Slashdot Mirror


Netcraft Claims Apache Now Runs 2/3rds Of The Web

Mr Bill writes "According to NetCraft the Apache web server now owns over 2/3rds of the web. The jump of 2.8% since last month is mostly due to a number of large domain parking sites switching back to Apache from IIS. 'During 2001 and the first half of 2002 several companies hosting very large numbers of hostnames including Webjump, Namezero, Homestead, register.com and Network Solutions migrated to Microsoft-IIS. Subsequently these businesses have either failed, significantly changed their business model, or reverted to their previous platform, and Microsoft-IIS share is now in line with its long term pre-summer 2001 level of around 20%.' See the full report here."

366 comments

  1. not so strange... by mantera · · Score: 0, Redundant

    and it's likely to remain so for years to come

    1. Re:not so strange... by Roelof · · Score: 1

      Heck, no. Not with the way the, ehm, civilized world is switching en masse to OSS it isn't ;).

  2. good by grosa · · Score: 3, Flamebait

    hopefully this will cut down on the number of easily infected web servers. don't want to see another run of iis worms spewing bogus access requests at my apache server.

    1. Re:good by BuckaBooBob · · Score: 2, Interesting

      Apache doesn't seem to suffer from the Monoculture problems that MS has... But I guess apache hasn't reached a true monoculture yet... But it would seem to \me that IIS could be a dying horse..

      --
      Who needs WiFi when we can have Packet Over Sheep! http://datacomm.org/PoS-InternetDraft.txt
    2. Re:good by Anonymous Coward · · Score: 5, Insightful

      It might help a bit, but not a lot. Web servers that belong to a domain, say www.slashdot.com, are counted here, but when you have millions of home machines worldwide still running an open web service on windows, that can overwhelm the statistics.

      66% of 'real' websites may be apache driven, but when it comes to viral infection, Joe Normal's home windows box on his cable connection counts just as much an infectable web server as the business down the road that runs a real .com

    3. Re:good by nmg196 · · Score: 5, Insightful

      But IIS usage is NOT going down though! The netcraft graph is a graph of relative usage of each system and adds up to 100%. If you look at the bottom the linked page at the second graph, you can see that IIS usage hasn't decreased at all - it's just that Apache usage has gone up quite a bit recently (ie, there are more total servers tested by Netcraft).

    4. Re:good by Amiga+Lover · · Score: 0, Troll

      Are you on drugs?

    5. Re:good by Anonymous Coward · · Score: 0

      Apache is not monoculture in the same sense as m$. See this post

    6. Re:good by Anonymous Coward · · Score: 0

      I too noticed this. It would appear that people don't want to throw away thier investments they already have or the internet and the uses for these pieces of equiptment have increased dramatically. maybe this is a sign of the economy comming around.

    7. Re:good by Grizzlysmit · · Score: 5, Interesting

      Ummm I think you'll find thats wrong, ok the propotunate loss for IIS is worse, but they've had a notaciable numeric loss too.

      --
      in my life God comes first.... but Linux is pretty high after that :-D
      Francis Smit
    8. Re:good by Bert64 · · Score: 4, Insightful

      Apache is not really a monoculture atall, not compared to IIS... If you encounter a machine running IIS you can pretty much guarantee it`s running on an x86 machine running windows, it might, but this is a 1/1000000 chance or something, be running on windows on an alpha, mips or ppc... but this isnt possible for any version above 5.0
      However, with Apache, it could be running on any one of many OS`s, Linux, FreeBSD, Solaris, HPUX, AIX for instance, and on many different hardware architectures.
      This is a good reason for promoting systems such as FreeBSD, OSX, and the other risc systems... If the entire world standardises on x86/linux for their webservers, especially a single distribution, then it would be no better than a windows monoculture.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    9. Re:good by nmg196 · · Score: 3, Insightful

      OK - I'm slightly wrong.

      MS had 4.92 million sites last month, and it's 4.91 million this month (1.06% down) but my point still stands - it's mainly the fact that Apache has gone up from 13.52 million to 14.37 million active sites ( a gain 846294) that makes the graph show a swing from Apache to Linux. It's not really a change from Apache TO IIS - its mainly just loads more Apache sites. The fall in IIS usage is so insignificant that it doesn't even register on that graph!

      If you read the other /. comments - you'll see that graph is misleading many people on here. Many users seem to think that IIS usage is falling rapidly, when in fact it's nearly the highest it's ever been!

      Looking at the second graph, gives you a much clearer idea of what's going on - an obvous 'spike' in Apache users - while IIS usage doesn't change by a statistically significant amount (just the usual wobble perhaps).

      A few months more data will be needed to draw any conclusions on whether or not IIS usage is actually significantly falling.

      I don't think things like the Blaster worm have help Microsoft's image where security is concerned, but favourable independent reports of the security of the new Windows 2003 platform should balance that out in the long term.

    10. Re:good by Anonymous Coward · · Score: 0

      suctar

    11. Re:good by Anonymous Coward · · Score: 0

      I'm slightly wrong

      Umm, "slightly wrong" doesn't make sense. You are wrong. Totally wrong if you insist on an adverb.

    12. Re:good by qmrq · · Score: 1
      If you encounter a machine running IIS you can pretty much guarantee it`s running on an x86 machine running windows, it might, but this is a 1/1000000 chance or something, be running on windows on an alpha, mips or ppc... but this isnt possible for any version above 5.0

      Ehm... no. ;-)

      NT 5 was only released for x86. NT_4_ was released for other architectures, namely the wonderful DEC Alpha, MIPS, and IBM's PowerPC.

    13. Re:good by ckaminski · · Score: 1

      He meant IIS 5. IIS 4.0 was available IIRC for NT Alpha.

    14. Re:good by Anonymous Coward · · Score: 0

      Uh. No.

      There was a Microsoft web server available, but the one rolled into OS9 was NOT the Microsoft server. The two are readily confused because they used similarly-named control panels.

      It should be of note that Linux, OSX, and MacOS may all ship with web servers, but nobody except Microsoft is fscking stupid enough to leave it enabled on the default install. Along with Messenger, Remote Desktop Connection, and god knows how many other things that Joe Normal doesn't fscking need and will never, ever use.

      That is why Microsoft is singled out. Well, that and they have no shortage of exploitable code.

    15. Re:good by Anonymous Coward · · Score: 0

      Well, it's not like nearly the highest it's ever been makes a lot of sense either...

    16. Re:good by Billly+Gates · · Score: 1
      Not to sound trollish but I have played with C#.net and I am quite impressed.

      What does this have to do with IIS or apache?

      As organizations who's bosses standardize only on Microsoft will likely prefer .net over cgi or java.

      Now these organizations may run apache today but which platform will they run tomorrow?

    17. Re:good by nmg196 · · Score: 1

      > Umm, "slightly wrong" doesn't make sense. You are wrong.
      > Totally wrong if you insist on an adverb.

      No - if you look at the graph - I'm correct, but the figures show finer detail. Whichever you look at my statement still stands - the graph is misleading. Totally wrong would have meant that there HAD been a huge fall in IIS usage and my statement was entirely incorrect. But this is not the case.

      > Well, it's not like nearly the highest it's ever been makes a lot of sense either...

      It does if you're not as thick as pig shit. It makes perfect sense to the rest of us. Exactly which part of that very simple statement can you fail to understand? IIS usage was the highest it's ever been last month - and it has since fallen by about 1%. So it's nearly at it's peak. Pretty bloody easy to understand if you ask me - but that's probably why you posted as a Coward.

    18. Re:good by NanoGator · · Score: 1

      " But it would seem to \me that IIS could be a dying horse.."

      Just remember that Microsoft has profits to make. Apache has no such fire lit under them.

      --
      "Derp de derp."
    19. Re:good by Anonymous Coward · · Score: 0

      What? Most people I know who run web servers on home machines do it on Apache, too. Those who're technically skilled enough to run a server tend to be too cheap to buy MS'es server software.

    20. Re:good by Dave_bsr · · Score: 1

      ummm...IBM? pretty much pays the apache team? Hello?

      I think Apache will stay just as cool and have all kinds of new features. But for being a standard, solid, stable web server...it does everything i need it to do right now...

      --


      Who is this Anonymous Coward character, how does he post so much, and why is he always such a whore?
    21. Re:good by afidel · · Score: 1

      Since 2/3rds of the web runs on Apache I'm pretty sure that the developers could find a job with another company should IBM feel that they no longer want to employ them. Besides I doubt IBM is employing them to crank out the profits, more likely they want to have a stable base for their web services platform that is well supported internally.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    22. Re:good by danielsfca2 · · Score: 1

      > with Apache, it could be running on any one of many OS`s, Linux, FreeBSD, Solaris, HPUX, AIX for instance,

      I know you said "for instance," but you forgot Windows. My Windows server is running Apache for HTTP and Mercury for mail. I wouldn't trust IIS for anything.

    23. Re:good by Foofoobar · · Score: 3, Insightful

      Monoculture? How so? I happen to work for a company with VERY close ties to MS and they won't let me run Linux... so I run Apache, MySQL and PHP on a windows machine. Works great and I never have any down time.

      The key phrase here is cross platform compatibility. That is something that Microsoft has yet to learn.

      --
      This is my sig. There are many like it but this one is mine.
    24. Re:good by wasabii · · Score: 1

      It doesn't matter one bit that more people now use IIS than used to. When analyzing a market such as web server usage, you have to go with comparison averages. Usage of EVERYTHING is increasing. More web sites are being made. Both IIS and Apache usage are growing. But IIS is LOSING market share. Thats what matters.

    25. Re:good by wasabii · · Score: 1

      Okay, usage of Zeus is falling. :) And Netscape stuff. :) You know what I mean.

    26. Re:good by Anonymous Coward · · Score: 0

      As organizations who's bosses standardize only on Microsoft will likely prefer .net over cgi or java.

      Now these organizations may run apache today but which platform will they run tomorrow?


      Trick question. They'll be out of buisness.

    27. Re:good by optikSmoke · · Score: 2, Informative
      Hmmm, yes by numbers IIS is at its highest ever, however that is an irrevelent statistic. The fact that its percent of market share has decreased is much more useful. It basically means the market size has increased (ie, there are more total servers now) but IIS hasn't kept up.

      As a simple (and exageratted) example, let's say the market increased by a million servers, but IIS only got 100 more. Yes, they would be at their "highest ever", but in reality they would have a much smaller presence in the market.

      Numbers don't matter, its numbers relative to the competition (ie, market %). So, the graph is not really misleading, since it shows a useful statistic (market share) rather than a not-so-useful one (number of servers).

    28. Re:good by Doctor+Crocodile · · Score: 1

      Keep the list going.... Apache runs just fine on Netware too............

    29. Re:good by Foofoobar · · Score: 1

      I hate to break the news to you but Netcraft counts these as well. The only ones it DOESN'T count are those behind a firewall such as a company intranet.

      If it's port is open to the outside world, netcraft counts it. And again, Windows does not automatically install IIS and run it as a service. Last I knew, you have to choose IIS as an option (depending on the version/package you run) and then you have to start it as a service.

      In other words, Windows machines at home do not automatically become a web server after install...

      --
      This is my sig. There are many like it but this one is mine.
    30. Re:good by Anonymous Coward · · Score: 0
      Microsoft used to have personal web server installed with win98 - i have no idea if they still have that as an option and no idea what server it reported to be.

      A nice little lightweight webserver for windows is xitami - I havent used it in this millennium :) but it was great and supposedly still is.

    31. Re:good by Anonymous Coward · · Score: 0
      From netcraft:

      Microsoft is the sum of sites running Microsoft-Internet-Information-Server, Microsoft-IIS, Microsoft-IIS-W, Microsoft-PWS-95, & Microsoft-PWS.

      PWS = personal webserver

    32. Re:good by Foofoobar · · Score: 1

      Hmmm ...well let's see. If they want insecurity, instability and platform-centric programming that can NEVER be ported to any other platform (still liking C#?), they more than likely will choose IIS.

      I think C# is pretty cool too but will never use it outside of just having to support tools built by other companies in it. It's merely a Java wannabe that loses one of the best features of java... operating system independence.

      --
      This is my sig. There are many like it but this one is mine.
    33. Re:good by Anonymous Coward · · Score: 0

      let me get this straight. You're running Apache, php and mysql on WINDOWS... but you claim that Microsoft WINDOWS isn't good with cross-platform compatibility??? I'm sorry?? i'll just get back to installing IIS on My Redhat box now...

  3. That's Just Crazy by Anonymous Coward · · Score: 5, Funny

    Who would've believed that a non-proprietary and free webserver would be so popular when Microsoft gives you the opportunity to lock yourself into monopoly driven endless licensing upgrade cycle?

    What the hell is this world coming to?

    1. Re:That's Just Crazy by alwsn · · Score: 0, Offtopic

      An amusing post, but saying that MS-IIS is 'monopoly driven' when in the same sentence it is referenced how much more popular apache is seems somewhat odd.

      If MS had a monopoly in the server market, there would be no other choice. This is clearly not the case. Not only is there choice, more people pick apache. If anything, apache is closer to a monopoly (though both IIS and apache are far from it)

    2. Re:That's Just Crazy by quigonn · · Score: 1

      It has a monopoly on Windows web servers.

      --
      A monkey is doing the real work for me.
    3. Re:That's Just Crazy by Anonymous Coward · · Score: 1, Insightful

      The monopoly driven upgrade cycle is in reference to everything IIS forces on your company.

      Unless their is some version of IIS that runs on OS X,Linux,and other OSes that I've missed...

    4. Re:That's Just Crazy by Anonymous Coward · · Score: 0

      You can run apache on windows

    5. Re:That's Just Crazy by quigonn · · Score: 1

      But nobody does it because Windows "already ships with a webserver".

      --
      A monkey is doing the real work for me.
    6. Re:That's Just Crazy by Dionysus · · Score: 2, Insightful

      It has a monopoly on Windows web servers.

      What a bizarre statement. Isn't that like saying RedHat has a monopoly on RedHat Linux servers? Or Debian has monopoly on Debian GNU/Linux servers?

      --
      Je ne parle pas francais.
    7. Re:That's Just Crazy by BasharTeg · · Score: 2, Insightful

      That's certainly a monopoly. There are other, free options, but "nobody does" so it is a monopoly.

      This is why I don't agree with the Windows monopoly concept. We all know there are easily a hundred other free operating systems out there. Plus many more that aren't free but aren't from Microsoft. If Microsoft is the operating system of choice, even if the choice is watered down since most people get Windows free (or not free but seemingly so while paying for it in OEM costs) and prefer it, even if that choice is made out of laziness, how is that forcing their hand?

      The simple truth nobody in the open source community wants to think about is this: Most computer users today don't give a damn about Microsoft's monopoly, and even if their computer didn't come with Windows and even if they were informed of Linux, BSD, and other alternatives, they would still CHOOSE to go buy a copy of Windows and install it. Rant and rave, like it or not, Windows is the operating system most people in the world would choose. They don't need to strong arm anybody. I'm not saying they don't, I'm saying blaming their current success on that is a piss poor excuse. The truth is, they have a product that does what many people want.

    8. Re:That's Just Crazy by Dan+Ost · · Score: 1

      How can this be true when many people run Apache on Windows?

      --

      *sigh* back to work...
    9. Re:That's Just Crazy by squiggleslash · · Score: 3, Insightful
      If you switch from Windows IIS to Windows Apache, you lose nothing. You can still interoperate. IE doesn't become incompatable with your website. You're fine.

      If you switch from Windows on your Desktop to Linux, you lose access to many applications only available under Windows. Those apps cannot be easily ported. In addition to losing functionality, you lose interoperability, because many of those applications provided access to data and other resources.

      So yeah, I'd agree Microsoft has no monopoly in the web services arena, but I'd disagree about the operating system. In the late 1800s you had a choice of oil supplier, but thanks to Standard Oil's corrupt contracts with railroad companies, the only affordable oils were their's. Throughout the 20th Century, you could always use mail, radio, and a host of other services instead of the Bell System, to communicate. But that hardly meant they weren't a monopoly. "Choices" that are effectively worthless for the majority of people do not undermine a monopoly.

      --
      You are not alone. This is not normal. None of this is normal.
    10. Re:That's Just Crazy by Anonymous Coward · · Score: 0

      I'm not sure I folow you or maybe you on the wrong path?

      Windows is a decent operating system that about any morron can use somewhat eficiently. althought it could be argued that these same morrons would do about as much productivity with the default instal in windows as they would in say mandrake linux until they learned how to customize it and so on. of course they would learn at about the same pace too.

      But we are missing the point here. Windows may be a monopoly by user choice, that point could very well be true.

      Microsoft has historicaly used this position in the past to squash competition in other areas. One of the reasons thier office products took off and performed better than the competition in the first place is because they controled the os and had hidden api'a that office used to it's advantage were no one else knew about until someone leaked it from the redmond fortress itself.

      Another area was with the web browsers. thye used thier market position to distribute what at the time was an inferior product at no apearant cost to the user. If they just gave it away from thier site netscape and microsoft would still be playing the "who can make a better browser" game instead of the "damn i have to patch another security flaw" or "there is another thing they don't do according to spec, how can we make this work so users can expect a simular exerience" game. Of couse Netscape made some major mistakes after they started having to compete with a free product that contributed to this situation. The fact remains that if users had to download it (wich win95 had several tools capable of doing this without the webbroser)there would still be substantive competition in that market area and we would still be experiencing inovation and maybe an even better web experience.

      There are several other situation were they have abused this position too. Microsoft is constantly doing things like locking out competition by making aplication just stop working for no apearent reason (if not for just a couple of weeks or so) with the latest security patch or making product incompatible with the competitions because they can hold the dominant market format for documents or somthing. believe it or not, at one time microsoft worked towards compatability with other products...

      Actions like this show that in alot of places microsoft doesn't have a superior product, they just have a product without serious competition. but thats enough typing for one morning.

    11. Re:That's Just Crazy by Anonymous Coward · · Score: 0

      Who would've believed that a non-proprietary and free webserver would be so popular when Microsoft gives you the opportunity to lock yourself into monopoly driven endless licensing upgrade cycle?

      Apparently, everyone except Red Hat.

    12. Re:That's Just Crazy by B'Trey · · Score: 1

      This is why I don't agree with the Windows monopoly concept. We all know there are easily a hundred other free operating systems out there. Plus many more that aren't free but aren't from Microsoft. If Microsoft is the operating system of choice, even if the choice is watered down since most people get Windows free (or not free but seemingly so while paying for it in OEM costs) and prefer it, even if that choice is made out of laziness, how is that forcing their hand?

      The problem was with the MS licensing agreements with computer sellers. If you sold computers, you could sign an exclusive deal with MS and get a discount (that OEM cost you mentioned) on the cost of the OS you supplied with your computers. However, you could not sell a computer that was not loaded with Windows. This meant that you either offered your consumers no choice in OS, or your Windows PCs cost significantly more than your competitor down the street because they had to pay full retail for Windows, not the OEM cost. End result - monopoly. If you bought a PC, you bought Windows. Following the monopoly suit, that policty changed but the policy had already had the effect of handing the marketplace to Windows. Had MS simply won the market fair and square, there would be significantly less animosity towards them.

      --

      "The legitimate powers of government extend only to such acts as are injurious to others." Thomas Jefferson.

    13. Re:That's Just Crazy by 4of12 · · Score: 1

      Windows IIS to Windows Apache, you lose nothing.

      For now.

      Once more desktop Windows applications start using XML services over the network via .NET, that could change.

      --
      "Provided by the management for your protection."
    14. Re:That's Just Crazy by GigsVT · · Score: 1

      You really think that's going to happen?

