Windows isn't secure out of the box. File system and registry ACLs are completely fucked (especially directory inheritance, eg if u install just one driver, just one appli, copy just one file from eg system32 etc. u probabily have files/registry entries owned by Everyone with full control). There are too many unused serviced / subparts active by default and some others bloat around. Windows can be hardened with a lot of work (and a lot of 3rd party tools/utilities, coz lack of non-gui and admin/scriptable friendly tools), but ISN'T secure OUT-OF-THE-BOX. Many Linux/Unix are also full of bug/very unhardened by default. Obsd is still too opened imho (too many services, lot of unused +s), but the auditing of all the kernel/user space is a very good idea, and the design is very KISS/useful. Obsd rocks!
people at Mindcraft, please configure the NT server at www.mtnsms.com. I never get an "HTTP/1.1 Server Too Busy" from the old sms server (Netscape+Solaris) or other heavly-loaded non NT server's like yahoo, altavista or slashdot
Slashdot Mirror
Windows isn't secure out of the box. File system and registry ACLs are completely fucked (especially directory inheritance, eg if u install just one driver, just one appli, copy just one file from eg system32 etc. u probabily have files/registry entries owned by Everyone with full control). There are too many unused serviced / subparts active by default and some others bloat around. Windows can be hardened with a lot of work (and a lot of 3rd party tools/utilities, coz lack of non-gui and admin/scriptable friendly tools), but ISN'T secure OUT-OF-THE-BOX. Many Linux/Unix are also full of bug/very unhardened by default. Obsd is still too opened imho (too many services, lot of unused +s), but the auditing of all the kernel/user space is a very good idea, and the design is very KISS/useful. Obsd rocks!
best regards
Kobaiashi
yeah, really fun..
people at Mindcraft, please configure the NT server at www.mtnsms.com. I never get an "HTTP/1.1 Server Too Busy" from the old sms server (Netscape+Solaris) or other heavly-loaded non NT server's like yahoo, altavista or slashdot