Page 1 of 1

"Study: Linux' Security Problems Outstrip Microsoft's&q

Posted: 2002-11-15 09:06pm
by Uraniun235

Posted: 2002-11-15 09:30pm
by Pu-239
That study is flawed. Read the posts below. Also closed source software is likely to have even more bugs, but since no one goes over the code, no one knows about it.

Posted: 2002-11-15 09:37pm
by Mike_6002
Anything is more secure than Windows expect Voyager which is less secure than a 7-11 like to see a slicer play with Voyager

Posted: 2002-11-15 09:44pm
by Uraniun235
I wonder if MS paid for the report.

Re: "Study: Linux' Security Problems Outstrip Microsoft

Posted: 2002-11-15 10:56pm
by Crayz9000
Uraniun235 wrote:So says this article.

http://www.newsfactor.com/perl/story/19996.html
Sounds like they're on a crusade against UNIX.

Posted: 2002-11-15 11:18pm
by Mr Bean
Open Software by Defintion is less sequre as the code base its built on is freely aviable for Hackers/Crackers to Study while Closed Systems tend to be more secure by defintion due to the fact the code is not easly aviable nor easy to study


That said, Defintion rarley makes it into Pratice

Posted: 2002-11-15 11:35pm
by Singular Quartet
Mr Bean wrote:Open Software by Defintion is less sequre as the code base its built on is freely aviable for Hackers/Crackers to Study while Closed Systems tend to be more secure by defintion due to the fact the code is not easly aviable nor easy to study


That said, Defintion rarley makes it into Pratice
What if forgets to mention is that most hackers use Open Source software, and generally contribute to such projects, fixing security holes that they find.

Posted: 2002-11-15 11:58pm
by Mr Bean
What if forgets to mention is that most hackers use Open Source software, and generally contribute to such projects, fixing security holes that they find

Gee look somone who forgot to read my post even though they quoted it

As I said, Defintion aka Theroy rarley makes it into Practive, you seem to be under the delisuion that I think it does

Try reading a bit more carefuly next time

Posted: 2002-11-16 12:44am
by Darth Wong
The people who wrote the study are idiots. Five points:
  1. They are weighing Microsoft products (OS, office suite) against all open source products from all corners (OS, many office suites, countless utilities and applications, etc).
  2. Typical speed of response from Microsoft vs open-source community is much different.
  3. Microsoft sometimes refuses to fix certain vulnerabilities at all, deciding unilaterally that they're not important enough to fix (or better yet, they fix them only in newer versions, and then tell people with older versions to buy the new versions or else).
  4. Microsoft vulnerabilities are typically discovered reactively, after they have already been taken advantage of, and widespread damage has already occurred. Large numbers of open-source vulnerabilities are discovered proactively, during code audits.
  5. They are basing their conclusions upon rates of advisory releases rather than rates of successful hacks, intrusions, and website defacements (in effect, ignoring end-results).
Every few months, another M$-funded operation puts out the same kind of moronic "news report". And the rebuttals are always the same.

Posted: 2002-11-16 02:37am
by Crayz9000
Darth Wong wrote:The people who wrote the study are idiots.
Microsoft sometimes refuses to fix certain vulnerabilities at all, deciding unilaterally that they're not important enough to fix (or better yet, they fix them only in newer versions, and then tell people with older versions to buy the new versions or else).
If you want an example of that, Microsoft claimed to have fixed the MIME header vulnerability of Outlook Express in version 6.0. However, my dad, running Outlook 6 on Windows 98, recently got infected with a virus that spreads using that bug (his only mistake was clicking on the message in the first place; he didn't run anything on purpose).

So much for their bug "fixes."

Posted: 2002-11-16 03:34am
by Enlightenment
Crayz9000 wrote:(his only mistake was clicking on the message in the first place; he didn't run anything on purpose).
Correction. His only mistake was using a Microsoft email client with known security holes large enough to hide the Death Star. Get him to use something--anything--else before the next round of Outlook viruses get loose.

Posted: 2002-11-16 03:35am
by Darth Wong
KMail rules.

Posted: 2002-11-16 03:39am
by The Duchess of Zeon
Darth Wong wrote:KMail rules.
I've been using AOL since the mid 90s, and I've never actually had a virus do anything nasty to my computer. The fact that microsoft web products are apparently more vulnerable than AOL tells you something.

Posted: 2002-11-16 03:41am
by Crayz9000
Enlightenment wrote:Correction. His only mistake was using a Microsoft email client with known security holes large enough to hide the Death Star. Get him to use something--anything--else before the next round of Outlook viruses get loose.
He's running Mozilla on Linux now :)

The only reason he was using Outlook was because he wanted to access Hotmail without having to use their clumsy web interface. He used another mail client for everything else.

Posted: 2002-11-16 03:53am
by Einhander Sn0m4n
Crayz9000 wrote:
Enlightenment wrote:Correction. His only mistake was using a Microsoft email client with known security holes large enough to hide the Death Star. Get him to use something--anything--else before the next round of Outlook viruses get loose.
He's running Mozilla on Linux now :)

The only reason he was using Outlook was because he wanted to access Hotmail without having to use their clumsy web interface. He used another mail client for everything else.
W00000000000T! Hmm got any Free Linux sites? I'm smelling Dualboot in this computer's future...

Posted: 2002-11-16 11:29am
by Crayz9000
Einhander Sn0m4n wrote:W00000000000T! Hmm got any Free Linux sites? I'm smelling Dualboot in this computer's future...
http://www.linux-mandrake.com

Mandrake 9 is out, and includes Mozilla 1.1 (I think). It also has KDE3, OpenOffice 1.0.1, and a bunch of other stuff.

Don't worry about the business with joining the Mandrake Club, just click the "Already a member or planning on becoming one" link to go to the mirror page.

RedHat 8.0 is also out, though from what I've heard from RedHat fans it might be better to get 7.3.