      MS has tried over and over to take over the web this way, VBScript, ActiveX web sites...

      None of that stuff has caught on, with the exception of a few suckers who got locked into it by buying or writing intranet products on it.

      Bet they feel stupid now that MS has changed direction yet again, leaving them with unsupported and proprietary apps.

      --
      I've had enough abrasive sigs. Kittens are cute and fuzzy.
    15. Re:That's Just Crazy by Geekenstein · · Score: 1

      Yeah, really. At least none of the Linux vendors are trying that *cough*RedHat*cough*

    16. Re:That's Just Crazy by autechre · · Score: 1

      If Windows does "what many people want", then why do so many people complain about "computers"? Oh, computers are always crashing, you can't trust them, blah blah blah and a yakkity schmakkity. Talk to users and you'll find that they've come up with bizarre rituals, bending themselves around the flaws in the system. I think you may find that instead of being what people want, it's really what people are used to using.

      I'm sure there must be someone out there for whom Windows mostly does just what they'd like it to do, but it's way too complicated for the needs of most people. They only want to run a few apps -- no, scratch that. They only want to _do_a_few_things_, which is different. They shouldn't have to think about start menus and video card drivers.

      When I worked in a small "screwdriver shop", I saw plenty of people bring their (Windows) computers in to have scanners installed. There were tons of people who bought add-on cards, thought they could install them under Windows, and couldn't. It's no holy grail.

      I think that the companies moving towards "Internet terminals" and similar devices are thinking in the right direction. The more complicated computers with general-purpose operating systems become, the less viable (and reliable) they will be for the general population.

      --
      WMBC freeform/independent online radio.
    17. Re:That's Just Crazy by lone_marauder · · Score: 4, Insightful

      If anything, apache is closer to a monopoly (though both IIS and apache are far from it)

      Monopoly != popularity. Monopoly is taking market share by force rather than by normal market behavior. If Apache had extensions that didn't work right for any other browser besides, say, Mozilla, you might have something.

      Please turn the next page in your pamphlet and post accordingly.

      --
      who are those slashdot people? they swept over like Mongol-Tartars.
    18. Re:That's Just Crazy by Anonymous Coward · · Score: 0

      Actually I work for a major UK financial house and we serve internet with a mixture of Apache, Lotus Domino and IIS. Predominantly Domino is used to supply data to the end web server for it to render.

    19. Re:That's Just Crazy by jridley · · Score: 1

      Well, nobody except me and most of the people that I know that are running Windows based web servers.

      The thing Windows ships with can only be called a web server if you're being very generous.

    20. Re:That's Just Crazy by basingwerk · · Score: 0

      It doesn't really matter about whether MS products are good. They only have to be good-enough and standard. I think this comes about because software products can be copied easily. Special measures are needed to protect them. One measure is to keep what goes on inside secret by only releasing the binary. Stolen copies cannot be modified easily if you do that. This makes it more difficult for crooks to make money by exploiting the asset. It has other effects, as well. For one thing, it is difficult for disparate vendors to create products that interoperate if they don't know how the other products work. This effect influences how systems are put together, and creates the trend whereby computer platforms develop vertically. If influential user communities follow this trend, others will be locked into following them for safety's sake, and vendors will climb on the band wagon too. This is all obvious. This has happened to Microsoft, partially because of this general effect that happens in the computer industry from time to time, and partially because of their own efforts. In any case, these influences are consistent with Microsoft's goals, and can't really be separated out. In the recent past, IBM was pre-eminent in the industry. Yet however strong their position was, eventually other forces combined to displace them. Right now, the only other contender I can see is open source software. Disparate vendors have created products that interoperate. I hope that this allows computer platforms to develop horizontally, giving more development vendors a chance to compete and increasing the transparency of the products. Hopefully, over time, users will see that record-keeping and communication systems are commodities, and we can all move on from this particular era of post-industrial history and bring on the next big thing, which surely must be vast underground intercontinental physical transportation systems, based on vacuum driven human capsule payload delivery using packet routing technology.

      --
      I stole this .sig
    21. Re:That's Just Crazy by jc42 · · Score: 5, Interesting

      How can this be true when many people run Apache on Windows?

      Funny thing about this: On many occasions, I've found myself looking at a group trying to install IIS (or the Netscape server or some other commercial server), and getting more and more frustrated over the problems getting it to work.

      So, while they're fighting with it, I sit down at an idle machine, point the browser at apache.org, download the latest apache for that platform, and ask them questions while I twiddle the configuration. Within 10 to 20 minutes, depending on how much configging is needed, I fire up the server, and it runs the first try. I invite them to check it out from the other test machines, and they find that it's working. We copy a few web pages to that machine, and they work

      The result in almost all cases is that they decide to go with apache "for a while". It's just an interim measure, you understand, until they can get the real web server running. But meanwhile, they have a web server that they can put online. The web developers aren't sitting around idle; they're building the web site.

      In the ensuing months or years, I occasionally prod them with "You know, we really should try to get the officially-mandated web server running." The response is usually to put it off until they can get through the huge pile of stuff that they need to put online.

      In a few cases, management has gotten upset, and created a team to get the officially-mandated server running. This often succeeds after a few weeks. Then they put that server online, and it's a real disaster. It crashes repeatedly, produces a flood of complaints from baffled customers along the lines of "How the @#&$^%*& do I order things from you now? Your online ordering pages are broken."

      After management notices the loss of income from IIS or whatever, they grudgingly agree to go back to apache "until the problems can be worked out."

      Does this sound familiar to anyone?

      --
      Those who do study history are doomed to stand helplessly by while everyone else repeats it.
    22. Re:That's Just Crazy by radish · · Score: 1

      Whilst I agree that Apache hardly qualifies as a Monopoly, you brought up definitions, so here's one for Monopoly:

      Exclusive control by one group of the means of producing or selling a commodity or service.

      There are a bunch of other definitions but they all share a couple of features - (a) use of the work exclusive and (b) no mention of force. Now come up with an area where MS have exclusive control over a market. I can't think of one...

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    23. Re:That's Just Crazy by Wah · · Score: 1

      An amusing post, but saying that MS-IIS is 'monopoly driven' when in the same sentence it is referenced how much more popular apache is seems somewhat odd.

      Until you realize that the 'monopoly' they control is on the desktop. They don't have a server monopoly for the same reason they do have a desktop one, applications. Or to be more blunt, Apache. You don't have to use MS to have an interactive, fully-functioning server. You do, in most cases, for the desktop.

      The drive would then be to use that desktop monopoly to overtake the back-end server. It doesn't work as well as the Office upgrade wheel as this article is highlighting. Without serious hooks and the ability to introduce subtle incompatibilities (intentionally or not), they haven't been able to take over. And features aren't really a question, when file and print serving covers 80% of most company's server needs.

      However, this belies the fact that while 67% of ther servers run Apache, over 90% of the clients use IE, where hooks and subtle incompatibilities are the SOP.

      --
      +&x
    24. Re:That's Just Crazy by Khazunga · · Score: 1

      Microsoft's monopoly status was asserted in court, with highly solid evidence. I didn't think anyone would question it. Microsoft does does have exclusive control of the OEM market, using OEM pricing as a leverage to market domination. Owning the OEM market, they own the first instalation of software on the PC, allowing for their products to be placed first before the eyes of the user. Inertia then does the rest of the marketing...

      --
      If at first you don't succeed, skydiving is not for you
    25. Re:That's Just Crazy by radish · · Score: 1

      Yeah, I know :) I was just playing devils advocate. I guess it just highlights the fact that the dictionary definition of a word isn't always the same as the legal definition of a word.

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    26. Re:That's Just Crazy by overunderunderdone · · Score: 3, Insightful

      Monopoly != popularity. Monopoly is taking market share by force rather than by normal market behavior.

      No, monopoly means "exclusive control by one group of the manufacture, or production, or selling of a comodity" whether that monopoly was gained by the popularity of the product or by "force" is irrelevant. The behaviour you are talking about isn't "monopoly" it is the abuse of a monopoly, or in anti-trust law "unfair business practices". Also, those business practices are only "unfair" IF you have a monopoly. So Microsoft was perfectly fine writing those "lock in" contracts with OEM's before they had a monopoly. It was perfectly fair to sign exclusive contracts in an attempt to lock out the competition and gain market-share. It is even fine for them to have become a monopoly, but once they are they are forbiden such practices which used to be perfectly legal.

      Microsoft does have overwhelming marketshare, their network of exclusive sales contracts, when it was fully in force, probably made them a monopoly by virtue of the fact that they had something close enough to exclusive control of the sale of operating systems. I think such a virtual monopoly was sufficient for anti-trust law to kick in and forbid their use of otherwise legal practices. But strictly speaking Microsoft isn't a monopoly in the sense that DeBeers or OPEC are, or Standard Oil was.

    27. Re:That's Just Crazy by spitefulcrow · · Score: 1

      heh. VBS and ActiveX are the buggiest pieces of shit ever. People have taken to including a little VB script that opens an IE user's CD-ROM drive on 404 pages and stuff like that.

      --
      Sorry, my karma just ran over your dogma.
    28. Re:That's Just Crazy by the+eric+conspiracy · · Score: 1

      If Microsoft is the operating system of choice, even if the choice is watered down since most people get Windows free (or not free but seemingly so while paying for it in OEM costs) and prefer it, even if that choice is made out of laziness, how is that forcing their hand?

      People's hands get forced because Microsoft doesn't make Office available on any x86 OS other than Windows, Office uses proprietary file formats, and people HAVE to be able to read and generate Office file formats. As soon as you get into an arena like web servers, X-Box, etc. where Office is not a factor, MS struggles.

    29. Re:That's Just Crazy by djh101010 · · Score: 1

      Absolutely - any IT professional knows that once a system is put in place for a demo, chances are very high that it'll stay that technology for production. It's just too easy to keep something that works and put off re-designing it.

      Sometimes, this is good, as in the case you describe. Too often, though, it's the other way around, and we get stuck supporting some crufty POS that was thrown together using the wrong ingredients. The PHBs know that that can happen, and don't understand that sometimes, just sometimes, the quick and cheap (free) solution *is* the right answer.

    30. Re:That's Just Crazy by NanoGator · · Score: 1

      "What a bizarre statement. Isn't that like saying RedHat has a monopoly on RedHat Linux servers? Or Debian has monopoly on Debian GNU/Linux servers?"

      It was a joke, dude. Often jokes involve bizarre statements.

      --
      "Derp de derp."
    31. Re:That's Just Crazy by Khazunga · · Score: 1

      Oh, not by any means :-) You can't coerce a dictionary definition by sheer money power. On second thought...

      --
      If at first you don't succeed, skydiving is not for you
    32. Re:That's Just Crazy by Rimbo · · Score: 1

      "Monopoly is taking market share by force rather than by normal market behavior."

      What you've described here is the typical means for achieving a monopoly. The dictionary definition of "Monopoly" is a company having exclusive right to control and sell a commodity. Typically this is done through collusion with a government or among individuals. It's not required, however.

      Something that is popular to the point where it controls the market would therefore be a monopoly, just the same as a monopoly that was granted through a government grant/edict or through market muscling.

    33. Re:That's Just Crazy by lone_marauder · · Score: 1

      Now come up with an area where MS have exclusive control over a market. I can't think of one...

      I just had that sudden chill, as if walking into a cult ceremony by mistake and coming to the sudden horrifying revelation that the person I'm talking to really is that nuts. I'm just going to back away calmly.

      --
      who are those slashdot people? they swept over like Mongol-Tartars.
    34. Re:That's Just Crazy by Anonymous Coward · · Score: 0

      You spend a lot of time with homes for the mentally retarded?

    35. Re:That's Just Crazy by catenos · · Score: 1
      Monopoly != popularity. Monopoly is taking market share by force rather than by normal market behavior.
      No, monopoly means "exclusive control by one group of the manufacture, or production, or selling of a comodity" whether that monopoly was gained by the popularity of the product or by "force" is irrelevant.

      Correct. And just to be clear, the definition you cited makes obvious that Apache[1] isn't a monopoly[1]. Because the ASF has no control. Neither has anyone else. Everyone can go and fork Apache for their own need, if they want to. E.g. if you don't want to switch to Apache 2.0 in the foreseeable future, you are free to start a long-living support branch for 1.3.

      The Webster entry makes this even more obvious:
      1 : exclusive ownership through legal privilege, command of supply, or concerted action
      2 : exclusive possession or control
      3 : a commodity controlled by one party
      If you think about it, neither 1. nor 2. apply to the ASF, nor 3. to Apache.

      [1] Let's ignore for a moment that Apache has not (yet) the market penetration needed to have a monopoly.
      --
      Keep an eye on which arguments are silently dropped in replies. Not always, but often times it's very telling.
    36. Re:That's Just Crazy by pmz · · Score: 1

      This is why I don't agree with the Windows monopoly concept.

      Microsoft manipulated the large OEMs, so that even free alternatives were not marketable. Microsoft does have a monopoly on desktop operating systems and office suites. Of course, it is slowly beginning to dissolve, but this will take some time to complete.

      even if that choice is made out of laziness, how is that forcing their hand?

      Increasing the effort of choosing alternatives is very effectively forcing something onto people. Think if you were allowed to purchase something else, but you have to hike up a 15-mile trail to obtain it? How many people would even bother? Microsoft tries to make choosing alternatives like that 15-mile hike (DRM will be their last real attempt, most likely).

      they would still CHOOSE to go buy a copy of Windows and install it.

      You give them too much credit. They only choose Windows for historical reasons (what they know, existing applications, etc.). It's a vicious cycle: Microsoft screws over IBM, Apple, the OEMs, etc. and captures maket share which drives application vendors which drives market share. It doesn't absolve Microsoft of the crimes that started that cycle.

      Choice, innovation, blah, blah, blah. Microsoft has removed the meaning of these words.

    37. Re:That's Just Crazy by tbird20d · · Score: 1
      Good correction on the nature of monopoly and legalities, but...
      • It is even fine for them to have become a monopoly, but once they are they are forbiden such practices which used to be perfectly legal.
      This is true in general, but Microsoft also used regular old illegal tactics to get and keep their monopoly, not just illegal-because-they're-a-monopoly tactics. I know details because I was on the inside of an anti-trust lawsuit with them that was eventually settled out of court (the DRDOS lawsuit).
      • But strictly speaking Microsoft isn't a monopoly in the sense that DeBeers or OPEC are, or Standard Oil was.
      I beg to differ on this. Microsoft understood from day one the market effects that are created by the tie between the OS and applications. They did everthing in their power (both legal and illegal) to create and maintain exactly the monopoly that they have. These network effects ("network" in economic terms) can be just as powerful in terms of maintaining monopoly control of a market as other forces, such as cornering supply, production and distribution of a natural resource. More to the point for the parent: Saying people are apathetic about their choice is silly in this context. A monopoly situation precludes a choice they could care about.
    38. Re:That's Just Crazy by radish · · Score: 1

      No, I'm being serious. Exclusive is a very strong term. It means that not only do MS make the most commonly used product in some arena, but that they make the only one, and that no one else can (for either technical or legal reasons) create a competitor. It doesn't mean "they have 95% market share because users are too dumb to choose a better alternative". There are competing operating systems, there are competing browsers, there are competing media players, there are competing games consoles, mice, graphics APIs and office suites. Other than robotic purple dinosaur toys I can't think of much which is made by Microsoft and for which there is no alternative whatsoever.

      Now, as has been established in the court, we know that MS have and have abused their monopoly (legal definition) position in many arenas to be "anti competitive". All I am saying (and really it was only a throwaway pedantic comment) is that from a dictionary definition of the word, I don't believe MS has a monopoly.

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    39. Re:That's Just Crazy by overunderunderdone · · Score: 1
      I beg to differ on this. Microsoft understood from day one the market effects that are created by the tie between the OS and applications. They did everthing in their power (both legal and illegal) to create and maintain exactly the monopoly that they have. These network effects ("network" in economic terms) can be just as powerful in terms of maintaining monopoly control of a market as other forces, such as cornering supply, production and distribution of a natural resource.
      I conceed your point & agree but I would say that while those network effects are very powerful and give Microsoft most of the characteristics of a monopoly (and are more than enough to get them busted for abusing their monopoly power) they aren't strictly speaking the dictionary definition. M$ don't have exclusive control over the means to create or sell a competing product, which is in fact fairly easy. It's just very hard to overcome the network advantages. That said I think someone with a significantly better solution could (and I look forward to Linux actually doing so)
    40. Re:That's Just Crazy by fferreres · · Score: 1

      In some way I think we're missing an important requirement that a product or company must fullfil to the considered a Monopoly. Monopolies can be easily manupulated because you can control the price of the product and can enforce higher prices to be paid.

      Now, Apache is free, not only in the sense that you don't have to pay for it, but in the sense that the source is open and you can twidle it for your needs.

      In others words, Apache can never abuse it's monopoly position, because everyone owns Apache in some sense, they just need to download the sources and be done. And they can't affect market prices, because the sell it for $0 to whoever wants to use it.

      Seems to me Apache is as a monopoly just as much as H2O has the monopoly of breathable stuff. It's free. Monopolies are bad when there is induced lack of competition and abuse of market position geared towards setting prices at will.

      A bit long my response, and reinterative, but please, bear in mind Apache has no monopoly over anything, because their products are and will remain free and open.

      --
      unfinished: (adj.)
    41. Re:That's Just Crazy by jc42 · · Score: 4, Informative

      Well, yes; sometimes it feels that way. ;-)

      Actually, of course, it's just normal American corporate management practices that I'm talking about here. I keep getting the feeling that it's not outsourcing to cheaper parts of the world that we should be worried about. If any other part of the world ever invents a rational scheme for organizing companies, they'll wipe out our economy overnight.

      Fortunately, there seems little danger of this threat materializing.

      The funniest case was a few years back, when the project's management decreed the Netscape server as the standard. We tried several times. But the same thing always killed the effort: This server can be configured only through its web interface. Invariably, we would make some config mistake that turned the server into a zombie. At that point, there was no way to correct the problem because we couldn't change the configuration any more. We'd wipe the server's directories, reinstall -- and it would happen again. Sometimes we'd get it running for a few days, but every config change carried with it the possibility that we'd have to wipe the server and start over.

      You'd think that people would understand why you can't trust a web server to handle changing its own config files. But the managers couldn't be convinced that there was a fundamental problem here. And we never found a way to get at those files with a plain editor. They just didn't make sense, and weren't documented anywhere that we could find.

      I've long argued that one of apache's real strengths is its plain-text config file (with lots of good comments in the text). The commercial guys don't seem to be able to figure out why this is a good idea.

      --
      Those who do study history are doomed to stand helplessly by while everyone else repeats it.
    42. Re:That's Just Crazy by Minna+Kirai · · Score: 1

      All I am saying (and really it was only a throwaway pedantic comment) is that from a dictionary definition of the word, I don't believe MS has a monopoly.

      Interpeting it as you have, no company has ever held a monopoly. Absolute, 100% "exclusiveness" can never happen in the real world.

    43. Re:That's Just Crazy by radish · · Score: 1

      Not true, there are many monopolies, and they're usually government sponsored. Phone companies, utilities, public transport - all these have at some point been provided by monopolies in most countries (and there is now some degree of competition in most countries). Look at the breakup of the phone system in the US, or the railways in the UK. And there are still local ones - if you're in New York City and you want to ride a bus or take a metro train, do you have a choice of provider? Nope. But you're right that they're rare, because they're usually seen as bad. Which is when you start getting cartels instead...

