" Isn't that what happened to all those Linux servers when the "Slapper" worm came out?"

No more than 15,000 hosts at any one time were hit with the Slapper worm at its height : http://www.f-secure.com/slapper/

OTOH, How many IIS boxes were taken down (including the ones at Microsoft.com) due to Nimda, Code Red, Code Blue... ? Even if you were to compare percentages instead of raw numbers, you'd find that Windows' flaws still had a much lousier impact, and were far more widespread.

"Microsoft, on the other hand, has a track record of having patched every major vulnerability prior to the release of any worm exploiting said vulnerability."

Oh, yes - patching. In spite of the fact that many Windows patches tend to break more than they fix (a round of SP3 for Win2k Pro and a bundle of constant WFP errors to go with it again? no thanks.)

The original poster wasn't exactly the sharpest knife in the drawer, but your response wasn't all that much of an improvement.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/199/23892#23892