To view parent comment, click here.
To read all comments associated with this story, please click here.
> source please?
I told you the source. Secunia.
"But the CERT results reflect how Windows security flaws tend to be far more frequently severe than those of Linux, which echoes our conclusions"
No, I did read that. Which is why I re-ran the searches and searched for only vulnerabilities classified as highly critical and extremely critical. Even after doing that, Windows came out with only 141 compared compared to Linux's 884. That pretty much rejects the findings of the article you quoted because I only recorded very critical vulnerabilties when I obtained those numbers.
dearest IP: 24.118.179
selective reading won't get you very far. you also forgot to read this:
"Perhaps this is why, according to Netcraft, 47 of the top 50 web sites with the longest running uptime (times between reboots) run Apache. [2] None of the top 50 web sites runs Windows or Microsoft IIS. So if it is true that malicious hackers attack the most numerous software platforms, that raises the question as to why hackers are so successful at breaking into the most popular desktop software and operating system, infect 300,000 IIS servers, but are unable to do similar damage to the most popular web server and its operating systems?"
dearest IP: 81.76.38
Please tell me how uptime and hacking have any relationship to each other whatsoever? To suggest they do is a complete logical falacy. And anyone who would suggest that is either intentionally spinning the argument, or doesn't even understand logic 101.
And if you want to play that game, not one of the top 50 sites with the longest uptime is running your precious Linux either.







Member since:
You don't have to believe me. You can look it up yourself.
Oh, and just to better match CERT study you quoted, I ran the searches again, but this time only reporting the number of vulnerabilities marked "highly critical" and "extremely critical":
Linux: 884
Windows: 141
FreeBSD: 18
Solaris: 37
Even when it comes to only highly critical and extremely critical vulnerabilities, Linux is still the worst by far.
Oh. And guess what? IIS is more secure than Apache too. One again, only highly critical and extremely critical vulnerabilities:
IIS: 13
Apache: 53
But if you were really following this stuff, you would know that there hasn't been a single highly critical or extremely critical security vulnerability reported in IIS 6 for over a year. The last one was in November of 2004. The most recent one in Apache, however, was October 5th of this year.