Linux is very different issue IMO. 1. Customized compilation result different address offsets thus an exploit is not very generic portable. 2. Everyone can do

Linux is very different issue IMO. 1. Customized compilation result different address offsets thus an exploit is not very generic portable. 2. Everyone can do a static vulnerability scan for Linux source code, so if there is a hole it's more likely to be well known in the industry Recently series of events with google.cn suggests that this is just a test ground for industrialized 0day farming for closed source software as a strategic weapon.