This enture article needs serious reconsideration. Main problems:

1) The premise that Linux is more secure because a user has to go through more gyrations to execute the attachment. Once users are taught how to do this, then they will go right on spreading the virus just like in the MS world. You think they'll really not look at those stupid Christmas animations just because you make them save them and chmod them first? Once they figure out how to do it they'll scratch down the CHMOD +X myfile right next to that post-it on the monitor that has their password on it.

2) Outlook does not just "execute" attachments by itself. Those were due to since-patched vulnerabilities. You think KMail and Mozilla don't have them??? Hmm - were you around for the OpenSSL and OpenSSH vulnerabilities of the past few weeks? Have you seen the number of Linux vulnerabilities in the Bugtraq database this year? Are you willing to bet your life that dangerous bugs aren't lurking in those packages too? Stay tuned....

3) Windows does not force people to run as Administrator but it IS necessary to install most applications - JUST LIKE LINUX. Quite contrary to your rant, when you create new users in Windows XP the default level of permissions is "Standard User", not administrator. Only the initial account is an Administrator - same as root in Linux. There is a RUNAS command in XP - same as SU in Linux. Don't blame XP just because most people don't use it the way you would like. Give them Linux boxes and they'll all be running as root.

That I can guarantee. The problem is not Windows. The problem is...well...people. It's their computer and they'll choose convenience over security every time. Your rant is little more than elitist ramblings. Give them a different OS and they'll still abuse it to get things done.

What we need to do is add security AND convenience. If you reply on artifical hurdles to give you the illusion of security then you will always lose.



[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/188/22766#22766