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    44. Re:That's Just Crazy by aztracker1 · · Score: 1

      Okay, I am all for Apache, and Linux... I've also been following mono for a while now, and will probably start implimenting some things on it as it approaches a 1.0 stable release. This aside, I have been using IIS since asp beta on iis3 in 1996... I started on IIS4 as soon as the betas started on that... I have *never* had a system compromised by worms, or had stability problems, my personal server (a dual p2@400) ran from 1999-06 until 2003-04, until I moved things to a new server, with no blue screens, or virii/worm compromises... Yes, there were several issues with IIS, most of which were dealing with default applications installed, which *I* and a lot of others dissable/remove from production servers... Beyond this, many of the holes were fixed weeks before the worms came... it isn't the software's fault that admins don't keep up to date.. same can be said on the OpenSSL side... Regarding diversity in OSes keeping *nix secure... security through obscurity isn't a plan at all... For that matter, you should install Apache on Amiga, and use that in a cluster.. yeah, then nobody will worm, or exploit ya!!! Doesn't hold.. the most damaging attacks are those specifically *at* you.. however, worms do have their impact.. this is where it is important to have admins *do* their jobs.. Also, if you, and these other people can't seem to get IIS running, you need help, and so do they.. IIS is the easiest web server that I have worked with, Apache, and Netscape included.

      --
      Michael J. Ryan - tracker1.info
    45. Re:That's Just Crazy by Foofoobar · · Score: 1

      Heh. Your logic is correct but you neglect two key points:

      1. People would choose Windows as they already know it and change frightens them.

      2. All the software they know is made for windows (their favorite game, their favorite app, etc).

      Get software support and a desktop that is similar to Windows and nobody would care.

      --
      This is my sig. There are many like it but this one is mine.
  4. That's Netcraft with a LOWER CASE 'c' by Anonymous Coward · · Score: 1, Informative

    from Magnus at netcraft dot com

    1. Re:That's Netcraft with a LOWER CASE 'c' by gunix · · Score: 4, Funny

      If Netcraft would use an upper case 'C', Blizzard would send them a theratening cease and desist letter (http://www.freecraft.org/).

      --
      Evolution of Language Through The Ages: 6000 BC : ungh, grrf, booga 2000 AD : grep, awk, sed
    2. Re:That's Netcraft with a LOWER CASE 'c' by Anthony+Boyd · · Score: 1
      If Netcraft would use an upper case 'C', Blizzard would send them a theratening cease and desist letter (http://www.freecraft.org/).

      Hmm. Are you sure? I thought SCO owned the letter 'C' and all derivative words.

    3. Re:That's Netcraft with a LOWER CASE 'c' by Anonymous Coward · · Score: 0

      Don't be a moron. They only own the capital letter 'C', lowercase 'c' is public domain (for now).

    4. Re:That's Netcraft with a LOWER CASE 'c' by Golias · · Score: 2, Funny
      Hmm. Are you sure? I thought SCO owned the letter 'C' and all derivative words.

      They might say they do, but the Cookie Monster can claim prior art.

      --

      Information wants to be anthropomorphized.

    5. Re:That's Netcraft with a LOWER CASE 'c' by Anthony+Boyd · · Score: 1
      Don't be a moron. They only own the capital letter 'C', lowercase 'c' is public domain (for now).

      First of all, I'm pretty sure that lowercase 'c' falls under "derivative works" and is therefore actionable by SCO. But second of all, in case you haven't followed the thread, we are talking about the capital letter 'C' -- as in, what would happen if Netcraft capitalized it? So... now who's the moron?

      Note: this entire sub-thread is a joke, no actual animosity is intended. Punk.

  5. Not necessarily a good measurement by taliver · · Score: 5, Insightful

    Numbers that are much harder to get but would be significantly more valuable would be the fraction of web traffic handled by the type of server. Just because I have a hosting company that has 3 sites doesn't mean that I'm getting traffic in the same amount that some other individuals. And MS(make that M$ so I don't get modded down) would tell you that there servers are deployed on the larger installations, the ones that need to higher performance.

    (And, I'd expect that if we looked at a graph of traffic, you'd see the GWS getting a significant share.)

    --

    I demand a million helicopters and a DOLLAR!

    1. Re:Not necessarily a good measurement by tolan's+my+name · · Score: 5, Interesting

      Lots of the _really_ big sites don't use Apache or IIS but use things like IBM_HTTP_Server (which, to be fair, IS Apache) with a Websphere backend. Also those really big site are all load balanced, portalled etc, so its hard to determin what is truely doing the serving.

    2. Re:Not necessarily a good measurement by Peer · · Score: 5, Funny

      This argument was already used before. That's why Smutcraft.net
      uses a better method to measure market share.

      They rate Apache even higher.

    3. Re:Not necessarily a good measurement by Anonymous Coward · · Score: 0

      I bet that the 2/3 ratio is also reflected in the high traffic servers.

      This is usually how statistics work. I'd be surprised if it wasn't.

    4. Re:Not necessarily a good measurement by 1lus10n · · Score: 1

      I highly doubt anyone with half a brain would run IIS on anything important. If for no other reason than possible downtime do to bugs/worms whatever, apache is guilty of the same thing.

      you would be surprised how many places run on proprietary/semi-proprietary web servers.

      but thats not really the point, if we were to compare the amount of "real work" done by an OS on the desktop unix/linux and mac would have a much higher share than they currently do. however we dont compare that, we currently compare nothing more than actuall verified installed base. which is the same thing that should be done for webservers/databases/everythingandthekitchensink.

      is see your point, but numbers such as that are subject to opinion. for instance what do i consider "traffic" ? and so on.

      thats not to mention that apache is much much faster than IIS, and cheaper.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    5. Re:Not necessarily a good measurement by Anonymous Coward · · Score: 0

      ... there are only 3322 porn sites on the internet?

      If my spam collector is any indication, I think a recount is in order.

    6. Re:Not necessarily a good measurement by Anonymous Coward · · Score: 0

      Apache typically handles more virtual hosting, which skews the figures. To compensate, many of the most popular websites use Apache. So, it is fairly even. If you did have accurate figures for traffic, Apache would probably be more popular.

    7. Re:Not necessarily a good measurement by Anonymous Coward · · Score: 0

      If it's load balancing, you definately aren't seeing IIS or a microsoft solution doing that as a solution, in 90% of cases. Even Microsoft uses linux for it's load balancing for it's critical properties, like windowsupdate, etc.

    8. Re:Not necessarily a good measurement by vasqzr · · Score: 1


      Read carefully:


      (number of sites in millions)

    9. Re:Not necessarily a good measurement by grub · · Score: 0

      That must be wrong; you're suggesting there are 3,222,000,000 (3.222 billion) pr0n sites on the net.

      --
      Trolling is a art,
    10. Re:Not necessarily a good measurement by Farmer+Jimbo · · Score: 1

      Recently Added Sites
      Site Web Server Last Checked Added On
      Hips and Thongs Apache/1.3.26 (Unix) PHP/4.2.3 31/10/2003 28/10/2003
      Facial Urge Apache/1.3.26 (Unix) PHP/4.2.3 31/10/2003 28/10/2003
      Sinful Stockings Apache/1.3.26 (Unix) PHP/4.2.3 03/11/2003 28/10/2003
      Devon's Body Shop Apache/1.3.28 (Unix) PHP/4.1.2 30/10/2003 19/10/2003
      Devin Devasquez Apache/1.3.27 (Unix) PHP/4.3.2 30/10/2003 19/10/2003
      Vaginal Cumshots Apache/1.3.26 (Unix) PHP/4.2.3 25/10/2003 15/10/2003
      Big Mouthfuls Apache 29/10/2003 15/10/2003
      Bella Donna Apache/1.3.26 Ben-SSL/1.48 (Unix) 23/10/2003 10/10/2003
      Dirty Videos Online Apache/1.3.28 (Unix) mod_auth_passthrough/1.6 mod_log_bytes/1.2 mod_bwlimited/1.0 PHP/4.3.2 FrontPage/5.0.2.2634 mod_ssl/2.8.15 OpenSSL/0.9.6b 18/10/2003 05/10/2003
      Cum On My Glasses Apache/1.3.28 (Unix) mod_auth_passthrough/1.6 mod_log_bytes/1.2 mod_bwlimited/1.0 PHP/4.3.2 FrontPage/5.0.2.2634 mod_ssl/2.8.15 OpenSSL/0.9.6b 07/10/2003 05/10/2003
      I Swallow It All Apache/1.3.20 Sun Cobalt (Unix) mod_ssl/2.8.4 OpenSSL/0.9.6b PHP/4.0.6 mod_auth_pam_external/0.1 FrontPage/4.0.4.3 mod_perl/1.25 18/10/2003 05/10/2003
      Ciera Cinema Apache/1.3.20 Sun Cobalt (Unix) mod_ssl/2.8.4 OpenSSL/0.9.6b PHP/4.0.6 mod_auth_pam_external/0.1 FrontPage/4.0.4.3 mod_perl/1.25 20/10/2003 05/10/2003
      Pregos Gone Wild Apache/1.3.20 Sun Cobalt (Unix) mod_ssl/2.8.4 OpenSSL/0.9.6b PHP/4.0.6 mod_auth_pam_external/0.1 FrontPage/4.0.4.3 mod_perl/1.25 21/10/2003 05/10/2003
      CieraSage XXX Apache/1.3.20 Sun Cobalt (Unix) mod_ssl/2.8.4 OpenSSL/0.9.6b PHP/4.0.6 mod_auth_pam_external/0.1 FrontPage/4.0.4.3 mod_perl/1.25 21/10/2003 05/10/2003
      Swank Magazine Apache/1.3.12 (Unix) 23/10/2003 05/10/2003
      Animalsex.com Zeus/4.2 02/10/2003 01/10/2003
      SexyPuss Apache/1.3.26 (Unix) PHP/4.2.2 05/10/2003 30/09/2003
      Vanessa Montagne Apache 13/10/2003 30/09/2003
      Heidi Hanggers Apache/1.3.22 (Unix) (Reliablehosting.com) 15/10/2003 30/09/2003
      Girl Curves Apache/1.3.26 (Unix) PHP/4.2.2 04/10/2003 30/09/2003

    11. Re:Not necessarily a good measurement by Wah · · Score: 1

      that's what travelocity uses, or something similar.

      A buddy of mine watches the blinken lights there. He can tell what time of day it is, and often the day itself, just by watching the traffic patterns.

      --
      +&x
    12. Re:Not necessarily a good measurement by tolan's+my+name · · Score: 1

      I like to use a calender myself, but it takes all sorts..... :)

    13. Re:Not necessarily a good measurement by Anonymous Coward · · Score: 0

      Soon, every person on earth will have their own porn site!

    14. Re:Not necessarily a good measurement by gilroy · · Score: 1
      Blockquoth the poster:

      That must be wrong; you're suggesting there are 3,222,000,000 (3.222 billion) pr0n sites on the net.


      Sounds about right to me.
    15. Re:Not necessarily a good measurement by Alan · · Score: 1

      Hi, you must be new to the internet. Would you like that in a handbasket? :)

  6. NCSA by chill · · Score: 4, Insightful

    Netcraft really needs to drop the NCSA line on the charts that don't stretch back before 2000.

    The only thing that straight orange line at 0 does is give the Sun ONE guys something to point and laugh at. And it looks like they need it.

    --
    Learning HOW to think is more important than learning WHAT to think.
    1. Re:NCSA by madprof · · Score: 2, Interesting

      What do you then incorporate it into?
      'Other' perhaps?
      Incidentally, it's not 0. Oxford Brookes Univesity in the UK still use it, hilariously.

    2. Re:NCSA by Anonymous Coward · · Score: 2, Funny

      I like it. It helps me find the bottom of the graph.

    3. Re:NCSA by Anonymous Coward · · Score: 0

      The only thing that straight orange line at 0 does is give the Sun ONE guys something to point and laugh at. And it looks like they need it.

      Feel free to disregard the fact that Netscape / iPlanet / Sun ONE web server's marketshare grew over the last few months.

      Perhaps Sun's strategy of the $100 per employee or whatever is actually working.

    4. Re:NCSA by Anonymous Coward · · Score: 0

      Perhaps it could be retroactively considered as a negative version number of Apache? After all, Apache is so-named because it started off as a set of patches to NCSA HTTPd.

  7. That's very bad for Microsoft... by Zocalo · · Score: 4, Interesting

    ...and great for Apache. The underlying message seems to be that switching from Apache to IIS will either cause your company to fail outright, or at best cost you a huge chunk of resources while you switch to and from. That fact that Network Solutions is on the list is even better, because for many managers and users NetSol is *the* .com company, and if they can't make IIS work...

    --
    UNIX? They're not even circumcised! Savages!
    1. Re:That's very bad for Microsoft... by Anonymous Coward · · Score: 5, Interesting

      I would bet that a year ago someone at Microsoft came up with an idea to increase IIS standings at Netcraft: pay a couple of domain parking companies to switch. They probably paid them for a year only, and since the year has finished, the companies in question have decided to switch back, presumably because IIS had more expensive TCO than Apache. Microsoft's original idea would have been to gain momentum for IIS and indicate it was gaining rapidly over Apache, helping it's .Net initiative look like it was going somewhere.

    2. Re:That's very bad for Microsoft... by You're+All+Wrong · · Score: 2, Insightful

      Very insightful post.

      A little bit of greasing of palms is a fairly common business practice. MS have probably seen that all that did, rather than
      persuade the rest of the world to move over to IIS, was cost MS
      money. So what comes next? I reckon the future will be MS playing
      dirtier. They'll buy up companies which have trivial web patents,
      and will sue every hosting company under the sun for "serving dynamically created content based on the user's prior browsing history" or something inane like that. (I made that one up.)

      They have to start playing dirty now. Therefore they will.

      YAW.

      --
      Your head of state is a corrupt weasel, I hope you're happy.
    3. Re:That's very bad for Microsoft... by gnu-generation-one · · Score: 1

      "That's very bad for Microsoft...and great for Apache"

      Perhaps, but realise that most of the "sites" listed in Netcraft are domain-squatters and those trying to game google; if you're hosting 27,000 one-page websites with a domain-name each, then Apache is better at doing that than any other webserver.

      Imagine trying to set those up using a Windows GUI interface... (shudder!)

      It might be more useful to have a survey of the most popular websites, for comparing what's used by the people with difficult technical problems to solve. (Fortune-x or FTSE-x doesn't count, as the size of a company is unrelated to the popularity of their website)

    4. Re:That's very bad for Microsoft... by flink · · Score: 1

      You can script IIS via its WMI interface using Windows Scripting Host. I used to have to write scripts for our site to install new customers before we switched Apache :-)

    5. Re:That's very bad for Microsoft... by Anonymous Coward · · Score: 0

      Yes, and we all know changing a web server is the sole reason many companies "fail outright" *rolls eyes*

    6. Re:That's very bad for Microsoft... by Gerald · · Score: 1

      Yeah, but with Apache's wildcard entries you only have to do it once.

  8. Apache 2.0 by g_arumilli · · Score: 4, Interesting

    Netcraft seems to show every site that I've looked at running Apache 1.3.x, and none of them running Apache 2.0.x. Is this just Netcraft being weird in attempting to determine what version of Apache a server is running (or perhaps an equivalence in transmitted data between 1.3.x and 2.0.x), or a more significant sign of the "stability" that major servers require?

    1. Re:Apache 2.0 by Anonymous Coward · · Score: 5, Informative
      The Apache version comes directly from the server signature. This is changed easily enough (we find 3K Apache 7.x sites) but most people don't bother.

      This month, we found

      • 26.3M Apache 1.x hostnames
      • 1M Apache 2.x hostnames
      • 3M Unknown Apache hostnames


      Magnus at netcraft dot com
    2. Re:Apache 2.0 by madprof · · Score: 2, Informative

      This seems about right. Apache 2.0 is still not as complete as Apache 1.3.x when it comes to support from surrounding software.
      I'm waiting for Apache::Request to be ported properly.

    3. Re:Apache 2.0 by Anonymous Coward · · Score: 1, Insightful

      Read what the previous AC said. He's Magnus from Netcraft. Netcraft reads the HTTP server signature. Compare the Security Space October results by server sig and by over all share. (Looks like November is not yet up).

      Besides stability (yes, non-Debian users, older is better), a bug issue is the lack of PHP support in Apache 2.0. Netcraft reports that PHP is the number one module in Apache. Sites that need PHP will stay with Apache 1.3 until PHP is tried tested and true in Apache 2.0.

      And to repeat an earlier AC post by Magnus, it's Netcraft with a lower case "c".

    4. Re:Apache 2.0 by larien · · Score: 1
      Many people haven't switched yet, for a number of reasons. Personally, I'm used to 1.3.x so I'm sticking with it, but the big killer for most sites is the lack of mod_perl and php other than betas.

      FWIW, the server name is transmitted in a standard HTTP/1.1 response so it's trivial to work out what kind of server something is running. As a simple test, run 'telnet [host] 80' and type 'GET / HTTP/1.1' and hit enter a few times. You'll get a response (usually an error saying invalid HTTP/1.1 request) which includes a server version.

    5. Re:Apache 2.0 by Nevyn · · Score: 2, Informative
      FWIW, the server name is transmitted in a standard HTTP/1.1 response so it's trivial to work out what kind of server something is running. As a simple test, run 'telnet [host] 80' and type 'GET / HTTP/1.1' and hit enter a few times. You'll get a response (usually an error saying invalid HTTP/1.1 request) which includes a server version.

      To be pedantic, that should really be... "A server name is trans ... what kind of server something says it's running."

      --
      ustr: Managed string API with ave. 44% overhead over strdup(), for 0-20B
    6. Re:Apache 2.0 by ScottSpeaks! · · Score: 1
      The enduring popularity of Apache 1.3.x comes from the fact that It Just Works. If it ain't broke...

      One of the key benefits of Apache 2.0.x is that its architecture allows it to perform better on non-unix platforms such as Windows, and that's not exactly a selling point for sysadmins running Apache 1.3.x on Linux/BSD/etc. Combine that lack of incentive with the need for new, less-proven 2.0-compliant modules as a disincentive, and you have a lot of people staying put.

      I suspect that most of Apache 2.0.x's growth has come (and will continue to come) in the form of new installs, where A) the new version is included with the OS, and B) there's no danger of breaking anything by using it.

    7. Re:Apache 2.0 by You're+All+Wrong · · Score: 1

      Thanks for those links I wasn't aware of that site in the past.
      For a laugh, read the description of the reports here:
      http://www.securityspace.com/s_survey/data/ man.200 310/webbug.html

      Phil

      --
      Your head of state is a corrupt weasel, I hope you're happy.
    8. Re:Apache 2.0 by horza · · Score: 3, Insightful

      Until there is an announcement on the PHP homepage stating that PHP is totally stable under Apache 2, and that moving to Apache 2 will offer far greater performance, I don't see the ratio changing in the near future. The last advice I read was "don't use mod_php under Apache 2", and haven't heard anything to the contrary recently.

      Phillip.

    9. Re:Apache 2.0 by Anonymous Coward · · Score: 0

      Not if they've modified it not to include the server version.

      The fewer fingerprints make it harder to attack. Not impossible or even difficult, but it'll keep the script kiddies at bay.

    10. Re:Apache 2.0 by StormReaver · · Score: 1

      I've been using mod_php on Apache 2 on our governmental web server since Redhat first provided RPMs for both, and I haven't had a single problem with it. If there are any problems with this combination, they have yet to appear.

