To read all comments associated with this story, please click here.
IMHO the "pbkac" theory never holds water when applied to security.
Anything designed for the "average" user (and not limited to people that are trained and/or knowledgeable and/or experienced) needs to have security systems designed for the average user.
You can complain that an OS designed for trained users is marketted towards average users. You can complain that an OS designed for average users doesn't have enough security for it's intended market. You can't blame average users when they use an OS marketted towards average users if the security isn't designed for average users, which is what you're doing by claiming it's a "pbkac".
The real question would be, if distributions like Ubuntu aren't secure out of the box, then why aren't they?
That, considering the minuscule installed base of users that don't understand security running Linux desktops, probably isn't the case. More likely, this problem is stemming from compromised web servers running Linux, which weren't secured properly.
Actually, no. The problem that created botnets is the lax security and the monoculture of Windows. It is Windows machines after all that are the bots.
Even if it is true that Linux machines are being used for botnet command and control (debatable), that is almost irrelevant. There would be no bots to command or control without Windows.





Member since:
2006-01-23
With the number of new users streaming into Linux thanks to easy-to-use distros like Ubuntu, there are many users who do not have the requisite knowledge to adequately secure their computers--maybe even believing, albeit falsely, that Linux is inherently safe out of the box.
As more Linux systems are brought on line it is not surprising to see the number of compromised Linux boxes increase.
This does not point to a weakness of Linux per se; it points out the problem that many users are not doing enough to secure their computers.
Linux' track record still stands as a monument to the security and power of open source.
Edited 2007-10-07 23:24