Slashdot Mirror

← Back to Stories (view on slashdot.org)

Security FUD On Linux

Posted by Hemos on from the throwing-it-around dept.

bobmatnyc writes "InfoWorld reports that Microsoft is planning an "security assault on Linux" by hyping results of a commissioned study pointing to the number of security holes in Linux vs. Windows, the number of days it takes to fill the patches, and by raising questions as to the reliability of code submitted throught the OS process. I suppose if they focus very narrowly on one measurement of security, completely ignore script-level vulnerabilities, default settings vulnerabilities (such as root access for all users), and the demographics of the user population, as well as a zillion other things I'm not clever enough to think of off the top of my head, they may have a point. "

15 of 679 comments (clear)

  1. Finally! by Anonymous Coward · · Score: 5, Funny

    I've been waiting years for Security FUD to run on Linux. I'm glad someone was able to port this over from Windows.

    1. Re:Finally! by msh104 · · Score: 5, Funny

      if that would just be all, 100 dollar on it that they are going only going to compare limitations of redhat only (perhaps even an old version) with their microsoft product. why don't they just spend that money and time on fixing bugs in windows instead of finding them in linux. perhaps we should create a bugzilla for them so they can post the problems they find there, i am sure someone will fix them.

    2. Re:Finally! by Anonymous Coward · · Score: 2, Funny

      Because they did that for a few weeks, that's when they discovered that marketing people do not have great coding skills...

  2. Great news! by DaHat · · Score: 5, Funny

    This is such good news for me, and here I was, ready to throw windows out of my life and become a linux guru, thanks microsoft for showing me what a mistake that would be!!!

    --
    Help Brendan pay off his student loans
  3. Re:Talk about shooting yourself in the foot by beacher · · Score: 4, Funny

    There are 5 stages of denial - denial, anger, bargaining, depression, and acceptance. Wonder which stage this PR campaign fits?

  4. Re:Moving weel on into stage 3... by znode · · Score: 3, Funny

    You mean GandhiCon 3...

  5. Re:Another 'comissioned' report... by frodo+from+middle+ea · · Score: 3, Funny

    Truth (Marketing definition) :- A blatant lie, told with utmost confidence, and backup up by forged yet sensational statistics and meaningless pie-charts, and bar graphs.

    --
    for the last time people, I am "frodo from middle eaRTH", not "middle eaST".
  6. Re:Easy Question to Ask by Anonymous Coward · · Score: 4, Funny
    If only applying patches were all one had to do to administer a Windows box! Due to Microsoft's delayed reaction times, it goes something more like this:

    Wake up, day 1, to phone call saying "all our computers are shutting down randomly!" You grumble and go to work.

    At work, you pop in your trusty f_prot or other comparable antivirus software and BAM! There's Blaster/SoBig/Klez/whatever staring you in the face. You yell at a random staffer for opening attachments at work.

    You begin isolating and cleaning all infected machines. You run scans on a few other machines just to make sure.

    You lecture the entire office once again on how it never really is a cool screensaver or neat program that their friend sends them in the e-mail.

    Two hours later someone comes back to your room carrying a printout of an e-mail with an attachment. "Is this a virus?" They ask. You cringe. The printout contains the words "application/octet-stream." You manage to croak something and nod hoarsely.

    You grab your antivirus disk again and go clean the Klez off all the machines in billing. For a second time. You curse Outlook violently at this point and time. You are probably becoming irrational and violent, like an enraged monkey.

    You go home at the end of the day and dream of playing Russian roulette with a shotgun.

    This continues for a week until Microsoft releases the patch, which you download and install. You think everything will be OK for a while.

    You get a call the following morning. Some idiot brought his laptop up from home, and his kids had been using it. You now have 30 more viruses to clean! Fun!

    You tell your boss that he could pay you 1/3 of the pay he does (minus overtime) if he'd just go buy some Macs or let you install Linux on the office computers. He strokes his pointy hair and laughs at you.

    You die cold, bitter and alone, and Bill Gates torments your soul for all eternity.

  7. Re:Talk about shooting yourself in the foot by azzy · · Score: 2, Funny

    There are 5 stages of denial.

    * denial 1
    * denial 2
    * denial 3
    * denial 4
    * profit.. er.. denial 5

  8. Balmer's PR mistake by ortholattice · · Score: 3, Funny
    [Balmer] questioned the notion that the open source's community approach to fixing problems was superior to Microsoft's. "Why should code submitted randomly by some hacker in China and distributed by some open source project, why is that, by definition, better?"

    That should have been, "terrorist hacker in China."

  9. Re:Easy Question to Ask by mahdi13 · · Score: 2, Funny

    I'm sorry, I work in IT in the U.S. What is this "overtime" of which you speak?

    One of those foreign mythical events, very simular to a "bonus"

    --
    "Some things have to be believed to be seen." - Ralph Hodgson
  10. Linux and Security Holes by jd · · Score: 4, Funny
    Inspired by this research, I sought to find other examples of security holes in Linux which do not occur in Windows.
    • Linux is more stable, thereby giving crackers more time to break passwords.
    • By not fixing things, Microsoft Windows causes crackers to become lazy and slothful, so when a patch does arrive, the cracker won't be expecting it.
    • Many Linux distros use MD5 hashing for passwords, which is much slower than just storing in plain text, making it possible to run a denial-of-service against a Linux box.
    • By renaming COMMAND.COM to CMD.EXE, Windows is secure against DOS attacks. At least, those up to 6.22.
    • Windows cannot trigger world chaos in safe mode. It's disabled.
    • By using all available memory, Windows cannot run additional viruses.

    --
    It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
  11. Re:Reward Program? by GooberToo · · Score: 2, Funny

    Microsoft is taking security seriously.

    LOL. The correct quote is, "Microsoft 's Marketing Group is taking security hype seriously."

    I think it was a misprint. Seems Bill doesn't know anything about the security initative that his marketing group spoke of.

  12. Re:Bill Clinton also got caught lying... by dougnaka · · Score: 3, Funny
    "The British Government has learned that Saddam Hussein recently sought significant quantities of uranium from Africa." Saddam Hussein DID try to get significant quantities of Uranium out of Africa. The current problem is the Intelligence community can't find his supplier, Francis Sonto Mbomam. Seems the only contact between him and Saddam was via email. But he did say he had $20.5M (TWENTY MILLION FIVE HUNDRED THOUSAND POUNDS OF URANIUM) for transfer to Saddams Uranium account.

    --
    My Linux Command of the Day site : LCOD
  13. Re:ha ha... by KD5YPT · · Score: 3, Funny

    Windows is awesome, Microsoft are nice people. Linux are the OS for the Communists and written by a bunch of hackers.

    Now Bill Gates, pay up.

    --
    In US, you can easily buy enough major firearms to wipe out your neighbourhood but a few little fireworks are banned.