    11. Re:Apache 2.0 by Mr+Bill · · Score: 1

      The first RC of Apache::Request for mod_perl2 was released a couple of days ago...

      http://httpd.apache.org/~joes/libapreq2-2.01-dev -r c1.tar.gz

      It shouldn't be long before it is released as stable

    12. Re:Apache 2.0 by Mr+Bill · · Score: 2, Informative

      Apache 2.0 has a lot more going for it than just better windows support.

      One of the most useful features is the new Filter architecture. This allows you to send you HTML through multiple stages for processing. In other words, you could have a page that is parsed by PHP, then mod_perl, and then mod_include! Although that is a contrived example and no one would want to write a dynamic page using three languages, it does explain the possibilities. A useful example of a filter in Apache2 is mod_deflate which compresses content on the way out to the client. Also, it would be simple to write a filter in mod_perl that grabbed all the response headers and printed them to a file for debugging.

      The new MPM (Multi-Processing Modules) , which has allowed for the improvement of windows support, also gives you choices on Unix in allowing you to use threaded models, or process models, or a combination of both...

      But you are absolutely right in your observation that most admins are more than happy with what Apache 1.3.x provides for them.

      I think Apache is one of the great success stories in the internet age.

    13. Re:Apache 2.0 by fferreres · · Score: 2, Informative

      PHP is pretty stable on Apache 2, at least for me. I was a bit scared at first, but after running a relatively large and badly written PHP site with not problems at all for about 3 month, I feel confident now. But yes, better wait for PHP to declare it stable.

      Don't know what other people experiences are...

      F

      --
      unfinished: (adj.)
    14. Re:Apache 2.0 by madprof · · Score: 1

      Top stuff. Thanks!

    15. Re:Apache 2.0 by Anonymous Coward · · Score: 0

      Your welcome. And thanks for your link telling me who the biggest buggers on the web are.

  9. Netcraft confirms it - IIS is dying by BabyDave · · Score: 0, Troll

    If only ...

    1. Re:Netcraft confirms it - IIS is dying by borgdows · · Score: 0

      yeah but IIS-LE (Longhorn Edition) will ROCK!!

      it will have integrated security and built-in blogging system!

    2. Re:Netcraft confirms it - IIS is dying by Tuqui · · Score: 1, Troll

      it will have integrated security and built-in blogging system!

      Bloatting system!. :)

    3. Re:Netcraft confirms it - IIS is dying by DarthSepulsive · · Score: 1

      Integrated security, well,well,well. We do live and learn :-)

    4. Re:Netcraft confirms it - IIS is dying by mikeee · · Score: 1

      Does this mean that IIS will be ported to FreeBSD?

  10. I remember previous news... by Anonymous Coward · · Score: 5, Funny

    that many large companies started using IIS.
    I got a bit nervous, but looks like using IIS is the best cure.
    It's like pi**ing against electric fences.
    You'll never do it again.

    1. Re:I remember previous news... by cablepokerface · · Score: 0

      It's like pi**ing against electric fences So you really REALLY like this game don't you?

    2. Re:I remember previous news... by cpghost · · Score: 1

      I got a bit nervous...

      Why do lemmings commit suicide? Because they have no choice, because they don't know any better, and because they follow their leader. Perhaps because their destination is so popular?

      Does popularity really matter? After all, Windows is still hugely popular on the desktop, but we use *NIX anyway. And why do we do such a silly thing? Because we can, because its technically better, and because it helps us achieve what we want.

      This netcraft survey just proves that webmasters at those domain parking companies are no lemmings (anymore?). That's a good thing. But does it really matter? Would we switch to IIS if its popularity increased? The lemmings would, be we'll resist. We'd rather watch all those lemmings heading to their final destination.

      --
      cpghost at Cordula's Web.
  11. Mono-cultures not good!!!!! by hughk · · Score: 4, Interesting
    Apache is cool and this is good for open source. However it would be better is there were more variety (perhaps Zope or others). Each approach has its own advantages or disadvantages.

    Luckily many people use different Apache versions or even platforms and certainly different modules, i.e., mod-perl or php so this isn't as bad for a risk factor. I would still like to see more variety and thus hopefully better security.

    --
    See my journal, I write things there
    1. Re:Mono-cultures not good!!!!! by jalet · · Score: 5, Informative

      Problem with Zope is that it's often installed behind Apache which serves as proxy/urlrewriter and so Netcraft may only see Apache some times. (it correctly detects Zope for my own website though)

      --
      Votez ecolo : Chiez dans l'urne !
    2. Re:Mono-cultures not good!!!!! by plumby · · Score: 1

      On the other hand, multiple variations mean that exploits fixed in one variation aren't neccessarily cascaded through to others. Having just one common version would mean that all security efforts would be focused on this one rather than being diluted.

    3. Re:Mono-cultures not good!!!!! by Anonymous Coward · · Score: 0

      Agreed, monoculture is bad. I told my former PHB about this and recommended that because we use Apache server we must immediately stop using Apache browser. He said, "You idiot! Apache doesn't have a browser!" And that is how he became my former PHB. That is to say, that is how I became his former employee.

      Seriously, the point is that we can't have an Apache monoculture the way we can have a m$ monoculture (note, that's m$ monoculture, not iis monoculture) because Apache does not make a browser, an operating system, an office suite, an sql server, etc. Maybe having a server farm that's only Apache is bad, but none of the Apache web servers in that farm is running on Apache OS and backed by Apache SQL via Apache Scripting Language, and the web pages are not written in Apache HTML Editor and tested with Apache browser on Apache OS Personal Edition, and the Apache server farm is not protected by Apache firewall behind Apache Router.

      Personally, I don't use any m$ products (anyone who has access can test the /. server logs to verify that this is at least partially true, for the whole truth, take my word as an AC), but the monoculture report is about using a single vendor for almost everything, not about using a single vendor for just one type of product.

    4. Re:Mono-cultures not good!!!!! by Anonymous Coward · · Score: 0

      No he is not your former PHB for this reason. I don't know some IIS Browser.

      A monoculture is not because you have the OS, and all the software that run on it (Windows, IIS, IE, Office, Encarta, Games...). The monoculture comme from the fact that too much of all the computers use the same software, not because all the softwares come from the same vendor.

      I can't pass next to this post without reacting...

    5. Re:Mono-cultures not good!!!!! by Anonymous Coward · · Score: 0

      It's "MS" not "M$", you idiot.

    6. Re:Mono-cultures not good!!!!! by hughk · · Score: 1
      It could be worse, one common version of IIS - one system 0wn3d, all systems 0wn3d!!!

      Seriously, I acknowledge the advantage of open source but have a real gut feeling that if the same system is everywhere then should an exploit happen, it may propagate too fast. It is a key argument against Microsoft's OS Hegemony but, can still apply even if we have the means to fix the bugs.

      --
      See my journal, I write things there
    7. Re:Mono-cultures not good!!!!! by hughk · · Score: 1
      The monoculture of having most of the net depending on a single product for an Internet exposed service is bad. I don't refer to the practice of having Microsoft underwear, because it isn't relevant. However if one exploit gets out for Apache, it isn't good to have the entire web 0wn3d before we can do anything about it.

      Lets go back to roots (ugh) of the term monoculture: It is the practice of growing a exclsuively a single crop. If you lose it to disease, you have lost the farm (literally).

      --
      See my journal, I write things there
    8. Re:Mono-cultures not good!!!!! by hughk · · Score: 1

      It doesn't really apply because at least in earlier times (Win2000), many Mircosoft products were relatively independent and didn't share a whole lot other than MFC. It was actually quite remarkable about how much MS were reinventing the wheel throughout their organisation (often square).

      --
      See my journal, I write things there
    9. Re:Mono-cultures not good!!!!! by Anonymous Coward · · Score: 0

      Yes, but apache isn't quite as "mono" as IIS/win is.

      There are a multitude of different versions out there, running on different platforms, with various patches, compiled with different compilers, linked with different libraries etc etc.

      That means that writing a worm/exploit for all apache installations (even if they all had the security hole) would likely be quite difficult.

    10. Re:Mono-cultures not good!!!!! by Anonymous Coward · · Score: 0

      Yeah, why didn't he just write ii$ as well...

    11. Re:Mono-cultures not good!!!!! by Anonymous Coward · · Score: 0

      > Luckily many people use different Apache versions or

      Yep, I'm doing my bid for Internet security by running Apache-0.9.7.

  12. OpenSSL... by admbws · · Score: 4, Informative

    Take a look at the article below. It's incredibly worrying how many sites are still using vulnerable versions of OpenSSL.

    1. Re:OpenSSL... by Przepla · · Score: 5, Insightful
      Indeed, but:
      However, relying on version numbers to determine the number of vulnerable OpenSSL sites is flawed because vendors backport security patches. So a site using OpenSSL on a Red Hat 9 system will likely report itself as OpenSSL 0.9.7a even though it isn't vulnerable to any of the issues mentioned and the situation is similar for SuSE, Debian, Mandrake, and most of the Linux distributions. Additionally, many of the vendor distributions of Apache have recently started supressing all the extra module information by default, so newer distributions (ones that are not vulnerable) are less likely to be listed.

      I'd just add, that FreeBSD does the same thing.
      --
      When in doubt, go to the library. - Ron Weasley in Harry Potter and the Chamber of Secrets
    2. Re:OpenSSL... by endx7 · · Score: 1

      Indeed, but:

      However, relying on version numbers to determine the number of vulnerable OpenSSL sites is flawed because vendors backport security patches. So a site using OpenSSL on a Red Hat 9 system will likely report itself as OpenSSL 0.9.7a even though it isn't vulnerable to any of the issues mentioned and the situation is similar for SuSE, Debian, Mandrake, and most of the Linux distributions. Additionally, many of the vendor distributions of Apache have recently started supressing all the extra module information by default, so newer distributions (ones that are not vulnerable) are less likely to be listed.

      I'd just add, that FreeBSD does the same thing.

      That's because the patch provided by the openssl team does not change the version number, and I doubt anyone outside of the openssl team is gonna want to muck around with the patch more then they need to. If the patch works, and there are no portability issues, then why bother changing it (and making it break)?

      openssl is in the base system of FreeBSD, so you can't use something like portupgrade and be done (well, you -can- use the ports version, but I only have the one in the base system installed). FreeBSD 4.9-RELEASE probably uses a version of openssl with updated version numbers.

  13. Microsoft running on Linux? by Anonymous Coward · · Score: 1, Interesting
    First the G5s... Now this?

    http://uptime.netcraft.com/up/graph?site=www.mic ro soft.com&mode_w=on
    OS, Web Server and Hosting History for www.microsoft.com

    OS Server Last changed IP address Netblock Owner
    Linux Microsoft-IIS/6.0 3-Nov-2003 213.161.82.32  Akamai
    Linux Microsoft-IIS/6.0 2-Nov-2003 207.126.99.164  Akamai
    Linux Microsoft-IIS/6.0 2-Nov-2003 213.161.82.48  Akamai
    Linux Microsoft-IIS/6.0 1-Nov-2003 66.77.165.170  Akamai Technologies, Inc.
    Linux Microsoft-IIS/6.0 1-Nov-2003 66.77.165.171  Akamai Technologies, Inc.
    Linux Microsoft-IIS/6.0 29-Oct-2003 207.126.99.158  Akamai
    Linux Microsoft-IIS/6.0 27-Oct-2003 80.15.235.144  Akamai
    Linux Microsoft-IIS/6.0 27-Oct-2003 80.15.249.120  Akamai
    Linux Microsoft-IIS/6.0 23-Oct-2003 63.211.66.102  Level 3 Communications, Inc.
    unknown Microsoft-IIS/6.0 22-Oct-2003 81.52.249.96  Akamai Technologies - US machines connected to FT AS5511
    1. Re:Microsoft running on Linux? by Anonymous Coward · · Score: 4, Informative

      From Netcraft's FAQ:

      ""
      Why do you report impossible operating system/server combinations ?

      Webservers that operate behind a caching system, load balancer, reverse proxy server or a firewall may sometimes report the operating system of the intermediate machine. Hence reports of 'Microsoft/IIS on Linux' may indicate that either the web server is behind a Linux server that is acting as a reverse proxy, or has configured the Akamai caching system such that the first request to the site goes to one of Akamai's servers [which run Linux], or as in the case of www.walmart.com has been configured to send a misleading signature.
      ""

      RTFM :-)

    2. Re:Microsoft running on Linux? by Anonymous Coward · · Score: 0

      Incidentally I did read the fine manual. The fact that requests to Microsoft's site are relayed via a Linux server is still odd.

    3. Re:Microsoft running on Linux? by aDc_73 · · Score: 1

      Perhaps not quite as interesting as this given that IBM seems to be pushing Linux elsewhere

      MS uses Akamai to help prevent DoS attacks right? What are IBM's reasons for sticking with AIX...

    4. Re:Microsoft running on Linux? by Quazion · · Score: 1

      prolly it just works so why spend time changing it ?

    5. Re:Microsoft running on Linux? by PowerBert · · Score: 5, Informative

      Ummm, could it be because it's their Unix. Hp push Linux too, and their website runs HPUX. All vendors use their own OS to run their websites. Can you imagine all the flack they would get if they didn't?

      Funnily enough SCO are the only ones that don't run their own OS on their webservers. The run Linux, whats wrong with OpenServer???

      Who really stands behind their products?

      IBM run IBM/Apache on AIX

      HP run Apache on HP-UX

      SGI run Netscape Enterprise on Irix

      Sun run SunONE webserver on Solaris

      Apple run Apache on MacOS-X

      FreeBSD run Apache on FreeBSD

      NetBSD run Apache on Net/OpenBSD

      OpenBSD runs Apache on Solaris? I'm sure thats because a uni hosts it.

      Microsoft got scared at the last worm outbreak and now hide
      2003 behind a Linux webcache farm ;-)

      The one to beat them all.............

      SCO run Apache on Linux

    6. Re:Microsoft running on Linux? by aDc_73 · · Score: 2, Interesting

      Well actually I know that not everyone eats their own dogfood all the time:

      HP using NT4

      SGI using Linux

      Sun using Netscape Enterprise instead of SunONE

      Apple moved part of their backend from MacOSX to Solaris

      My point was while IBM where encouraging other companies there are still using AIX themselves. Do they know which product they are pushing? ... On the other hand I tend to agree with Quazion's point ;-)
    7. Re:Microsoft running on Linux? by gazbo · · Score: 1, Informative

      Not at all.

      If you have a look round the netcraft site you'll find they have a page dedicated to the fact MS appears to host on Linux.

      Condensed notes: MS have vast bandwidth needs to distribute media/software round the world. Akamai are a company specialising in distributing media around the world (which means machines physically around the world so as not to saturate global links). Hence, MS use Akamai to host their media/data.

      Akamai choose to host on Linux, hence requests to MS IPs often redirect to a linux server.

      Incidentally, the fact MS use Akamai for this rather than cut their nose off by insisting on a Win/IIS from a different distribution company is why I laugh at the person (people) theorising that MS paid domain parking people to switch to Win/IIS in order to subvert Netcraft. Yeah, they're so obsessed with subverting Netcraft rankings that they don't even bother to make themselves look like they're running Windows.

    8. Re:Microsoft running on Linux? by Anonymous Coward · · Score: 0

      Incidentally, the fact MS use Akamai for this rather than cut their nose off by insisting on a Win/IIS from a different distribution company is why I laugh at the person (people) theorising that MS paid domain parking people to switch to Win/IIS in order to subvert Netcraft. Yeah, they're so obsessed with subverting Netcraft rankings that they don't even bother to make themselves look like they're running Windows.

      Netcraft stats are per host. Microsoft.com is only one host, which won't make a difference to the stats. The domain parking sites represent a very large number of hosts, however, and would be an obvious way to bias the stats.

    9. Re:Microsoft running on Linux? by dorward · · Score: 1

      > Funnily enough SCO are the only ones that don't run their
      > own OS on their webservers. The run Linux, whats wrong
      > with OpenServer???

      They can't afford their license fees, once their billing department gets themselves sorted out they are going to switch to Windows as their can't afford the licenses for the Linux kernel either.

    10. Re:Microsoft running on Linux? by Anonymous Coward · · Score: 0

      IBM is still pushing AIX in many areas.

    11. Re:Microsoft running on Linux? by Anonymous Coward · · Score: 0

      woulnd't that be RTFFAQ

    12. Re:Microsoft running on Linux? by balloonhead · · Score: 1
      No, they can't afford the licensing to run all their websites on Microsoft products.

      Plus, there's the whole issue of vendor lock-in.

      ;)

      --
      This idea was invented by Shampoo.
    13. Re:Microsoft running on Linux? by Clover_Kicker · · Score: 2, Informative
      OpenBSD runs Apache on Solaris? I'm sure thats because a uni hosts it.
      Yep. The OpenBSD FAQ has this to say:
      Although none of the developers think it is particularly relevant, this question comes up frequently enough in the mailing lists that it is answered here. www.openbsd.org and the main OpenBSD ftp site are hosted at a SunSITE at the University of Alberta, Canada. These sites are hosted on a large Sun system, which has access to lots of storage space and Internet bandwidth. The presence of the SunSITE gives the OpenBSD group access to this bandwidth. This is why the main site runs here. Many of the OpenBSD mirror sites run OpenBSD, but since they do not have guaranteed access to this large amount of bandwidth, the group has chosen to run the main site at the University of Alberta SunSITE.
    14. Re:Microsoft running on Linux? by Anonymous Coward · · Score: 0

      Netscape Enterprise == SunONE

      SGI makes Linux machines

      I don't think Apple switched to Solaris, they're using both Solaris and MacOS X machines for that site, probably to compare them.

      One of HP's previous (also sucky) CEOs, Rick Belluzo, I believe, (who also ruined SGI) has gone back home to Microsoft, but he's left a legacy.

  14. agh by Anonymous Coward · · Score: 0

    This purple scheme hurts my eyes. At least it isn't as bad as bsd. or [shudder] games.slashdot.org. Still, whoever came up with the colors should be shot.

  15. More useful measures by wizrd_nml · · Score: 2, Interesting

    They could do a lot with the numbers they already have that could be more insightful: - Show statistics by type of domain (.org, .com, .net, etc.) - Show statistics about known companies/orgnisations that would be of interest to users (Forbes 500 companies, IT companies) Maybe some kind of statistical tool can be added to Apache (perhaps as a module) that can be optionally loaded that allows netcraft and similar sites to poll Apache and get interesting information like: hits, max load, throughput, type of machine it's running on...

    1. Re:More useful measures by spencerogden · · Score: 1

      I doubt you would get any interesting information with an optional module since few large sites would accept the performance hits of all that tracking.

    2. Re:More useful measures by RealUlli · · Score: 1
      Maybe some kind of statistical tool can be added to Apache (perhaps as a module) that can be optionally loaded that allows netcraft and similar sites to poll Apache and get interesting information like: hits, max load, throughput, type of machine it's running on...

      No way! At least, an admin worth his salt would definitely disable it - type of machine would help a potential attacker, hits etc. would provide a competitor with business intelligence...

      Enabling that option IMHO really could get that admin fired...

      Regards, Ulli

      --
      Simple things should be simple, complex things should be possible.
  16. PHP & Apache 2? WTF? by Anonymous Coward · · Score: 0

    When are those dolts at PHP going to stop saying "Dudes don't use PHP and Apache 2 in a production environment neither on unix or windows. Nope. none. neither. nyet." It's supposedly due to possible thread safetly issues with some of the libraries PHP uses. BUT IF YOU USE APACHE 2'S PREFORK MPM THEN IT DOESN'T MATTER!! So I say again, WTF PHP?

  17. Platform? by s3ti · · Score: 1, Interesting

    It would have been interesting to know which platform these webservers were running on, and if the host OS has been replaced too.

