005-09-15
Personal Appeal to Don Grantham 2005-05-31 Jonathan Schwartz NC05Q2 Webchat 2005-05-12 Personal Appeal to Kim Jones 2004-12-08
Scott McNealy NC04Q4 Webchat 2004-11-15 Scott McNealy NC04Q3 Webchat 2004-09-21 Scott McNealy NC04Q2 Webchat 2004-06-01
Email to Jonathan Schwartz 2003-10-21 Java Desktop Sales Seminar 2003-12-11 Email from Curtis Sasaki 2003-10-20
Reply to Curtis Sasaki 2003-10-20 Second Email from Curtis Sasaki 2003-10-19 Reply to Curtis Sasaki 2003-10-19
Email from Curtis Sasaki 2003-10-19 Reply to Curtis Sasaki 2003-10-16 Email from Curtis Sasaki 2003-10-15
Promises Advertisement Personal Appeal to Judith Estrin 2003-09-04 Personal Appeal to Curtis Sasaki 2003-05-23
Letter to Judith Estrin 2003-02-12 Reply to John Loiacono 2002-09-07 Email from John Loiacono 2002-09-04
2002-09-03 Ad Response from Patricia Sueltz to 2002-03-21 Letter to the Board 2002-05-21 Letter to Neil Knox 2002-05-01
Personal Appeal to John Loiacono 2002-04-17 Personal Appeal to Bill Joy 2002-04-15 Personal Appeal to Thomas Kreidler 2002-04-08
Letter to the Board of Directors 2002-03-21 Personal Appeal to Ed Zander 2002-03-18 Letter to Scott McNealy 2002-01-10
News Clippings Community Forums
Signatories Sign the Letter Statistics
Powered by... Advertisements
Donate Expenses Credits