No mercy.
Coming soon: Tha SYNDICATE.
101 things that the Mozilla browser can do that Internet Explorer cannot.
Posted on 11/15/2002 8:18:56 AM PST by AdA$tra
According to a report published November 12 by Aberdeen Group^, "Security advisories for open source and Linux software accounted for 16 out of the 29 security advisories - about one of every two advisories - published for the first 10 months of 2002 by Cert (www.cert.org^, Computer Emergency Response Team)."
Aberdeen says Microsoft products have had no new virus or trojan horse advisories in the first 10 months of 2002, while Unix, Linux, and Open Source software went from one in 2001 to two in the first 10 months of 2002, that in the same 2002 time period "networking equipment" (operating system unspecified) had six advisories, and Mac OSX had four.
In other words, all except Microsoft had increases in reported vulnerabilities this year.
"Contrary to popular misperception," the report says, "Microsoft does not have the worst track record when it comes to security vulnerabilities. Also contrary to popular wisdom, Unix- and Linux-based systems are just as vulnerable to viruses, Trojan horses, and worms. Furthermore, Apple's products are now just as vulnerable, now that it is fielding an operating system with embedded Internet protocols and Unix utilities. Lastly, the incorporation of open source software in routers, Web server software, firewalls, databases, Internet chat software, and security software is turning most Internet-aware computing devices and applications into possible infectious carriers."
The report lauds Microsoft for having overhauled its development process in an attempt to fix security problems, and says, "Perhaps it is time for some of the suppliers of open source and Linux software to take similar measures."
(You'll need to register with Aberdeen to read the rest of the report -- it's one of their free ones -- but I believe I've covered the Linux-relevant high points here.)
And yet, here I sit with my virus-free, trojan-free Linux box, receiving tons of viruses and trojans from Windows users (that don't affect me), watching news item after news item about sites run on Windows servers getting defaced and broken into.
According to what I've heard from my many sysadmin and network security specialist friends, no OS or network-connected software is secure unless it's administered properly and security patches are applied as soon as they are available.
And then, after I started writing this story, a ZDNet article with the headline Linux utility site hacked, infected^ came across my monitor, and I started wondering, "What if these Aberdeen people are right? What if this isn't just Microsoft-sponsored nonsense?"
A look at CERT's 2002 Advisories^ and Incident Notes^ pages was not overly reassuring. Yes, I saw some Microsoft vulnerabilities there that Aberdeen apparently missed, and one for Oracle.
I also think we have enough Microsoft viruses left over from last year that we don't need any new ones this year.
But the real issue is that we all need to be more security-conscious. The Aberdeen report points out that the system with the most reported vulnerabilities can change from year to year, but that the overall vulnerability and incident trend is up. Way up. In other words, whatever operating systems we use, we all need to watch out more for security flaws than we have in the past, and work harder to protect ourselves from them.
No mercy.
Coming soon: Tha SYNDICATE.
101 things that the Mozilla browser can do that Internet Explorer cannot.
The hole has been there for six years! Can't we get the granola-eating, sandal-wearing, free-software-writing hippies to fix that? :o)
That strange, half my systems run Linux and half run Windows, and it's the Windows systems that suck for me.
I guess it all depends on the meaning of the word "suck".
Microsoft Corp. is responding to a report published last week by London-based security intelligence firm mi2g Ltd. that claimed the Apple Macintosh (news - web sites) operating system and certain varieties of Unix (news - web sites) are less vulnerable to attack than the popular Windows and Linux (news - web sites) operating systems.
The report, a summary of which was released to the public by mi2g, attributed 44 percent of the software vulnerabilities announced in the first 10 months of 2002 to Microsoft's Windows operating system and 19 percent to the open source Linux OS.
By comparison, the company attributed only 1.9 percent to Apple Computer Inc.'s Macintosh OS.
This above posted article claims *no* MS issues this year!? What an amazing lie. Tell me this media spin isn't being swallowed whole by FReepers? Is FReeRepublic becoming an MS propaganda site, now?
This kind of thing does for MS what the Wellstone funeral did for the D party. When MS falsifies a benchmark, or pays for a false report, developers notice. We do not forget.
You wouldn't happen to know where large chunks of W2K, like the TCP/IP stack, came from, now would you?
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.