    Which brings up the question why they are replacing their systems. Is it because IIS has a security history? If so, they did it for the wrong reasons, because the same can be said about Apache (go check bugtraq if you think i'm a troll). OTOH, if they replaced IIS to get rid of Windows, I can only be happy about. And so will the rest of the Slashdot crowd.

    Btw, can someone explain to me the uprise in ISS use between May 2001 and August 2001 (or even till Feb 2002)?

    1. Re:Platform? by Anonymous Coward · · Score: 0

      I believe a several webhosting companies decided to go to IIS at that time. This resulted in a disproproportionate number of domains changing to IIS.
      What this survey shows is that many of those hosting companies have decided to go back to Apache.
      You would have to ask them why they did that but I would venture that TCO, stability, performance and security were factors in the decision.

      I took your advice and just grabbed the first issue for each of IIS and Apache:

      IIS: "Multiple Web Admin Vulns".
      Exploit: not required.
      Possible outcome: server compromised.
      Fix: none available.

      Apache: "Prefork MPM DoS."
      Exploit: required, none known.
      Possible outcome: DoS.
      Fix: install 2.0.47.

      Both of these issues were reported in July.
      I'm convinced...

  18. I wonder if MS stopped there secret free license? by Pond823 · · Score: 4, Interesting

    It seems odd that the two largest parking hosts switched away from IIS at roughly the same time, when they also changed to IIS around the same time too. Maybe Microsoft made them an IIS offer they couldn't refuse, but have since changed that policy.

  19. Isn't it ironic... by Kj0n · · Score: 4, Funny

    ... that this article appears directly above the article "Lies, Damned Lies, And [Gaming] Statistics"?

  20. The monocrop argument by goombah99 · · Score: 5, Interesting
    We often here that mono cropping leaves one open to rapidly spreading global viruses. The poster child for this is the windows operating sytem and its suceptibility to rpc and outlook and active-X infections.

    The yarn goes that MS products are not so badly written, that IS II is no worse that apache, that outlook is no worse than XXXX, its just that windows runs on 95% of the worlds computers so its a target and when its infected it gets noticed.

    this apache story sort of gives a lie to this. if it runs 80% of the web servers it is the largest target by definition. Of course it does get attacked but you dont hear about this being a viral thing, spreading throught the mono crop.

    I guess one can counter this argument by saying that bussinesses that run web servers maintain their patches better thsn the devil spawned endusers. But this doesn't really wash. If bussinesses had to patch as often as Windows users did they would be screaming bloody murder since while it only costs the end user free time, it cost the bussinesses actual operating expesnes.

    --
    Some drink at the fountain of knowledge. Others just gargle.
    1. Re:The monocrop argument by cperciva · · Score: 2, Insightful

      Apache isn't quite as much of a monocrop as it might seem at first. While a newly discovered security hole is likely to affect a large proportion of the world's web servers, differences in how Apache is linked and loaded will mean that any exploit is going to be specific to one operating system. For example, there was an Apache/FreeBSD worm some time back; the security hole existed in all (unpatched) Apache installations, but the worm was only able to exploit it on FreeBSD.

    2. Re:The monocrop argument by zyridium · · Score: 1

      :/
      * The percentage is of the number of web sites, not the number of internet connected machines.
      * Because of the nature of the game there are many more active versions of apache than IIS.
      * Plus, many people want to take down Microsoft, while taking down apache isn't nearly as cool.

    3. Re:The monocrop argument by Tim+C · · Score: 1

      In addition to the points that other posters have made, you're forgetting one thing - commercial webservers are admined by professionals, while Windows machines at home are most certainly not.

      I run Windows XP Pro at home, and despite using P2P, my machine is virus and trojan free. How? I know what I'm doing, and take sensible precautions, including running a software firewall and regularly-updated AV software, and I keep my system patched.

      Similarly, commercial webservers are behind firewalls, unnecessary services are shut down, relevant patches are carefully applied, etc.

      I seem to remember that each time a Windows/IIS worm is reported here, people start moaning that according to their logs, most of the infected machines they see are on home DSL lines, "admined" by clueless users who shouldn't be on the 'net if they don't know how to keep their machines up to date and secure. If that's the case, comparing them to commercial webhosts running Apache is hardly fair.

      As for the amount of time spent patching, well, servers are (or should be!) stripped down to the bare minimum, so the number of required patches will be small. Desktop machines, on the other hand, are generally installed with a much greater variety of things - a server admin wouldn't be patching DirectX, or installing new versions of Media Player or the Journal Viewer, etc.

    4. Re:The monocrop argument by News+for+nerds · · Score: 1

      Don't you know those machines attacking WWW servers are not dedicated servers, but client machines? (i.e. Windows PCs) Surely attacker has the largest install base and Linux users can't open Outlook-targeted scripts.

    5. Re:The monocrop argument by Anonymous Coward · · Score: 0

      Actually, the number of IIS worms compared with the number of Apache worms, and their relative marketshares puts the point across pretty damn forcefully.

    6. Re:The monocrop argument by 4of12 · · Score: 1

      If bussinesses had to patch as often as Windows users did they would be screaming bloody murder

      They are.

      Migrating to something different is a huge barrier to many of these people. Even so, MS has made public statements indicating that they've heard these screams.

      --
      "Provided by the management for your protection."
    7. Re:The monocrop argument by Anonymous Coward · · Score: 0

      Yeah, but the difference is that most IIS and Windows vulnerabilities have nothing to do with serving static pages (which Apache excels at). If you're going to use IIS, you're generally going to use it for ASP, ASP.NET, etc. That's where the holes are. A more fair comparison would happen if Apache had a larger share of dynamic page content.

    8. Re:The monocrop argument by Anonymous Coward · · Score: 0

      > We often *here*

      Yikes... We often *hear*

  21. PWS by binary+paladin · · Score: 1

    Microsoft-PWS is listed as part of "Microsoft." That made me laugh. I have no idea why.

  22. Why all of the fussiness? by illuminata · · Score: 4, Funny

    With Apaches controlling this much of the internet and damn near all of the U.S. casinos, what the hell are they still bitching about?

    Who cares if you don't have the land anymore, you're filthy fucking rich!

    --


    Until Slashdot fixes the funny modifier, use insightful or interesting. The poster knows your intentions.
    1. Re:Why all of the fussiness? by Anonymous Coward · · Score: 0

      Joking aside, Indians have become the new boogeyman of the Right in California. During the recall campaign, Ahnold made a bigger-than-life fuss about how Indians casinos don't pay taxes.

      Seriously, of all the problems that California has, this is the one that he mentions? What an a-hole.

      Oh yeah, and recently congress approved a funding bill with a rider provision that gave the federal government a 15 month (un-constitutional) free pass to ignore the reconciliation of Indian trust funds that are decades overdue.

      Seriously now, have we had enough of f-ing the Indians over?

  23. Is this correct? by DerPflanz · · Score: 0, Redundant

    From netcraft: The site www.microsoft.com is running Microsoft-IIS/6.0 on Linux.

    Is it correct? Is it even possible to run IIS on Linux?

    --
    -- The Internet is a too slow way of doing things, you'd never do without it.
    1. Re:Is this correct? by Anonymous Coward · · Score: 2, Informative

      The oddity is caused by Microsoft's use of Akamai's mirroring services.

    2. Re:Is this correct? by Anonymous Coward · · Score: 0

      It brings into question the accuracy of the statistics.

      What if they're not picking up the info correctly?

    3. Re:Is this correct? by eryk · · Score: 1

      It is explained here

  24. Running IIS under wine. by Anonymous Coward · · Score: 0, Troll

    Our company has to run IIS for some propeitery bespoke ASP applications that don't currently work on any ASP emulators for linux. So we run IIS under wine for our backend which gets tunnelled through our J2EE Database (that uses mysql) that gets turned into PHP code that is served though our netbeans interface running on Apache.

    Yes, ASP can be annoying, but for lots of companies, ASP is essential for the enterprise features J2EE and PHP currently lack.

    How did we do it? Well we did what NERO corporation did (the people who make NERO burning rom), they have a howto on their site

  25. Web Hosts are actively recommending Linux ... by leoaugust · · Score: 5, Interesting

    When I hosted some of my earlier sites, web hosting resellers were advocating Windows hosting. They charged more for it, and also most of the technical help they had was for Windows and IIS ...

    After the worm season of Microsoft, I actually had the same resellers begging me not to buy Windows hosting but go for Linux, even though it was cheaper (and hence their margins lower). Most of them were putting forward the reasoning that it was cheaper (but that was never a selling point earlier) and they said that there are so many free goodies available with it ... Finally one of the ladies confided ... "My techies are going nuts just keeping up with the patches after patches .. so please, go for Linux .... please .."

    It's anecdotal ... .but I think very widespread ..

    --
    To see a world in a grain of sand, and then to step back and see the beach where the sand lies ...
    1. Re:Web Hosts are actively recommending Linux ... by Aurix · · Score: 1
      "My techies are going nuts just keeping up with the patches after patches .. so please, go for Linux .... please .."


      This has probably been mentioned before, but that attitude is very dangerous. All it takes is countless managers thinking the ol' Linux box sitting in the corner doesn't need maintenance, when a new Apache vulnerability is discovered.

      No doubt, that'd be when Microsoft comes up with some campaign saying "go with IIS, it's more secure, look at this Apache vulnerability".
    2. Re:Web Hosts are actively recommending Linux ... by Anonymous Coward · · Score: 0

      I find it easier to patch open source very quickly because I'm not still testing yesterday's patches when today's patches are announced. But I can see that managers can get complacent. Their mileages may vary.

    3. Re:Web Hosts are actively recommending Linux ... by Walles · · Score: 2, Insightful
      go for Linux, even though it was cheaper (and hence their margins lower)

      Why would their margins be lower because Linux is cheaper for the customer? The margin is the difference between what the customer pays and what it costs them to provide it. If Linux is cheaper for them, their margins can very well be higher for Linux, even though it is cheaper for the customer.

      This way, everybody benefits (except for Microsoft).

      --
      Installed the Bubblemon yet?
    4. Re:Web Hosts are actively recommending Linux ... by Spoing · · Score: 1
      This has probably been mentioned before, but that attitude is very dangerous. All it takes is countless managers thinking the ol' Linux box sitting in the corner doesn't need maintenance, when a new Apache vulnerability is discovered.

      To patch a typical Linux program -- partially because like other versions of Unix it uses inodes on the file system -- all you have to do is upgrade and optionally restart the server.

      Patching Linux is almost always trivial and can be automated using a variety of tools, some wrapped entirely in a point-and-click interface.

      --
      A firewall can not protect you from yourself. Turn off what you do not need. Do not use the firewall to do your work.
    5. Re:Web Hosts are actively recommending Linux ... by UberOogie · · Score: 1
      I would imagine because they can do a big mark-up on MS installations to cover costs + more, whereas you can't for the Linux installations because there are no costs.

      --
      "Enough of this wretched, whining monkey life." -- Marcus Aurelius, _Meditations_, Book 9, 37
    6. Re:Web Hosts are actively recommending Linux ... by Dr.+Evil · · Score: 1

      It used to be the case that the tech support is more involved with the MS boxes. I'm not sure if it is still true these days.

      Apache/Linux as a webserver is pretty straightforward for anyone who's developed in the environment at all, while a MS solution looks very different remotely than locally, it involves a bit of re-learning and hence support.

      As for margins, there's always the cult-of-efficiency arguments of "the more efficient a system is, the less people you need to keep it running", the less you can charge and the more customers you can gain... so while the MS boxes may or may not make a greater profit, they cost more and cover more paycheques. Depending on the motives of the business, it can be a good thing or a bad thing.

    7. Re:Web Hosts are actively recommending Linux ... by Anonymous Coward · · Score: 0

      -- whereas you can't for the Linux installations because there are no costs.

      Apparently you missed all the posts from RedHat customers in yesterday's discussion.

  26. Define 2/3rds of the Web by winkydink · · Score: 4, Insightful
    I offer that 2/3rds of all web servers and 2/3rds of the Web are far from the same thing. While I have no firm idea how to accurately measure the Web, I'd offer that either total content or total content that is actually viewed would make for a far more intersting statistic.

    Whether this makes Apache's percentage larger or smaller, I have no idea there either. I think that the claim as written is inaccurate.

    --

    "I'd rather be a lightning rod than a seismometer." -Ken Kesey

    1. Re:Define 2/3rds of the Web by Anonymous Coward · · Score: 1, Insightful

      Netcraft does call it the "Web Server Survey". The Netcraft name for the survey got slashedited.

    2. Re:Define 2/3rds of the Web by Anonymous Coward · · Score: 0

      Then whatever Google is using will get a huge boost in %.

    3. Re:Define 2/3rds of the Web by spectecjr · · Score: 1

      Netcraft don't count servers or boxes. They count DNS entries.

      For example, people.redhat.com and charlotte.redhat.com both come up as different entries for Netcraft's search, even though they're the same site hosted on the same box.

      Kind of makes you wonder just how accurate their figures really are, huh?

      --
      Coming soon - pyrogyra
    4. Re:Define 2/3rds of the Web by El · · Score: 1

      I think the consensus is that would make Apache's percentage larger, in that it takes more IIS boxes to handle the same load.

      --

      "Freedom means freedom for everybody" -- Dick Cheney

  27. Intriguing... by larien · · Score: 2, Insightful
    Subsequently these businesses have either failed
    Would it be overly obvious to say that there's a link between using IIS and failing? ;)
  28. with the rise of webservices... by jlemmerer · · Score: 4, Interesting

    ...apache will spread even farther. i do a lot of web service programming myself, and i have to say that the axis project maintained by a fraction of the apache group made my life a whole lot easier. i don't think that a similar framework exists in the microsoft world (yeah, i know there is .NET, but i mean in the "real" java web service world that is truly portable cross platform)

    --
    ".Sig Stealer" was here
    1. Re:with the rise of webservices... by Anonymous Coward · · Score: 0
      With the rise of webservices...

      The rise of RPC style webservices?

      Yeah, looks like a runaway success to me...
    2. Re:with the rise of webservices... by Anonymous Coward · · Score: 0

      "i don't think that a similar framework exists in the microsoft world"

      Huh? Microsoft pretty much invented web services with .NET.

  29. what is important by Anonymous Coward · · Score: 0

    is how many of the major ISP, financial companies and large corporations use a particular server. For example, Fleet used to use IIS and ASP, but the performance was horrible. Recently they switched to Netscape running JSP pages and now homelink is fast and reliable. When it was on IIS, homelink was erratic and frequently I would have a hard time logging in, or the response time for pages were minutes. If anything the whole webservices movement is helping Java camp far more than Microsoft where it matters, the enterprise world.

  30. other metric? by john_uy · · Score: 1

    since they are measuring websites including the ones that are just parked or inactive, is there any figures that relate to an active site?

    the parked domains just distorts the results to a certain degree.

    maybe a good monthly metric would be a web server survey of actual web sites. this will allow us to learn trends that companies use.

    one thing for sure, it just measures the sites to the server. is there a metric to measure hits per server type?

    --
    Live your life each day as if it was your last.
    1. Re:other metric? by kilf · · Score: 1

      Read The Article.

      It gives two tables- one for all "sites" and one for just "active sites". The "active sites" table shows Apache pulling ahead by about 1% rather than about 2%. The reason for the difference is the parked domains you mention.

      Read The Article.

  31. And remember.... by Kakemann · · Score: 2, Funny

    This popularity is the ONLY reason for the TERRIBLE security track record of Apache compared to, say, IIS.

    Oh, wait..

    1. Re:And remember.... by You're+All+Wrong · · Score: 1

      You fucker. I've got muesli on my keyboard now. _And_ - even worse - up my nose.

      Sheesh. Can't a guy even read slashdot over breakfast safely now?

      YAW.

      --
      Your head of state is a corrupt weasel, I hope you're happy.
    2. Re:And remember.... by Anonymous Coward · · Score: 0

      read a bug tracking site you dumbass. apache has had more security issues than iis in the last year. you just dont hear about them because you frequent one-sided pro-apache sites like this pos we're on now.

  32. Couldnt this also be interpreted as... by Anonymous Coward · · Score: 0

    IIS is so superior to Apache that 20% of sites are willing to pay hundreds or thousands of dollars for it (with windows server) when the alternative is absolutely free? The fact that Apache doesnt have 99% of the market share when it costs $0 amazes me. Microsofts consistant developer friendly attitude (COM+, ASP.NET, VB integration, etc.) is why people choose it.

    1. Re:Couldnt this also be interpreted as... by Diplo · · Score: 3, Interesting

      Where I work we've slowly migrated from extremely reliable but very expensive HP hardware (running HP-UX) to cheap LINUX boxes. However, we've also had to do some Windows web development, since certain clients insist on us using ASP, .NET, SQL Server etc. which necesitates using IIS on Windows 2000.

      Would anyone be suprised to learn that we are in the farcical situation of haveing to schedule the Win2K server to be rebooted twice a day, because otherwise it dies so badly that major work is needed to restart the damn thing? By comparison some of are *NIX webservers have been up for literally years...

    2. Re:Couldnt this also be interpreted as... by Anonymous Coward · · Score: 0

      Look into ChiliSoft ... I've been looking at it at work as an alternative to the Win2K/IIS servers we have for some apps (older apps, everything *new* is being done in Java on Weblogic or Websphere).

      The ASP apps are *supposed* to be ported to Java by 1st-Q next year, but judging from the developers it will probably be longer.

    3. Re:Couldnt this also be interpreted as... by Anonymous Coward · · Score: 0
      Would anyone be suprised to learn that we are in the farcical situation of haveing to schedule the Win2K server to be rebooted twice a day, because otherwise it dies so badly that major work is needed to restart the damn thing?


      I would be. It means that you (or the people involved) don't have the first fucking clue what they are doing. My Windows 2000 webservers have uptimes in the months categories only to go down for updates (and when the web server is down, the system is down, you OS uptime hoarding libido compensating morons.) I've never had an unscheduled reboot.

      Either that or it means that you've never touched IIS in your life and just want to feel cool like the rest of the GNUtards that aren't gettin' laid.
    4. Re:Couldnt this also be interpreted as... by Anonymous Coward · · Score: 0

      That is the most ridiculous statement I've ever heard. I have run Windows 2000 since its been out on several servers and my home computers. I have found it to be nothing but completely stable. It can be left running for months or years on end without needing a reboot except for hardware upgrades. I have -NEVER- had to reboot a 2k machine for anything like what you describe. Furthermore your description of the situation, and I quote, "otherwise it dies so badly that major work is needed to restart the damn thing" is so childish and non-descriptive that you clearly lack the intelligence to run anything even close to a webserver, be it *nix or 2k. Be gone you anti-microsoft FUD machine.

    5. Re:Couldnt this also be interpreted as... by Diplo · · Score: 1

      I don't have anything to do with running the webserver or the Win2K machine - I'm just a developer who has to put up with the ridiclous situation. The reason, I'm told, that it's so unstable is to do with IIS and the way it handles .com objects, especially ones written in VisualBasic that aren't properly multi-threaded. I've seen it happen time and time again - dlls registered using Component Services just suddenly stop working for arbitary reasons, and you either have to shut them down and restart them, or restart the website they are running on. We host hundreds of sites and there are a lot of components running - we're not talking about a desktop machine (were Win2K is pretty stable). When you add in flakey AODB (where a runaway process CAN bring down the machine), downtime for applying frequenet security patches etc., the whole thing becomes exteremely difficult to run.

