this is a half baked comment. It doesn't matter what OS you use, it has to due with what procedures are in place, how well your people follow them, and the security system in place between the world and your data. the most secure system in the world would be one not connected to a network and that has no means to transmit or store data on other media or devices. you see people are just as much a contribution to the problem as the internet is if not more. I have been working in the IT industry for years and have seen more problems with people walking off with data on a floppy or infecting systems using USB dongles then I have seen attack from the internet. And when there is an attack from the internet, it is usually because a user clicked on a link like an idiot or there was an exploit on a system that was never patched (linux, windows, cisco IOS, etc.). So you see it is the user, not the OS who is usually at fault. The only reason you see less attacks on Linux then windows is 1. Windows has a much high visibility to the internet. 2. Usually the people who use linux are tech heads like me who know better then to fall into stupid traps, usually know how to properly tune their firewalls (along with using updated SPI/IDS signatures), and usually apply patches in a timely manner. Am I trying to defend windows, no, but I am trying to clearify where the problem truly is and tring to stop the total "blame the os" misconception. Oh, and I use bothe Centos Linux and windows and never had problems with either.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11485/34838#34838