Breakdowns of Website Defacement by Platform

SkiifGeek writes "Zone-H have recently posted the statistical breakdown of the collected website defacements from the last few years. Surprisingly, in 2007 more Linux servers suffered a successful attack than all versions of Windows, combined. Similarly, more Apache installations were successfully attacked than all IIS versions combined. A day after posting this data, Zone-H have questioned the appropriateness of continuing to operate the archive. Despite the valuable information that can be gleaned from the service, it may soon be lost to the world. The natural successor to the now-defunct Alldas archive of defaced websites, Zone-H's archive maintains records of over 2.6 million defaced sites but may be shut down due to the continuous accusations of impropriety leveled against them any time they disclose and mirror a reported defacement."

Comments

Bad PHP Scripts

[Foofoobar]

This report draws poor conclusions and blames the OS and the server for badly written PHP apps. Badly written PHP apps have been the bane of the LAWP community and now this is haw they make Linux look bad. This is just another FUD attack.

Re:Here are (very simple) ratio adjusted numbers

[Macthorpe]

Apache now only serves 50.93% of all websites (Netcraft confirms it!) compared to IIS's 35.56%. That would put the ratio at 1.43, and therefore your scaled defacements on Windows using the same calculationss would be 199,800, still 100,000 lower than defacements on Linux.

Also, Apache works on Unix, FreeBSD, Solaris, Novell NetWare, and Mac OS X as well as Linux and Windows. That further skews the figures, but not in a known direction.

this is flawed and meaningless. Pretty much, yeah.

Re:Websight??

[ArAgost]

In soviet Russia, web surfs you!