Please... there is NO SUCH THING as a totally secure OS. As the saying goes in InfoSec, "The only secure computer is one powered off, unplugged, and in a locked room." But that simply isn't practical.

This article wasn't about saying .Net was completely secure, it was saying that it's more secure out of the box than its predecessors. Which it is. That simple.

That doesn't mean vulnerablilities aren't going to be found. Of course they are. They are found in all OS's. Red Hat, Solaris, BSD, and every other *nix flavor have vulnerabilites found and patched every week. So do all the Windows flavors. That's why all the InfoSec jobs have come into existence. There will always be those who try to exploit an OS, and those who try to secure it.

Galdor

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/157/19642#19642