      Now it could be the sys admins are incompetent, it could be 'dodgy' code, it could be a number of things. However, the fact stands that the Win2K machine is fundamentally a lot less robust than our *NIX machines running Apache/PHP/Perl/ProC CGIs. I, like most developers, have made f**k ups in my code, but on *NIX you just kill the process and you're done - it seems on 2K you often end up having to reboot the whole damn machine...

    6. Re:Couldnt this also be interpreted as... by Anonymous Coward · · Score: 0

      twice a day? maybe you'd want to try what we did...

      in my previous work, our direct internet connection got cut off. we had to use a proxy server. but instead of doing that, we went out and searched for "terminalable" (terminal services) servers with direct external connection. we hit jackpot. we connected, surfed all we want, played yahoo pool, and searched for porn.

      basically we forgot how many times we rebooted. but at least it wasn't our internal servers we had to reboot.

    7. Re:Couldnt this also be interpreted as... by Anonymous Coward · · Score: 0

      Imagine that, when you create bad code and use it in a way that is not recommended in high load, you get server instability.

      Just think about the logic of running a non-threaded COM object on a high-load webserver for a moment. Especially when said COMs are written in Visual Basic (why??), you're just asking for trouble.

      Registering a non-threaded COM object for use in desktop-land is fine and dandy.. using it for IIS, on the other hand, is a death sentance.

      Blaming Microsoft for these problems is also quite silly, since it is explicity documented that using non-threaded COM objects in an IIS environment is not recommended at all.

      On the other hand, an IIS server can be up for weeks at a time using real, well-coded COM objects under heavy load. Of course, anyone who thinks that non-threaded COM objects written in Visual Basis are acceptable for mission-critical web applications should probably be fired anyway. =P

  33. See what a bit of hype can do for ya? by ahfoo · · Score: 1

    I bet you anything that what happened was those companies bought the XP hype about how the new Windows would never crash again and now that we're well into the XP life cycle they've woken up to the fact that it was just more hype. Gave IIS a nice a little bump for a bit though.
    I've seen a lot of the same thing at the consumer level where people who used to ask me for help all the time went ahead and bought XP despite my forewarnings and ended up getting bit as soon as the RPC bugs started flying. It turned out to be a good thing though because this more recent round of failed hype seems to have made people more willing to try a non-Windows alternatives to applications like Explorer if not moving them all the way to a Linux desktop.
    I bet the estimates on the numbers of people using Firebird in place of IE are way too low.

  34. Number of domains a good measure? by Ed+Avis · · Score: 1

    It seems a bit silly to count by the number of domains hosted - this means that domain parking services (as mentioned in the report) inflate the numbers. Would it be possible to have a rough guess at how popular a site is (eg from Google rankings, or from traffic statistics gathered by snooping on traffic crossing some major ISP) and weight the results by that?

    --
    -- Ed Avis ed@membled.com
    1. Re:Number of domains a good measure? by Melkman · · Score: 1

      Then look at the active sites graph. Thats sites with unique pages. And yes, apache scores 2/3 there too.

  35. BEWARE OF LINKS by Anonymous Coward · · Score: 0

    For somewhat guessable reasons.

  36. Slashbot standard comment #5: by Jesrad · · Score: 1

    several companies hosting very large numbers of hostnames including Webjump, Namezero, Homestead, register.com and Network Solutions migrated to Microsoft-IIS. Subsequently these businesses have either failed, significantly changed their business model, or reverted to their previous platform
    1) Move your business to IIS
    2) See your company crumbling to its death
    3) End of profits!

    --
    Maybe we deserve this world ?
  37. STABILITY! by Anonymous Coward · · Score: 0

    check out the stability of apache too among the top sites list
    http://uptime.netcraft.com/up/today/top.avg.html
    the OS choice is interesting too

  38. httpd versus Tomcat? by ewg · · Score: 2, Informative

    According to their platform groupings, they lump Apache Coyote together with Apache httpd.

    Since Coyote is the Connector component that allows Tomcat to function as a standalone webserver, I wonder how many of "Apache" sites are running Tomcat versus httpd.

    --
    org.slashdot.post.SignatureNotFoundException: ewg
  39. A Flag by zxm · · Score: 1

    Perhaps it is the greatest victory since the open source community began fighting against Microsoft. Even Linux does not gain so much.
    Thinking of things around SCO and Red hat these days, it's an inspiring news indeed.

    --
    -- forgive me my poor Engl...
    1. Re:A Flag by Anonymous Coward · · Score: 0

      Yes, the is absolute disaster for Microsoft.

      Apache is pretty much responsible for why people can use the Net free of the MS Tax today.

  40. How many of them M$ OS by jayan · · Score: 1

    We should think how many of them moved from MS OS to *nix systems.

  41. Apache doesn't OWN anything by Cartridge+P.+Grover · · Score: 0, Flamebait

    Apache doesn't RUN the Web, and it certainly doesn't OWN anything. It's Web server software. That's all. It's like saying that Sony OWNS 30% of television. They just make the gizmo that shows the pictures. Apache could vanish tomorrow and the Web would be exactly the same (for those who matter: the users).

    1. Re:Apache doesn't OWN anything by Little+Brother · · Score: 2, Informative
      Um what I think the article is saying is that 2/3 of the sites on the World Wide Web are run by Apache software. In the English Language this is equivalant to saying "Apache [Software] Runs 2/3 Of the [World Wide] Web."

      The article doesn't claim that Apache is neccicary for the web, simply that it is well utilized.

      Going beyond the article however, without Apache there would be a fairly noticable difference in the Web to the users. Fewer low-end sites would have the capasity for advanced features as there are few other free (as in Beer, although Apache qualifies by both meanings of the word) Web Servers with the advanced features Apache can incorperate. Thus, the sites that wouldn't be able/willing to shell out for commercial web server software would use less-featured servers and have to redo their pages in a less sophisitacated form to run.

      --

      Little Brother, watching the watchers

    2. Re:Apache doesn't OWN anything by Anonymous Coward · · Score: 0

      I get the feeling the majority of 'those who matter' would be slightly pissed off if 66% of the websites they use disappeared tomorrow...

  42. Questionable by cscx · · Score: 1

    I find the article kind of strange saying that since Netcraft itself claims that NetSol's entire netblock is running Solaris...

    1. Re:Questionable by daviddennis · · Score: 2, Informative

      They switched to Windows with gigantic fanfare about a year or so ago. I was shocked and incomprehending, since it just didn't make any sense to do that given their Unix heritage.

      I guess they're now back to Solaris, which is just where they were before.

      So much for Microsoft's marketing.

      D

  43. corepirate nazi execrable ruins 2/3 of the wwweb? by Anonymous Coward · · Score: 0

    just kidding. it only looks that way, what with folks afraid & angry, failing to click for fear of getting some unpatriotic payper liesense virot, &/or their personal inf. stolen by/sold to, the most gangsterious of FraUDsters.

    pateNTdead eyecon0meter readings indicate that most of US are way past being simply annoyed buy the phonIE ?pr? ?firm? hypenosys of known corepirate felons.

    you know where to look/who to trust? get ready to see the light.

  44. all wrong.. by the+uNF+cola · · Score: 1

    can we get a measurement of distinct ip's running servers vs hostnames running servers?

    Domain name registrars just fuck it up for everyone when they switch back and forth with their hosting solutions. It's not as if there was choice on by the user to what hosting service they were using for their parked page. It is an important when choosing a final hosting service, apache or IIS...

    --

    --
    "I'm not bright. Big words confuse me. But Wanda loves me and that should be enough for you." - Cosmo

  45. Oh yeah? by Anonymous Coward · · Score: 0
    According to NetCraft the Apache web server now owns over 2/3rds of the web.

    In other news: 2/3rds of IIS servers are 0wn3d!

  46. IIS vs Apache by t_allardyce · · Score: 1

    I think this trend is mainly linked to the stange name that IIS has - its hard to pronounce two I's together where as 'Apache' is not only easy to say but sounds cool: Apache Indian, Apache Helicopter, A Patchy Web Server. Ok forget the last one.

    Also IIS is for windows only while Apache runs on a matchbox. And IIS had that little drugs problem in its past (code red), still that didnt stop bush winning. Oh and Apache is free, and open source, and not too hard to set-up.

    Sorry why does IIS run 1/3 of webservers again?

    --
    This comment does not represent the views or opinions of the user.
    1. Re:IIS vs Apache by LordLucless · · Score: 1

      It doesn't - it runs 1/5th. Other webservers make up the difference between Apache's 66% and IIS' 20%.

      --
      Just because you're paranoid doesn't mean there isn't an invisible demon about to eat your face
  47. Factual post : most secure server is NOT apache by Anonymous Coward · · Score: 5, Informative

    This valuable informative post got modded down to -1 even though it is nothing but 100% informative, and I rarely ever post it. Therefore I will post it three times in case the apache-fanboy mods it down to -1 again

    I in 400 SECURE servers is still a classic Mac Os host even cccording to netcraft !

    Because no mac in the history of the internet hosting a web server has ever been rooted or defaced remotely.

    Why?

    Because not one version of Mac OS has ever had a single exploitable hole ever discovered. (classic mac os now up to version 9.2.2 on currenlty sold g4 tolwers). OpenBSD has had no less than 5 holes (not one) in the default install in the last two years. Mac OS has had ZERO in over 7 years, even when paired up with its preferred web server app.

    The Army (www.army.mil) has used Webstar for years on macs for security.

    In fact in the entire SecurityFocus (BugTraq) database history there has never been a Mac exploited over the internet remotely. Scan it yourself.

    For years, except, for a couple months ago, the army has always used MacOS and has never had a break-in on a Mac. Unlike their other MS defacements.

    http://uptime.netcraft.com/up/graph?site=www.arm y. mil

    That is why the US Army gave up on MS IIS and got a Mac for a web server, sometimes it is a honeypot for OSX testing, and US ARmy use regular Mac OS on other internal servers

    I am not talking about FreeBSD derived MacOS X (which already had a more than a 50 exploits and potential exploits in BugTraq database) I am talking about current Mac OS 9.x and earlier which are highly sophisticated abstract-OS models.

    Why is is hack proof? These reasons :

    1> No command shell. No shell means no way to hook or intercept the flow of control with many various shell oriented tricks found in Unix or NT. Apple uses an object model for procces to process communication that is heavily typed and "pipe-less"

    2> No Root user. All mac developers know their code is always running at root. Nothing is higher (except undocumented microkernel stufff where you pass Gary Davidian's birthday into certain registers and make a special call). By always being root there is no false sense of security, and programming is done carefully.

    3> Pascal strings. ANSI C Strings are the number one way people exploit Linux and Wintel boxes. The mac avoids C strings historically in most of all of its OS. In fact even its roms originally used Pascal strings. As you know pascal strings are faster than C (because they have the length delimiter in the front and do not have to endlessly hunt for NULL), but the side effect is less buffer exploits. Individual 3rd party products may use C stings and bind to ANSI libraries, but many do not. In case you are not aware of what a "pascal string" is, it usually has no null byte terminator.

    4> Macs running Webstar have ability to only run CGI placed in correct directory location and correctly file "typed" (not mere file name extension). File types on Macs are not easily settable by users, expecially remotely. Apache as you know has had many problems in earlier years preventing wayward execution.

    5> Macs never run code ever merely based on how a file is named. ".exe" suffixes mean nothing! For example the file type is 4 characters of user-invisible attributes, along with many other invisible attributes, but these 4 bytes cannot be set by most tool oriented utilities that work with data files. For example file copy utilities preserve launchable file-types, but JPEG MPEG HTML TXT etc oriented tools are physically incapable by designof creating an executable file. The file type is not set to executable for hte hackers needs. In fact its even more secure than that. A mac cannot run a program unless it has TWO files. The second file is an invisible file associated with the data fork file and is called a resource fork. EVERY mac program has a resource fork file containing launch information. It needs t

    1. Re:Factual post : most secure server is NOT apache by HBI · · Score: 1, Troll

      This dumbass troll again - you used it three months ago and here it is again, seducing the unwary.

      The US Army's only macintoshes, to my knowledge, are used by the art departments of various units.

      If I suggested using a Macintosh web server, i'd be laughed out of the room and probably ultimately fired.

      So much for the military using a Mac web server.

      You need to stop smoking that stuff.

      --
      HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
    2. Re:Factual post : most secure server is NOT apache by javester · · Score: 2, Informative

      B4 you blow a gasket, check it out yourself - Netcraft survey of www.army.mil.

      And security thru obscurity is one strategy that does work - why heck! Even MS keeps pestering security companies not to release advisories until they get a peek at it first.

    3. Re:Factual post : most secure server is NOT apache by Anonymous Coward · · Score: 0
      Army's only macintoshes, to my knowledge, are used by the art departments

      You need more knowledge.

    4. Re:Factual post : most secure server is NOT apache by naelurec · · Score: 1

      But umm.. err .. uhh.. what about the fact that Mac OS Classic is not supported anymore and no new software development is being done on it?

      How about the fact that the benefits that you state make it impractical for real world use -- no remote administration means each server requires a tech to be onsite.

      How about the fact that the system does not have protected memory and poorly written applications and scripts can bring the system crashing down?

      How about the fact that due to its cooperative, non-pre-emptive model makes it ill-suited for running more than one application simultaneously (foreground app gets all the resources) and as a result, the only way to run a single server that can do what other server OS's do (ie run a web server, dns services, email services, etc..) is to build it as one huge monolithic application which ultimately adds extensive complexity due to the barebones nature of the OS (under the GUI of course. :)

      Needless to say, while the facts you presented might be true (I have not tried to verify), it is largely irrelevant when your talking about an unsupported OS.

    5. Re:Factual post : most secure server is NOT apache by Daniel+Dvorkin · · Score: 1

      Then your employers are idiots ... and not paying attention to what the Army is doing. (You say you're a DoD employee. Mind if I ask which branch, and what you do?) The other reply to your post gives a link that shows clearly that the grandparent poster is not a "dumbass troll," but just telling the truth. You really ought to check on things like this before you stick your foot in your mouth.

      --
      The correlation between ignorance of statistics and using "correlation is not causation" as an argument is close to 1.
    6. Re:Factual post : most secure server is NOT apache by HBI · · Score: 1

      I question Netcraft's data in this case. You should too. That's all I can say.

      --
      HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
    7. Re:Factual post : most secure server is NOT apache by marcello_dl · · Score: 1

      How about the fact that due to its cooperative, non-pre-emptive model makes it ill-suited for running more than one application simultaneously (foreground app gets all the resources) and as a result, the only way to run a single server that can do what other server OS's do (ie run a web server, dns services, email services, etc..) is to build it as one huge monolithic application which ultimately adds extensive complexity due to the barebones nature of the OS (under the GUI of course. :)

      You never did really use macOS, right? Sure, old mac multitasking was primitive (choosing from a menu freezed the app until the mouse button was released. for instance) but there were no problems in running multiple servers/clients, Open transport was robust. Crashes requiring reset on mac OS 8.6, were exceptional (in most of the cases alt-apple-esc got you to a monitor which could relaunch the desktop). I experienced more frequent , nasty crashes in win 98-2000 for sure.

      One real weakness imho was memory management requiring people to buy more ram than really needed, not multitasking.

      --
      ---- MISSING MISCELLANEOUS DATA SEGMENT --- [sigdash] trolololol
    8. Re:Factual post : most secure server is NOT apache by Daniel+Dvorkin · · Score: 1

      Oh, for God's sake. The Army's switch to WebStar on Mac was reported all over the place when it happened four years ago. It's common knowledge. Here, here, and here are some links.

      --
      The correlation between ignorance of statistics and using "correlation is not causation" as an argument is close to 1.
    9. Re:Factual post : most secure server is NOT apache by HBI · · Score: 1

      The Army's significant web infrastructure runs on a completely different platform. I'm not going to say which one, except the boxes are purple. There are not _any_ Macintosh servers in any site that I am aware of. As I said, they exist in art departments, and not even in all of those. Some prefer win32.

      You can believe a four year old news piece as you will. It's not like the military would ever allow a public assumption to continue without clarifying, right?

      --
      HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
    10. Re:Factual post : most secure server is NOT apache by David_W · · Score: 1
      I am not talking about FreeBSD derived MacOS X (which already had a more than a 50 exploits and potential exploits in BugTraq database) I am talking about current Mac OS 9.x and earlier which are highly sophisticated abstract-OS models.

      Umm...

      > telnet www.army.mil 80
      Trying 140.183.234.10...
      Connected to www.army.mil.
      Escape character is '^]'.
      HEAD / HTTP/1.1
      Host: www.army.mil

      HTTP/1.1 200 OK
      Date: Tue, 04 Nov 2003 17:10:30 GMT
      Server: 4D_WebSTAR_S/5.3.0 (MacOS X)
      Connection: Close
      Accept-Ranges: bytes
      Last-Modified: Tue, 04 Nov 2003 15:12:26 GMT
      Content-Length: 38252
      Content-Type: text/html

      Connection closed by foreign host.
    11. Re:Factual post : most secure server is NOT apache by Daniel+Dvorkin · · Score: 1

      I agree that a 4-year-old news piece, by itself, is not an adequate basis for assumptions. But the news of the switch and the fact that Netcraft still reports Army.mil running on WebStar/Mac should be enough to convince all but the most dedicated anti-Mac fanatic. If by "significant Web infrastructure" you mean back-end servers that don't talk directly to public browsers, I claim no knowledge of those.

      It's pretty obvious to me that you are, in fact, a fanatic, so I suppose I'm wasting my time. 'Bye now.

      --
      The correlation between ignorance of statistics and using "correlation is not causation" as an argument is close to 1.
    12. Re:Factual post : most secure server is NOT apache by catenos · · Score: 1

      Sigh. Why got this modded up? Only because he mentions that previous moderation was unfair? He is trolling!

      For anyone who thinks about taking him seriously, just some comments:

      He "proofs" his claim that Apache is not the most secure web server mainly by going to show that MacOS is a better operating system than others. (See? If not, think about how his arguments applies for running Apache on MacOS). That leaves only point 4 (the first one, not the one at the place of point 6), the only one talking about another webserver:

      4. Macs running Webstar have ability to only run CGI placed in correct directory location and correctly file "typed" (not mere file name extension)...

      As has Apache. So what is the point?

      File types on Macs are not easily settable by users, expecially remotely. Apache as you know has had many problems in earlier years preventing wayward execution.

      Without commenting about the correntness of this claim, if the alleged problems are gone now, what do they have to with how secure Apache is today?

      Another proof for trolling:

      2. No Root user. All mac developers know their code is always running at root. Nothing is higher (except undocumented microkernel stufff where you pass Gary Davidian's birthday into certain registers and make a special call). By always being root there is no false sense of security, and programming is done carefully.

      Yeah, and that's why Microsoft Windows 98 security is so good. NOT! Really, ask anyone serious in the security community and you get the answer that privilege separation is the way to go.

      --
      Keep an eye on which arguments are silently dropped in replies. Not always, but often times it's very telling.
    13. Re:Factual post : most secure server is NOT apache by bedessen · · Score: 1

      Why are you people still falling for and modding up this troll?

      Since when does the lack of posts on BugTraq relating to MacOS 9 have ANYTHING to do with its security? Maybe no one is seriously interested in using OS 9 for a server because its support for the most basic of Web scripting and common web server applications is rudimentary at best. If no one is interested in using it as a server then no one is going to be interested in spending time looking for exploits for it, and thus there will be no posts about it in BugTraq.

