How many vulnerabilities are found in Open Source products per year? Don't tell me far less than Microsoft. Take a look at the CERT advisories if you want to start debating on that.

Microsoft's products have never been "engineered for security", but does that mean Microsoft's employees/developers don't know how to implement security? No. It means that the majority of monkeys who end up getting hacked don't bother to patch their machines or take proper measures to ensure adequate security.

If I wanted to compromise a system, I'd hit a Windows box. Why, you ask? Because 8/10 times I'm not going to find anything on the Unix box worthwhile to me... whereas the majority (not all) of E-Biz and things of that like are run on Windows platforms. More widely used, more widely attacked. It's just as simple as that. Don't try to make security issues out to be something they are not. What I find amusing is the fact the Open Source has so many security issues within itself, and it's not even as widely implemented as Windows.

On top of that, boneheads like this try to defend it and hoist it up like the solution to everything.

Bologna.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/166/20440#20440