Slashdot Mirror

Here you go. Feel free to scan the hosts in that list to see what OS/Version they are running. Also, read this for some background.

This comment of yours:

you'll be able to provide an extensive list of documented vulnerabilities
 
is absurd. I specifically said 0-day, which implies NO documentation as of yet. There are several groups like the individual linked to at zone-h above that are using suexec'd processes to smash the stack on RHEL kernels and escalate privileges. I do not mean to be an ass, or a troll, but come off of your ivory tower and into the real-world: these tactics are used daily without any documentation other then what we can gleam from logs and conversations with other admins and researchers. God help you if you rely on CERT or some bugtraq list somewhere.

Well, actually you can take the same steps in linux to mitigate damage when you server is comprimised. But more importantly, it has more to do with taking those steps than running BSD versus linux. Before you start flaming take a look for yourself....

http://defaced.projectgamma.com/
http://www.zone-h.com/en/defacements

burnin

Link

Link

Link

There's more links if you do a google search.

Apache ITSELF is rarely cause of hack-ins. However, there is a insane amount of Linux web sites hacked via insecure (opensource!) web scripts written in php and perl (phpBB and awstats recently).

Ofcourse, one can claim that it is due to bad system administration, but then again, isn't that the same reason why most windows servers get compromised?

Just compare the percentage of Apache servers vs the percentage of zone-h defaced websites stats.

If you want to keep advertizing free software solutions as SECURE, you need to MAKE them secure.

I'll admit that I didn't RTFA, but Zone-H did a study on windows vs. linux security, and the conclusion was similar.

Yep-Here and here and here and here

Ahh, go look for yourself:

Here

:-) Yeah, it is funny. But look at the first comments from these links:

Link
Link
Link

It's cut and paste.