...and you forgot the most important thing, which is use RUNAS (similar to SU) and do everything possible from a limited user account. Even a good number of IE exploits can't do anything significant if they're unable to change your system configuration, install DLL's, alter executables and such.

Somebody please explain to me why Windows is considered insecure just because most of its users don't know how to use their machines securely? Isn't Linux's implied security mostly "security by obscurity", plus the fact that most Linux-folk either know a good bit about computing or have no easy way to tell if they've been owned? One of my friends claimed his Redhat box was ultra-secure...just before I started a fsck on his machine and asked him if his hard disk seemed a bit busy.

Bub is right. People want to get their WORK done. They don't care about open source or not. It's not about having the most bleeding edge operating system or any other religious war.

The analogy of knowing your car intimately is wonderful. How many of you know, really KNOW how an automatic transmission works, have an open-source copy of the code for your antilock braking and fuel injection systems, or can describe the torsion points for your serpentine belts? Then, WHY are you on the road? And if you are, then WHY is your son/daughter/wife/husband/father/mother driving when I can guarantee you just about none of them know anything more than right pedal = fast, left pedal = stop.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/262/28077#28077