Windows vulnerability vs Linux vulnerability [Re: Would a firewall prevent Sasser worm?]
From: Rowland (arero68.IS.A.SPAMMER_at_hanmail.net)
Date: Thu, 06 May 2004 10:20:40 -0400
>The above is correct if the only OS tried is windows. If you ever tried
>anything else you might experience that there exists thinks like secure
>OS designed to be as safe as possible even in in-experienced users hands.
>The fact that "proffessional admins" has been running on MS-classes and
>has their machines infected while Linux admins is self-educated and has
>no such infectiions might give you a clue ?
>>Lars M. Hansen
>>(replace 'badnews' with 'news' in e-mail address)
1. Windows has far more security problems than Linux or other Unix
variants. Microsoft' defenders have about half a dozen excuses for this
and none of them impress me.
2. Linux and other Linux variants have many vulnerabilities. Fewer than
Microsoft's operating systems, but still too many.
3. The majority of Linux/Unix vulnerabilities have to do with buffer
overflows. So do a large chunk of Windows vulnerabilities. So there
are two problems here: Microsoft, and buffer overflows.
4. The solutions to both these problems, are simple, but not easy. The
solution to the Microsoft problem is to migrate to non-Microsoft
software. That's best done gradually. Start by running open source or
Java software on a WIndows OS, get comfortable with that, and only then
switch to a non-Windows OS. The solution to buffer overflows is avoid
running software that's been written in C or C++. C and C++ are what
enable buffer overflows. They're a pointer-based family of languages,
and stray pointers are behind all buffer overflows. The trouble is,
nearly all the high performance Internet software out there is in C.
The Microsoft monoculture has got to go. And C/C++ have got to go, or
at least be used for far fewer things.
Anyway, that's my opinion.
-- Spammers: firstname.lastname@example.org email@example.com firstname.lastname@example.org email@example.com firstname.lastname@example.org email@example.com firstname.lastname@example.org email@example.com firstname.lastname@example.org email@example.com firstname.lastname@example.org Check out my Java, SQL and Python samples at http://rowland.blcss.com/ For sale: Unique and energy efficient hobbit home in New Hampshire: http://www.angelfire.com/ego/rowland/mm.index.html