[70206] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Worms versus Bots

daemon@ATHENA.MIT.EDU (Jeff McAdams)
Wed May 5 07:36:46 2004

Date: Wed, 05 May 2004 07:36:03 -0400
From: Jeff McAdams <jeffm@iglou.com>
To: Matthew Crocker <matthew@crocker.com>
Cc: "'nanog@merit.edu'" <nanog@merit.edu>
In-Reply-To: <AA2634B8-9E7B-11D8-8044-000A956885D4@crocker.com>
Errors-To: owner-nanog-outgoing@merit.edu


This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig9418E34598C8E1C276460A8F
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Matthew Crocker wrote:
> We have all been through this before.  Linux out of the box is generally
> no more secure than Windows.

I would disagree with that, but that gets into a religious argument.

Really, however, the distribution involved with Linux is more critical
than that it is Linux.  Some distros are wide open, some are very secure
out of the box.  Again, however, this is getting into religious territory.

> Linux can also be misconfigured and
> hacked.  The reason why you don't see as many linux virus/worms is
> because there aren't as many linux desktops.  Once Linux becomes a real
> player in the residential desktop OS market you'll see more and more
> worms/viruses running around because of it.

Except that logic doesn't work because Apache has a greater market-share
than IIS, and yet we see many more IIS worms than Apache worms.

> Now, I love Linux,  I have
> 30 linux servers in production but it isn't the be all, end all to mass
> user security.

To misappropriate a phrase, "Its not magic pixie dust," I'll agree with you.
-- 
Jeff McAdams
"He who laughs last, thinks slowest." -- anonymous

--------------enig9418E34598C8E1C276460A8F
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iEUEARECAAYFAkCY0akACgkQXkUmzpmSrfzugACg1kRqrLlvBa0GSnIBytwrhXwl
vjkAlRvf+3Mk7UOIhDDuFfyhc3VaKpo=
=EYHf
-----END PGP SIGNATURE-----

--------------enig9418E34598C8E1C276460A8F--

home help back first fref pref prev next nref lref last post