      I don't see any C64 exploits posted to BugTraq, that does not mean I want to use on as my web server. And the other arguments don't hold water either. Windows 95 has no security either, you're always running as root, and look how well that turned out. I don't see that as a "feature" at all. No command prompt? Oh yeah, that makes remote administration via SSH soooo easy. Oh, but who would want to remotely administer a server anyway. Pascal strings? That has nothing to do with the OS and everything to do with the compiler and language used to write the apps. For example, Delphi/Kylix on Windows/linux.

    14. Re:Factual post : most secure server is NOT apache by ChaosDiscord · · Score: 1

      This valuable informative post got modded down to -1 even though it is nothing but 100% informative, and I rarely ever post it. Therefore I will post it three times in case the apache-fanboy mods it down to -1 again

      It probably got modded down because it's full of inaccuracies, falsehoods, and shoddy reasoning.

      Sure, WebStar on MacOS 9.x might be really secure, but many of your arguments are spurious and stupid.

      Because no mac in the history of the internet hosting a web server has ever been rooted or defaced remotely.

      Why?

      A more interesting question would be, "Can you back that up?"

      If you insist on "Why?" and we assume it to be true, answers like, "because it's such a minority of the servers that people attack other, more popular servers" are likely.

      Because not one version of Mac OS has ever had a single exploitable hole ever discovered. (classic mac os now up to version 9.2.2 on currenlty sold g4 tolwers). OpenBSD has had no less than 5 holes (not one) in the default install in the last two years. Mac OS has had ZERO in over 7 years, even when paired up with its preferred web server app.

      OpenBSD has had several holes. Of course, several of those holes are local exploits by non-root users. Those are serious holes, but to say that MacOS 9.x lacks them is stupid. Everyone on MacOS 9.x has root-like privledges. A more honest way of saying this is that OpenBSD has several local user holes available, but MacOS 9.x has an infinite number since there is no real local security.

      In fact in the entire SecurityFocus (BugTraq) database history there has never been a Mac exploited over the internet remotely. Scan it yourself.

      BugTraq doesn't contain a listing of all possible attacks ever. It contains a list of exploits that people actual bothered to find. One possibility is that MacOS 9 was largely ignored by the security community as uninteresting.

      Also interesting is this claim of two remote attacks. Untrustworthy source? Possibly, but no less trustworthy than Mr. Coward above.

      ...I am talking about current Mac OS 9.x and earlier which are highly sophisticated abstract-OS models.

      Highly sophisticated abstract-OS models? Moderators let that one slip by? MacOS 9.x is from the dark ages of personal computers. One buggy program could easily hang the system, muck about with other programs memory, and generally hose your system. While it had an elegant user interface, it's kernel is from the era of DOS.

      2) No Root user. All mac developers know their code is always running at root. Nothing is higher (except undocumented microkernel stufff where you pass Gary Davidian's birthday into certain registers and make a special call). By always being root there is no false sense of security, and programming is done carefully.

      That's a bloody stupid claim "It's more secure because it's less secure." I'm going to demand that the military stops putting locks on their doors, after all it means that the guards will be more vigilant. The best security is defense in depth, having your web server run as a restricted user is part of a good security system. You can carefully write secure code even with additional defense.

      3) Pascal strings. ANSI C Strings are the number one way people exploit Linux and Wintel boxes. The mac avoids C strings historically in most of all of its OS. In fact even its roms originally used Pascal strings. As you know pascal strings are faster than C (because they have the length delimiter in the front and do not have to endlessly hunt for NULL), but the side effect is less buffer exploits. Individual 3rd party products may use C stings and bind to ANSI libraries, but many do not. In case you are not aware of what a "pascal string" is, it usu

    15. Re:Factual post : most secure server is NOT apache by Anonymous Coward · · Score: 0

      All the heavy duty boxen are either IRIX or Solaris.
      Mainly IRIX.

  48. OK, and? by cardpuncher · · Score: 3, Insightful

    I guess the numbers have some interest, but I'd be far more interested in what they're doing with their web servers. On the assumption that serving flat HTML is a minority interest, what, more significantly, are they using for their application development? Perl? PHP? Java? C?

    One of the main problems with IIS is that its single-process, multi-threaded operation makes it very vulnerable to threadlocks and memory leakage by various ancillary software components (database drivers, Active X stuff, etc). Debugging these problems is next-to-impossible, particularly for someone who's chosen to use IIS largely because of a familiarity with Visual Basic.

    I would not *a priori* expect threading in Apache 2.0 to work any better than IIS if it's working with, say, PHP into which you can build a myriad of library functions many of which have a single-threaded heritage.

    So, if users are moving to Apache in droves because they've found a reliable rapid development environment for multi-threaded web applications, then I'd be interested to know what (apart from Apache) was involved.

    After all, Apache (like IIS) is fundamentally no more than a dispatcher for HTTP requests. It's producing the responses that causes the trouble!

  49. Actually... by Trejkaz · · Score: 1

    I thought the more homogeneous a network of computers becomes, the easier it would be to hit them with exploits. Think 100% of the world running Apache, and a new exploit being discovered. Though I guess you would get a bit of safety by the fact that everyone is running slightly different versions.

    Funnily enough I don't see venerable Tomcat out there, the most-used Java web server out there... it must have been collapsed into the Apache group because I'm not going to believe SunONE has any real users. ;-p

    --
    Karma: It's all a bunch of tree-huggin' hippy crap!
    1. Re:Actually... by nolife · · Score: 1

      The only thing homogeneous about Apache is the name, not its implementation on the network. You can run Apache in thousands of different configurations on many different OS platforms. Yes, there are combinations of configurations and platforms that will exhibit the same characteristics but many combinations that make up an Apache installation can be far from "homogeneous".

      --
      Bad boys rape our young girls but Violet gives willingly.
  50. Hardware support by yerricde · · Score: 1

    This is why I don't agree with the Windows monopoly concept. We all know there are easily a hundred other free operating systems out there.

    Windows is a monopoly until Aunt Tillie can easily find hardware devices at Best Buy with alternative OS drivers on the included CD.

    Windows is the operating system most people in the world would choose.

    If most people would informedly choose Windows for the OS on their home machines, I'm guessing this is because of the lack of driver support in, say, FreeBSD. That's certainly why I stay on Windows, because I don't have enough money to buy a new scanner that Linux supports nor enough time to spend dozens of hours with my unsupported scanner (a Microtek ScanMaker 4850) trying in vain to reverse-engineer it. Mandrake Linux 9.2 RC1 had problems configuring my inkjet printer as well; it thinks a Canon S520 prints at 360 DPI natively when it actually prints 600 DPI, and everything on the page appears 40 percent smaller than it should be. And though Mandrake advertises support for the latest ATI Radeon video cards, it failed to configure and start accelerated X on my Radeon 9000.

    --
    Will I retire or break 10K?
    1. Re:Hardware support by Anonymous Coward · · Score: 0

      This is a red herring.

      Once upon a time if you ran Linux, then you couldn't use any scanner and most printers didn't work, you couldn't use any cam, and so on and so on...

      But that was many years ago, now Linux has drivers for most popular equipment, and they come by default in the distibution.

      It is trivial to find the list of things that is supported under Linux. I just did a search for 'linux hardware compatibility' on google.

      Then I clicked on the first link it found.

      This directed me to the Linux hardware compatability howto, which lists thousands of compatbile hardware devices.

      http://www.tldp.org/HOWTO/Hardware-HOWTO/scanner s. html

      list the sanners of which hundreds are supported, most by SANE, but dozens by independent efforts as well.

      The sane list of supported scanners is here:

      http://www.sane-project.org/sane-mfgs.html

      I paid $15 for a brand new Memorex MEM 48U that works good, even though it is only a beta driver.

      I would recommend anyone thinking of moving to Linux to print out and take the hardware compatiblity list with them before they go tech shopping, so that they will buy things that are well supported under Linux.

      Let's reward the vendors who work with us to create supported drivers by buying their equipment, even if it is for a windows box today. If you buy hardware that is supported under Linux then you have the option to move to Linux in the future. Let's start leaving our options open.

    2. Re:Hardware support by yerricde · · Score: 1

      The sane list of supported scanners is here:

      Remember that the supported scanner page also lists high-end scanners (which most home users cannot afford) and discontinued scanners (which users afraid of eBay, such as myself, cannot purchase). Is any of the listed scanners available for purchase under $150 at Best Buy or Circuit City stores? The list would prove much more useful if it had cross-references with major electronics chain stores' inventories.

      If you buy hardware that is supported under Linux then you have the option to move to Linux in the future.

      What if the Linux-compatible hardware consistently costs $100 more than the Windows-only hardware, as was the case for v.90 modems for the longest time? And how many people are supposed to predict a peripheral-lifetime in advance that they will in fact switch to another operating system?

      --
      Will I retire or break 10K?
  51. Why WinApache by yerricde · · Score: 1

    But nobody does it because Windows "already ships with a webserver".

    I run WinApache 2.0.recent on my desktop machine so that I can send files to people on networks to which Gaim doesn't support sending files. I don't run IIS because 1. my machine runs Windows 2000 Professional not the more expensive Server, and 2. though Apache is just as written in C as IIS and just as vulnerable to buffer overflows, most web server worms seen in the wild attack IIS on Windows rather than Apache on Windows.

    --
    Will I retire or break 10K?
    1. Re:Why WinApache by qmrq · · Score: 1

      IIS (or PWS in 9x) is FREE with your windows license. You can install it off the CD. It costs -nothing- and you -don't- have to have the 'server' version of NT to use it. Note that I'm just trying to correct your wrong perception that you need NT Server to run IIS - I'm not recommending you do it. ;-)

    2. Re:Why WinApache by plumby · · Score: 1

      Can you use IIS commercially without having to purchase a separate licence? I have real difficulty understanding MS's various licencing models.

    3. Re:Why WinApache by TheSunborn · · Score: 1

      But it is missing the ability to run ASP code in most versions of Windows XP. (At least that was what one of my frinds told me. I don't do ony ASP myself).

      Martin

    4. Re:Why WinApache by yerricde · · Score: 1

      [IIS] costs -nothing- and you -don't- have to have the 'server' version of NT to use it.

      If you set up IIS on a Professional version of Windows (rather than a Server version), you'll get 403.9 errors whenever a decent number of people try to access anything on your site. While IIS for Windows Server lets the administrator specify the maximum number of incoming HTTP connections, IIS for Windows Professional hardcodes it to 10 and doesn't let the administrator tweak the keep-alive timeout from its ridiculously-long default, which is the cause of most of the 403.9 errors you get when a site becomes slashdotted.

      --
      Will I retire or break 10K?
    5. Re:Why WinApache by qmrq · · Score: 1

      yes

  52. Anybody notice the drop off time by Technician · · Score: 3, Interesting

    The MS graph looked steady until May of 2002 them something drastic happened. MS took a sharp drop. Apachie at the same time to a jump up. What time did the rash of worms start again?

    --
    The truth shall set you free!
    1. Re:Anybody notice the drop off time by JediTrainer · · Score: 1

      The MS graph looked steady until May of 2002 them something drastic happened.

      According to my charts generated from my logs, the rash of worms started with CodeRed around September of 2001. Nimda followed a month or so later.

      Unless you're thinking of a different rash of worms.

      --

      You can accomplish anything you set your mind to. The impossible just takes a little longer.
  53. New servers? by Anonymous Coward · · Score: 2, Insightful

    I think that it's more significant to note that even though it already has the majority share, Apache use is growing faster than any other server. This means that when somebody decides on a new server, more often than not, it's Apache that is chosen. Microsoft seems to be fighting a losing battle here. It's also interesting to note that they group a number of different Microsoft web servers together, whilst they separate the Apache users into different groups.

  54. What kind of world do we live in ... by BallPeenHammer · · Score: 1, Funny
    ... when a free, stable web server beats out a buggy, not-secure web server from a software monopoly?

    Kids today.

  55. Re:OpenSSL... No Mac servers are insecure EVER by JohnnyBigodes · · Score: 1

    I presume you're joking, right?... I mean, given the amount of people that use Macs as webservers, why bother trying to find exploits in them? :)

  56. Microsoft isnt all bad, by t_allardyce · · Score: 0, Flamebait

    Maybe Microsoft should stick to the desktop? They have most of the market share of home users and most of the hardware support:

    3 of the most important applications to home users are web/net, office and games and Microsoft has the biggest share with all of them: IE, MS Office, Outlook - Microsoft has it all and every major game on their platform.

    Then there are the security and stability issues: most home users believe that crashing twice a day is normal and that VB script worms or NetBIOS security issues have nothing to do with Microsoft. Also they will accept that windows messaging pop-up windows with spam will appear from time to time while an admin would go ape!

    DRM is also a selling point: the RIAA/MPAA etc want it and the only way it can happen is with closed source software integrated with controlled hardware: home users won't even know or care about it but bussiness users will flat out refuse to have their machines controlled by a 3rd party.

    In short, Microsoft: stick to making windows with pretty colours and naming disks after the alphabet.

    --
    This comment does not represent the views or opinions of the user.
  57. Proprietary Apaches by Anonymous Coward · · Score: 0

    Those unknown apaches are probably just commercially modified versions...

  58. Re:That's Just Crazy - typical M$ misdirection by bit01 · · Score: 1

    M$ is cross-subsidising from it's monopoly software and also trying to create technical dependencies. Enough said.

    --

    Astroturfers are scum.

  59. Conflicting Statements by Anonymous Coward · · Score: 0

    Netcraft is also reporting that all of the web is running WebSite/3.1.13 on NT4/Windows 98.

  60. All that shows is apathy by GregWebb · · Score: 5, Insightful

    Just because many don't complain doesn't mean they're not being disadvantaged. I could steal 10 pence a day from you and you probably wouldn't notice. Does that mean my theft would be permissible?

    Impartial, informed observers have been saying for a very long time that Microsoft are a monopoly and illegally maintain this. That a major customer of theirs (HP, I believe) felt strongly enough that they disliked dealing with Microsoft sufficiently to go on record as stating that if they had alternative suppliers, they would deal with them instead, is surely a strong indication of Microsoft's nature. As is Microsoft feeling able to pressure IBM into dropping OS/2 and later SmartSuite through preferential pricing on Windows. Surely if there existed a sufficiently realistic competitive market in computer software, such tactics would have merely driven up sales of OS/2? It's not like it wasn't getting good reviews at the time.

    Microsoft are a monopoly in the legal sense, and there can be no doubt that they have significantly abused this to the detriment of both consumers and the industry as a whole to anyone who followed the trial. That users are too apathetic and uninformed to understand they have lost out is not a defence against the monopoly charge, merely and indictment of the popular media and Microsoft's few remaining competitors.

    --

    Greg

    (Inside a nuclear plant)
    Aaaarrrggh! Run! The canary has mutated!

  61. Another survey - lots of IIS in .gov by Tim+Colgate · · Score: 3, Informative
    There is another survey at Security Space.

    What's interesting about this one is that results can be viewed by domain. The highest proportion, and highest growth, of IIS seemed to be in the gov domain, where Apache is actually decreasing. IIS usage in education was also pretty high.

    Use of Apache was particularly high in Germany .

    1. Re:Another survey - lots of IIS in .gov by Anonymous Coward · · Score: 0

      And even more where there's money... Top 1000 Corporations' Web Server Top 1000 Corporations' Web Server: 53% for IIS and Apache is third!

    2. Re:Another survey - lots of IIS in .gov by Anonymous Coward · · Score: 0

      China, India, Taiwan, South Africa, Turkey, Ireland, Malaysia, Spain, Peru, Greece, Brazil & Australia have relatively large proportions of IIS according to Security Space. Many of these countries are solid emerging markets economies.

      Pakistan shows a trend where IIS is eating Apache's share starting from early 2000 onward - bizarre.

  62. Again? by Pac · · Score: 1

    I have been here from singularity to boom to burst to today's lukewarm recovery, and Apache has been running 2/3 of the Web since there is a Web. Year after year /. publishes this same Netcraft announcement, give or take a percent point.

    Apache is like Gillete: you know there are other brands, you even know a few people use those other brands but when push comes to shove and you girlfriend order you shopping for shaving tools, Gillete is always the way...

  63. Maybe.... by Anonymous Coward · · Score: 0

    maybe your mum's doing it.

    like she did me last night

    1. Re:Maybe.... by Anonymous Coward · · Score: 0

      You say bad things about my mother in front of the other villagers? I am so humiliated that I must call you to a public duel to clear the honor of my family which you have disgraced.

  64. Re:I wonder if MS stopped there secret free licens by Anonymous Coward · · Score: 0

    That doesnt even make sense since IIS comes bundled and free with 2k and .net server. There are no separate licensing deals, contracts or anything else for that matter. Your suggestion that their are shows your ignorance for the Microsoft platform and IIS. If you have nothing intelligent to say then keep it shut.

  65. That may be so, but.... by newyhouse · · Score: 1

    Sure, sure... Two thirds of people may be using that little Apache web server, but... hang on, new patch for IIS, gotta apply it... but I still use IIS. IIS is the best web server by far because... Oh wait, another patch, give me sec... OK... because it is much easier to.. Darn it, critical security patch, gotta install this one... what was I saying? Oh yeah, because it is much easier to administer and far more secure than that open source Apache.

    1. Re:That may be so, but.... by Utopia · · Score: 1

      Hmm.

      Number of IIS vulnerabilities found in IIS 6.0 = 0

      Number of Apache patches this year = 12

    2. Re:That may be so, but.... by newyhouse · · Score: 1

      Flat out untrue... Here are two examples of remotely exploitable IIS 6 vulnerabilities that were found with a cursory search: IIS 6.0 Vulnerability #1 BugTraq ID 8244 IIS 6.0 Vulnerability #2 SecurityTracker ID 1007262 Also, here is a very informative list of other security flaws in IIS 6.0: http://lists.virus.org/bugtraq-0307/msg00281.html Since we're being nice and not including IIS 5 vulnerabilities, I think it only fair that we treat Apache with the same respect and only mention version 2.0.48 vulnerabilities (the latest version). Though I tried to find one, I was unable to locate ANY remotely (or local) exploitable vulnerabilities in this latest version. What say you?

  66. Well, that's interesting but... by carlmenezes · · Score: 4, Insightful

    Wouldn't a breakup by a measure of the size in bytes of content served by the various web servers make a much more realistic figure?

    I mean, if the traffic logs and stats are not available for all the sites around, surely, a measure of the size of the content would give one a fair idea of where the heavy weights really lie?

    --
    Find a job you like and you will never work a day in your life.
    1. Re:Well, that's interesting but... by TFloore · · Score: 1
      Wouldn't a breakup by a measure of the size in bytes of content served by the various web servers make a much more realistic figure?

      I mean, if the traffic logs and stats are not available for all the sites around, surely, a measure of the size of the content would give one a fair idea of where the heavy weights really lie?
      Yeah, it would be interesting, but it would require the active assistance of the web admin. Or a serious change to the netcraft survey software.

      Right now they mostly just pay attention to the html headers and defined server name stuff. To get what you want (which I agree, would be more interesting) you'd need to do one of several things, depending on exactly what info you wanted...

      For "bytes of content served" you need to:
      A) have the web admin send you the server stats
      B) break into the system and get stats yourself
      C) monitor all traffic from that server on the local loop

      For "size of content" you need to:
      A) have the web admin send you the server stats
      B) break into the system and get stats yourself
      C) ignore the robots.txt file and crawl the entire site

      Another interesting one might be "size of content accessed" which ignores how many times it was accessed, but gives a nice measure of "dead" pages when compared to "size of content". But for that, again, you need the standard A/B.

