OSNews: http://www.osnews.com/story/19683/Study_70_Percent_Say_Red_Hat_More_Secure_Than_Windows Exploring the Future of Computing en-us Copyright 2001-2009, David Adams adam+nospam@osnews.com Tue, 10 Nov 2009 05:53:56 GMT http://www.osnews.com/images/osnews.gif OSNews.com http://www.osnews.com Judge a book by its cover? Of course! http://osnews.com/thread?311503 http://osnews.com/thread?311503 So I'm supposed to trust some obscure research group whose website doesn't even render correctly in IE or Firefox? And you have to register just to look at their sample 'research'? What is this world coming to? Fri, 25 Apr 2008 21:14:00 GMT donotreply@osnews.com (jayson.knight) Comments In Addition... http://osnews.com/thread?311504 http://osnews.com/thread?311504 RedHat is less-filling, lower-fat, and greener. However, if you experience an exception lasting longer than 4 hours, you should take your computer to the ER.

For $1000, I'll send you the stats to confirm the above! Fri, 25 Apr 2008 21:17:00 GMT donotreply@osnews.com (fretinator) Comments RE: Judge a book by its cover? Of course! http://osnews.com/thread?311510 http://osnews.com/thread?311510 It rendered fine for me in Firefox, and to be honest, I think it rendered properly for you too. It was just that there was hardly any content on the site, that would make anyone think their browser was not working !

The ARS report... well, I read that article, I am not prepared to pay $1000 for 12 pages... EVER. The ARS article told me what I was expecting to read, management think RedHat is more secure than Windows, whoopdeedoo, it took them long enough.

What is puzzling though, is, why the 30% who think Windows is more secure still have a job ? Fri, 25 Apr 2008 21:35:00 GMT donotreply@osnews.com (raver31) Comments Lies, Damned Lies, and Statistics... http://osnews.com/thread?311511 http://osnews.com/thread?311511 Until there's actual data published, this report is worse than useless. Fri, 25 Apr 2008 21:42:00 GMT donotreply@osnews.com (tomcat) Comments RE: Lies, Damned Lies, and Statistics... http://osnews.com/thread?311532 http://osnews.com/thread?311532 Something usefull for RHEL users :
http://www.redhatmagazine.com/2008/02/26/risk-report-three-years-of... Fri, 25 Apr 2008 23:18:00 GMT donotreply@osnews.com (superman) Comments $1000? http://osnews.com/thread?311537 http://osnews.com/thread?311537 That's really in the spirit of free information Fri, 25 Apr 2008 23:46:00 GMT donotreply@osnews.com (mdemonic) Comments RE[2]: Judge a book by its cover? Of course! http://osnews.com/thread?311582 http://osnews.com/thread?311582
The ARS article told me what I was expecting to read, management think RedHat is more secure than Windows, whoopdeedoo, it took them long enough. What is puzzling though, is, why the 30% who think Windows is more secure still have a job ?


LOOL! That cracked me up! Awesome just awesome! I use Windows XP x64 to be precise but I agree with you 100% Sat, 26 Apr 2008 18:52:00 GMT donotreply@osnews.com (suryad) Comments RE[2]: Judge a book by its cover? Of course! http://osnews.com/thread?311645 http://osnews.com/thread?311645 The good thing about you raver is that at least you don't try to hide the fact that you are a fanboy:) Sun, 27 Apr 2008 17:58:00 GMT donotreply@osnews.com (CrazyDude1) Comments RE[3]: Judge a book by its cover? Of course! http://osnews.com/thread?311659 http://osnews.com/thread?311659 I haven't bothered yet to open the link ;) but from experience, there are security issues with both Linux and Windows.
Linux is full of local privileges escalation bugs.
Windows also has some vulnerabilities that can be exploited remotely. Another issue with windows is that a lot of popular applications like Windows Media player have some bugs (buffer overruns) that can be exploited to crash applications and cause data loss. Sun, 27 Apr 2008 20:51:00 GMT donotreply@osnews.com (hussam) Comments RE[4]: Judge a book by its cover? Of course! http://osnews.com/thread?311693 http://osnews.com/thread?311693
Another issue with windows is that a lot of popular applications like Windows Media player have some bugs (buffer overruns) that can be exploited to crash applications and cause data loss.


This is true in linux too, with remote code execution in VLC, MPlayer, etc.
http://secunia.com/advisories/29878/
http://secunia.com/advisories/29503/
http://secunia.com/advisories/29122/

MPlayer "sdpplin_parse()" Integer Overflow Vulnerability 2008-03-26

MPlayer Multiple Vulnerabilities 2008-02-05

MPlayer CDDB Parsing Buffer Overflows 2007-06-06

MPlayer Two Buffer Overflow Vulnerabilities 2007-03-13

MPlayer RTSP Stream Buffer Overflow Vulnerability 2007-03-01

MPlayer FFmpeg Multiple Buffer Overflow Vulnerabilities 2006-09-29

MPlayer AVI "indx" Chunk and ASF Handling Vulnerabilities 2006-03-29

MPlayer ASF File Parsing Integer Overflow Vulnerabilities 2006-02-07

mplayer "strf" Header Memory Corruption Vulnerability 2005-08-26

MPlayer RTSP and MMST Streams Buffer Overflow Vulnerabilities 2005-04-20

MPlayer Multiple Vulnerabilities 2004-12-17

MPlayer GUI Filename Handling Buffer Overflow Vulnerability 2004-06-29

MPlayer and xine-lib RTSP Handling Vulnerabilities 2004-04-30

MPlayer HTTP Location Header Parsing Heap Overflow Vulnerability 2004-03-31

MPlayer ASX Streaming Buffer Overflow Vulnerability 2003-09-26

http://secunia.com/search/?search=mplayer

and more linux's media playersEdited 2008-04-28 09:15 UTC Mon, 28 Apr 2008 09:12:00 GMT donotreply@osnews.com (casuto) Comments RE[5]: Judge a book by its cover? Of course! http://osnews.com/thread?311704 http://osnews.com/thread?311704 Can you please send me the vulnerabilities list for totem-gstreamer? ;) Mon, 28 Apr 2008 11:45:00 GMT donotreply@osnews.com (xsun) Comments RE[6]: Judge a book by its cover? Of course! http://osnews.com/thread?311851 http://osnews.com/thread?311851 lol,
you do realize some of us use both xine-lib and gstreamer on the same linux installation. ;)

I, for example, use rhythmbox (gstreamer) and totem-xine. Tue, 29 Apr 2008 07:44:00 GMT donotreply@osnews.com (hussam) Comments