Nice strawman. I always hate the, "because Windows is so big, the poor guys are more of a target". With this same arguement, we should really see far more Apache exploits. After all, it dominates the webserver market. However, you don't. "Big" may mean "more of a target", but still isn't a good enough excuse for poor programming, lack of security and lack of patches (in a reasonable amount of time).

Almost every decent/modern Linux distro can be setup to auto-update. Slackware can. Gentoo does. Redhate (err. Hat) does. Yet, the turn around for patches are less time. Let's assume your distro doesn't have a auto-update type of feature - You can _STILL_ manually download the new/secure code and install it yourself! With Windows, I'm out of luck. Simply wait for the patch, hope that it gets released before the malicous code does, and pray that the patch doesn't break anything.

Face it, when CERT recommends you to use _anything_ but the MS webbrowser, you know theres some major freaking issues.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/9004/27236#27236