Slashdot Mirror


Is Linux as Secure as We'd Like to Think?

man_of_mr_e asks: "With all the recent brouhaha about Blaster and Sobig, there's been a lot of talk about how poor Windows security is, especially compared to the Linux we all know and love. But is this really true? The website defacement archive at Zone-h shows that Linux accounts for 61% of the defacements in the last 24 hours (note, this figure changes, so it might be different when you view it). An analysis of the last few weeks of their archive shows a similar percentage of exploited Linux systems. Note also that the 'Unknown' category is rather high, and certainly contains at least some Linux systems, further increasing the percentage. Why is this? Are we just deluding ourselves about our own security? Could there be a Linux 'Blaster' just waiting to happen?" While "defacements" don't necessarily mean "root level break-in", sometimes getting your foot in the door is enough. If this happens, wouldn't Linux then be just as exploitable as Windows? Are there other reasons why the likelihood of a "Sobig" or an "ILUVYOU" would be lower for Linux than Windows?

3 of 1,091 comments (clear)

  1. Viurs != security by rsborg · · Score: 3, Troll
    I think this article is way off base. Anyone can put an poorly secured box on the net. The big difference between Linux and Win32 is that Win32 is "broken as designed" and that won't change unless Microsoft changes it.

    btw, if you want to secure your linux box against viruses, etc... you at least have the option to recompile the distro.

    --
    Make sure everyone's vote counts: Verified Voting
  2. Is this a challenge? by univgeek · · Score: 1, Troll

    Is man_of_mr_e trying to tilt the numbers in favor of Linux? Posting this story on /. is like waving a red rag in front of a raging bull. Here come the 1337 script-kiddies!!!

    --
    All bow to his Noodliness!! His Noodle Appendage has touched me!
  3. Re:Psychology plays a role by Zeinfeld · · Score: 1, Troll
    You're a troll. Had you actually done any of those things you would have given some sort of specific detail for at least one of them.

    Like a specific detail that would tell you exactly who I am so you can pester me in person?

    Err no thanks.

    --
    Looking for an Information Security student project suggestion?
    Try http://dotcrimeManifesto.com/