      You see why this is unlikely to ever occur? Or do you think it is reasonable for site stats to be publicly accessible? (Personally, I don't thing that is reasonable. If you want to put that info up, feel free, but don't tell me I have to do it too.)
      --
      This is my sig. There are many like it but this one is... Oops. Frank, I've got your sig again! Where's mine?
  67. There may be more Apache servers... by yaba · · Score: 1
    ...if some sites would really show what they use in the backend. But some (mainly Windows centric) sites have a Windows server as frontend and netcraft thinks that the site is running IIS, while the real content is coming from backend servers running Apache on Unix/Linux.


    Don't believe me? Well, check what netcraft tells you about www.winbeta.org. However if you manage winbeta.com to reply with a database error, you get a PHP/MySQL error in a file in /var/...

    1. Re:There may be more Apache servers... by Anonymous Coward · · Score: 0

      oh, wait ... didnt knew PHP, apache and mysql has just dropped windows support :(

    2. Re:There may be more Apache servers... by Anonymous Coward · · Score: 0

      you get a PHP/MySQL error in a file in /var/...

      var directory doesnt exist in windows you twit

  68. In summary... by zoeblade · · Score: 1

    ...Apache wanks as high as any in Wome, but IITH may be of thome aththithtanthe.

  69. What a great resource! by zaphod_es · · Score: 1

    Now nobody has any excuse for getting p0rn which has been tainted by M$.

  70. webstar. by leuk_he · · Score: 3, Informative

    sorry, I would call this that flaimbait. But since it is well argumented i will reply...
    1> No command shell.
    Absence of features is not always a good thing. now you will have to add scripting in the webserver.

    2> No Root user
    Like windows 95?.. see 1.

    3> pascal strings
    but you can have buffer overflows with pascal strings if you fail to allocate enough memory for the string.

    4>..only run CGI placed in correct directory location..
    And if you get a script in there you have the same problem. And it is not easy to remotely administer....

    5> Macs never run code ever merely based on how a file is named. ".exe" suffixes mean nothing!
    You mean like the unix "x" attribute that was in the very first unix? This is a thing that windows has badly affected. But is this a thing that affects web servers or clients......

    4> Stack return address positioned in safer location than some intel OSes
    There are 3 kind of people.. that that can count and those who cannot 8-).
    But a better solution would be not to have the stack in memory that can be executed.

    7> There are less macs, though there are huge cash prizes for cracking into a
    The fact that there are huge cash prices would

    not be a ood advertisement for safety. And generally they are set on well protected servers that are doing nothing.
    8> MacOS source not available traditionally,
    same argument goes for ISS

    no mac web server has ever been rooted,defaced,owned,scanned,exploited, etc.
    I am 100% sure that they get scanned all the time. which makes me doubt all the other points. But then you can always blaim the user.

    1. Re:webstar. by Phil+John · · Score: 1

      8> MacOS source not available traditionally,

      same argument goes for ISS


      What has the International Space Station got to do with all of this? ;o)

      --
      I am NaN
    2. Re:webstar. by Our+Man+In+Redmond · · Score: 1

      I don't know about the rest, but:

      Absence of features is not always a good thing. now you will have to add scripting in the webserver.

      I haven't kept up with it, but Frontier 4.2 had its own scripting language. In fact there's some confusion as to whether Frontier is a language, a database, or a webserver (in fact it's all three).

      MacPerl is also available for Mac OS Classic, as is a Mac version of Python. You can also set up Frontier to run Perl scripts via MacPerl, and send AppleEvents to any scriptable application. So scripting is not a problem.

      My guess as to why there have been few to no Mac breakins is twofold:

      1. Many fewer Macs than x86 PCs, so many fewer people banging on them.

      2. Macs use PowerPCs rather than x86 chips. Lots of people know how to write code for things like buffer overflows in x86 assembly language. Few know how to do it for the PPC.

      --
      Someone you trust is one of us.
  71. Stick a fork in 'em! by amightywind · · Score: 1

    Rumours of M$ II$ demise are not exaggerated after all!

    --
    an ill wind that blows no good
    1. Re:Stick a fork in 'em! by Anonymous Coward · · Score: 0

      Corporate USA still love IIS ! Top 1000 Corporations' Web Server Why this survey never was posted on Slashdot ?

  72. Fortune 1000 run IIS with 53% ! by Anonymous Coward · · Score: 0

    I wonder why Slashdot never post link to THIS survey:

    http://www.port80software.com/surveys/top1000web se rvers/

    Microsoft IIS is the Top 1000 Corporations' Web Server Leader with 53.7%.

  73. Slightly Wrong? by Tmack · · Score: 1
    t's mainly the fact that Apache has gone up from 13.52 million to 14.37 million active sites ( a gain 846294) that makes the graph show a swing from Apache to Linux. It's not really a change from Apache TO IIS....

    You are correct that the graph is misleading. It only shows total percentages, not specific numbers, and not who is changing to what. The article claims that part of the big gain was from large registrars and hosting sites switching back to Apache from IIS ( for over one million domains ). One Million is a rather large part of the 9.4million IIS servers online (not 4mill as you state), a -10.6% change . IIS's numbers did change a good bit, going from 10.2 to 9.4 million (-8.5%), 1Million+ from servers switching to Apache according to the article. From those numbers, and assuming no one else switched, you can infer that 2.1% new servers were brought online, or 0.19million. As these NEW servers were brought online, yet still could not make up for the ones that switched, it shows that IIS is losing ground (-1% gain). The graph shows total %, meaning who has the larger market share when it comes to web servers. Total numbers are always going to be going up or staying the same for the foreseeable future. Looking at total numbers means nothing if you cant reference it to something. If you are losing %, you are falling out of the game as the other options are taking over your positions. Its quite obvious on the graph, IIS has been declining in % for a while. This graph shows data for SEVERAL YEARS (since back around when stuff first started up on the web), IIS has been declining % for over a year now. A few more months of data is not needed to see this trend. Its true that it is because Apache is being used for more new servers, but isnt that the whole point in the first place???

    TM

    --
    Support TBI Research: http://www.raisinhope.org
  74. Time traveller needs modules by nneb · · Score: 1
    we find 3K Apache 7.x sites
    I'm one of those 3000 users of apache 7. modperl has a built in temporal displacement, and the whole thing runs smoothly in only 256GB of SRAM.

    Still no decent admin GUI though...
    1. Re:Time traveller needs modules by Whelkman · · Score: 1

      I wish I had only 256GB of SRAM.

  75. Home brew a may be a part of this? by anakin513 · · Score: 1

    My thoughts, are that there are a lot of people out there running their own sites be it for blogs or business or whatnot. I've been using Apache for years. With highspeed lines becoming more prevalent it's even easier now to serve up your site from home.
    Apache makes it easy and free! It would be interesting to see the breakdown of Apache from the perspective of Private or Corporate usage.

    1. Re:Home brew a may be a part of this? by spencerogden · · Score: 1

      I don't have any numbers, but I would imagine personal use is dwarfed by the number sites at hosting companies and there various domain parking services.

  76. Re:Bubba asks by saden1 · · Score: 1

    Difference is
    1) You don't have to pay for it.
    2) You can change the product source code if you like.
    3) If you don't like it you can go with something else.

    Open Source done right is always a win-win situation. Oh and Apache is a better quality product than IIS. Why would you go with something else I really don't know.

    Now if the Apache foundation starts acting up and making demands, everyone will eventually dump Apache HTTP server and go with a fork.

    --

    -----
    One is born into aristocracy, but mediocrity can only be achieved through hard work.
  77. Not really. by WindBourne · · Score: 1

    Actually, I know of over a dozen companies that moved to apache in the last year, but modified it to emit IIS rather than apache. They basically did the Walmart route. So, no, those numbers represent a ceiling and almost certainly the real number is much lower than it.

    BTW, this is the same trick as desktop linux. When I help move companies over to Linux, I change konqueror's browser ID to be MSIE. I have found that the browser works just fine, but needs to be able to get in the front door.

    --
    I prefer the "u" in honour as it seems to be missing these days.
    1. Re:Not really. by nmg196 · · Score: 1

      Why on earth would you want to fake the server that a site is running on?

      This makes perfect sense for browsers, but no sense for web servers.

      > So, no, those numbers represent a ceiling and almost certainly the real number is much lower than it.

      "almost certain" == "uncertain" (as people here keep telling me). Many people use Linux caching appliances in front of their IIS systems. Not all of these are transparent and some make the output appear to have come from Apache on Linux. It works both ways. In fact you can even get muddled responses like "Microsoft IIS on Linux".

      The numbers won't represent a ceiling, because they exclude all non internet facing development servers and servers Netcraft hasn't been told about yet. The numbers for both Apache and IIS are both likely to be much higher.

    2. Re:Not really. by WindBourne · · Score: 1

      Why on earth would you want to fake the server that a site is running on?
      This makes perfect sense for browsers, but no sense for web servers


      Actually, it makes perfect sense. These are people who have been feed on MS and think that security is based on obscurity. So, they obscure it which saves them from SKs (but not a real cracker). check out walmart on netcraft and read the faq. I could mention these other sites, but I was asked to allow them to remain obscured.

      Many people use Linux caching appliances in front of their IIS systems. Not all of these are transparent and some make the output appear to have come from Apache on Linux.

      What set-ups do that? Check out www.microsoft.com which does just what you suggest, but shows IIS on Linux.
      Another caching is using squid on Linux, but it will also retain the IIS ID. The cacheing works great for static files, and as a filter for incoming (possible attacks), but dynamic pages are passed on to IIS and everything is left the same. So no, Apache count is not inflated due to this approach, but Linux is inflated.

      The number represents a ceiling of all IIS that netcraft can see and the fact that you can not directly change the signature on IIS. In contrast, Apache will almost certainly be higher due to obsfication of the server.

      As to intranet servers, you are correct. There could be a great deal more of these, for both IIS and Apache. Hard to say which way it would go.

      --
      I prefer the "u" in honour as it seems to be missing these days.
  78. Re:more than that by bussdriver · · Score: 1

    even if a company got a monopoly from being popular or good, it is irrelivant. Once a company gets that powerful, the bloat and greed set in---because after all its run by humans.

    Its no different that putting term limits on politians. Eventually things turn sour, and something needs to change.

    term limits == monopoly breakup

    Take apache, it breaks the pattern, because unlike the company or political rep, people can change it and fork off their own branches. That characteristic is unique to open source.

  79. Smutcraft has confirmed... by Texas+Rose+on+Lava+L · · Score: 1

    Porn is far from dead.

  80. open source close source by jason.mitchell · · Score: 1

    Who ever said open source software is usually horrible obviously thought wrong. I've used apache for over 2 years and loving it.

  81. Horrible news by Zelet · · Score: 1

    This is horrible. With Apache being such a dominate web server this means that Apache will be the most attacked (and broken) web server out there!

    Gotta love that argument.

    --
    ...And when they came for me, there was no one left to speak out for me." - Martin Niemoeller (1892-1984)
  82. End of Life for NT 4.0? by WoTG · · Score: 3, Interesting

    I wonder if the upcoming (or is it recently passed by now?) end of support for NT 4.0 is a factor. I would guess that some of the parked domains could be running on NT. With the end of support, these registrars would face either a paid upgrade to W2K/2003 or a free upgrade to Apache on Linux (or whatever) - or I guess they could stay with NT, and live without new security patches...

  83. Do you know what "peak" means? by BorgCopyeditor · · Score: 1
    IIS usage was the highest it's ever been last month - and it has since fallen by about 1%. So it's nearly at it's peak.

    OK, Kreskin. What's it going to be next month?

    --
    Shop as usual. And avoid panic buying.
  84. Discarding "parking" pages by Animats · · Score: 1

    The survey should probably discard "parked" and "redirect" pages. To be counted, a site should have to link to at least one other page in the same domain. That would count the sites actually serving content.

  85. You could look at Netcraft's Active Sites Data by blazerw11 · · Score: 1

    Step 1: Please read article.
    Step 2: Learn about Active Sites.
    Step 3: Profit.

    --
    A great many people think they are thinking when they are merely rearranging their prejudices. -- William James
  86. Re:Apache not exactly mono-culture by ReelOddeeo · · Score: 2, Insightful
    Apache is an open source project. Therefore...
    • It can be compiled for multiple architectures. (Opteron, PPC, MIPS, etc.)
    • It can be compiled with different configuration settings.
    • It can be compiled using different compilers.
    • It can be compiled using different compiler options.
    • It can be compiled on different operating systems. (Solaris, BSD, Linux, OS X, etc.)
    While in some sense Apache may be a monoculture, you can clearly see from what I've just stated that in another sense it is far from a monoculture. At least in the sense that matters, in the sense of biological diversity. It is unlikely that one single virus is going to wipe out all Apache installations.

    On the other hand, a sophisticated virus could be written based on some as yet undiscovered exploit that tries the attack for each binary variation of Apache. Using platform X, Y, and Z binary code. Compiled using P or Q compiler with A, B or C option settings.
    --

    Those who would give up liberty in exchange for security and DRM should switch to Microsoft Palladium!
  87. Re:Bubba asks by wasabii · · Score: 1

    Because Apache is not a monoculture. Think of not only how many versions of Apache there are, but how many different commercial products there are built out of Apache. Custom configurations, custom compiles. With IIS you use the thing MS tells you to use, when somebody uses Apache, who knows what they're running.

  88. Re:Bubba asks by kasperd · · Score: 1, Insightful

    Now, an Open Source system gains an overwhelming market share, and this is considered a good thing???

    Probably one of the reasons Apache is getting so large market shares is, that it never had the problems seen with other products with too large market shares. If major problems ever turns up with Apache, we will probably quickly see a fork. Until that happens just be happy with one free product with an excelent record.

    --

    Do you care about the security of your wireless mouse?
  89. SCO running Linux by Admiral+Burrito · · Score: 2, Funny
    Funnily enough SCO are the only ones that don't run their own OS on their webservers. The run Linux, whats wrong with OpenServer???

    SCO considers millions of lines of Linux to be "theirs", so in SCO's mind they are running their own OS on their webservers.

    Don't you read Slashdot?

  90. Re:HAPPU BIRTHDAY TO ME by Anonymous Coward · · Score: 0

    What's with you fucking retards and your sensitivity to banner ads? With a radio or television commercial, it interrupts whatever you're listening to/watching (unless you have Tivo, of course). With banner ads, whether they're on the top, side or bottom, YOU CAN STILL READ THE ARTICLE!!

    Why do you even fucking care? Grow up, go outside, get a date. Jeebus cripes...

  91. Problems by Anonymous Coward · · Score: 0

    I don't want to start a holy war here, but what is the deal with you Apache fanatics? I've been sitting here at my freelance gig in front of a Apache box (a P4 2.4 w/1024 Megs of RAM, on an Qwest OC3) for about 20 minutes now while it attempts to copy a 17 Meg file from one directory on the hard drive to another user. 20 minutes. At home, on my Pentium Pro 200 running NT 4/IIS 4 (On a dual T1, no less!), which by all standards should be a lot slower than this Apache box, the same operation would take about 2 minutes. If that. In addition, during this file transfer, PHP will not work. And everything else has ground to a halt. Even mod_perl is straining to keep up as I type this. I won't bore you with the laundry list of other problems that I've encountered while working on various Apache machines, but suffice it to say there have been many, not the least of which is I've never seen a Apache box that has run faster than its Windows counterpart, despite the Apache machines faster chip architecture. My 486/66 cable modem router with 8 megs of ram runs faster than this 2400 mhz machine at times. From a productivity standpoint, I don't get how people can claim that Apache is a "superior" server. Apache addicts, flame me if you'd like, but I'd rather hear some intelligent reasons why anyone would choose to use a Apache over other faster, cheaper, more stable httpd daemons.

  92. The IntRAnet factor by Tablizer · · Score: 1

    I believe that most IIS installations are used for intranets and some semi-obscure extranets. IIS cannot compete as a cheap mass production e-hotel for hosting the masses. But, they leverage existing MS infrastructure for intranets, which are less vunerable to public attacks and thus need less constant patching and tweaking. IIS also has a click-and-play interface that makes it easy to at least get up and running for somebody fairly new to web servers.

    I am not promoting IIS here, only saying that its reasons for shrinkage as a public hoster apply less to internal stuff, which is not counted by Netcraft.

  93. Re:Apache not exactly mono-culture by hughk · · Score: 1
    You are quite right, and I had already mentioned the use of modules as extensions which complicates the issue further. Mod-perl servers, for example would have different vulnerabilities to mod_php.

    However as the wosurce is available, it is easier to make exploits that work against different targets.

    Another point is simply competition amongst open source projects. One of the best things for Linux is BSD and vice-versa and the same can be said for KDE and Gnome. They are different appraches to a common solution, and each can give the other ideas.

    --
    See my journal, I write things there
  94. Servers, OS for top sites by KMSelf · · Score: 1

    Good point. So I ran some numbers for the top 100 English, and top 500 global, sites identified by Alexa

    After collecting the list of sites, I ran them through the Netcraft What's That Site Running query page.

    I normalized OS for all Windows systems, and trimmed the variants for webservers.

    Results (partial as Netcraft query is still running):

    Top 100 English Language Sites - OS

    Total sites: 100

    44 GNU/Linux | 25 Microsoft Windows (NT, 2K, XP, 2K3) | 13 Sun Solaris 8 | 7 Sun Solaris | 4 unknown operating system | 4 FreeBSD | 1 Sun Solaris 9 | 1 Apple MacOSX | 1 HP-UX

    Top 100 English Language Sites - Webserver

    Total sites: 100

    43 Apache | 26 Microsoft-IIS | 13 Netscape-Enterprise | 3 GWS | 3 AOLserver | 2 Zeus | 1 unknown | 1 thttpd | 1 Stronghold | 1 Squeegit | 1 Roxen | 1 Resin | 1 Rediff | 1 Bellsouth PWP server V1.0(4) | 1 AV | 1 Apache Tomcat

    Top 500 Global Sites - OS

    Total sites: 418

    154 GNU/Linux | 101 Microsoft Windows (NT, 2K, XP, 2K3) | 43 Sun Solaris | 30 FreeBSD | 27 Sun Solaris 8 | 25 unknown | 3 Solaris 9 | 3 IBM AIX | 2 NetApp NetCache | 2 Compaq Tru64 | 1 Apple MacOSX | 1 HP-UX

    Top 500 Global Sites - Webserver

    Total sites: 421

    177 Apache | 111 Microsoft-IIS | 43 Netscape-Enterprise | 12 GWS | 8 Zeus | 6 unknown | 4 thttpd | 4 Stronghold | 3 Resin | 3 AOLserver | 2 IBM_HTTP_SERVER | 2 AV | 2 Apache Tomcat | 2 Apache Coyote | 2 Apache-AdvancedExtranetServer | 1 Y.G.Apache-SSLv3 | 1 Virgilio (c) WebServer | 1 .V08 Apache | 1 T-httpd | 1 Squeegit | 1 Roxen | 1 Rediff | 1 Oracle9iAS (1.0.2.2) Containers for J2EE | 1 Jetty | 1 IIS | 1 IBM_HTTP_Server | 1 Bellsouth PWP server V1.0(4) | 1 AkamaiGHost

    I would have posted a nicely formatted quasi-tabular post, but Slash is dinking me for short lines and syntactic sugar. So you get pipe-delimited. Bitch to Malda.

    --

    What part of "gestalt" don't you understand?

  95. Re:Apache not exactly mono-culture by ReelOddeeo · · Score: 1

    I'm not sure I agree that having source makes exploits any easier.

    Exploits are still in binary. For a particular processor. For a particular compiler, it's calling conventions, stack layout, etc.

    --

    Those who would give up liberty in exchange for security and DRM should switch to Microsoft Palladium!