If we're talking about webservers, zone-h.com is a great resource. A quick examination of thier defacement stats shows that linux based webservers are hacked more often than windows web servers.
Granted... these are only webpage defacements that have been reported to zone-h....
It's generally accepted that there are three systems for authentication. Something you know (knowledge based authentication), Something you have (Token based authentication), and Something you are (Biometric based authentication). Each type of authentication has its strengths and weaknesses. An example of a few strengths and weaknesses are:
Knowledge based: A user can forget the "secret".
Token based: Token can be stolen or lost.
Biometric based: User cannot obtain a replacement if the original is compromised.
It's also generally accepted that a combination of different authentication methods is strongest (but not necessarily the most useable/ convenient)
Although each authentication system is unique in the way it provides authentication, all have the same fundamental weakness.... reliance on fallible human beings.
I chose passphrases as my Masters Thesis topic (hpu.edu) and was amazed (and in some cases, shocked) regarding some of the research I came across!
We (geeks/nerds/slashdotters) need to remember that not every problem can be solved by technology. We're quick to point out that Linux/Unix/Solaris/everything is a lot better than Windows, but the problem isn't convincing users of the technical superiority of other technologies over Windows, is more of a problem with Organizational/Cultural change.
Organizational change is something that affects every new technology/policy/business merger/etc... Business schools and savvy business people understand the importance of Organizational/Cultural change and entire curriculums and degrees have been devoted to teaching business people how to effect successful change.
Windows and MS products (MS Office for example) is not just "software" that users are familiar with, its part of their business/personal culture. We can't expect users to "just switch" to firefox or Linux, even if all the literature says they should. This isn't a problem that will be solved by geeks writing more efficient/secure code, it's a problem that will be solved by savvy business people who understand the benefits of moving away from Microsoft AND who also understand how to effect successful organizational/cultural change within thier organization.
I must say, I'm always a little disappointed in todays games. It seems like todays game are the same as last years, but with better graphics.
I started playing computer games on an 8088 with 256k of memory. I couldn't wait to get home and play Kings Quest or Space Quest or (if I get past the age check) Leisure Suit Larry. Even my parents didn't mind me playing these types of games (they never knew about LSL). I loved the problem solving and the "adventure" of each game. Me and my friends would call each other as soon as a new item was acquried or a difficult problem was solved.... The experience of the game made the characters timeless, not the 16 color graphics and blocky adversaries. King Graham, Roger Wilco, and Larry Laffer will always have a special place in my heart.
I'm just not interested in today's games (except Doom 3.... I cannot tell a lie). I might play for a couple weeks... then thats it, into my CD archive, never to be touched again.
It seems todays games take full advantage of the most current hardware, but little advantage of creativity and human brain power....
I disagree, and I present a few examples of my position:
Starbucks - I'm not talking about the specialty coffee (mochas, frappo's, latte), but the regular coffee. Can you "readily tell" the difference between Starbucks coffee and 7-11 coffee? What about Dunkin Doughnuts coffee? Why then can Starbucks charge a premium on their coffee?
Clothing - What is the difference between a $40 pair of Levi blue jeans and a $200 pair of Versace jeans? Are Versace jeans made of a special type of denim? Could you "readily tell" the difference between the two if all tags and identifying markings were removed?
Prescription drugs - What is the difference between brand name drugs and generic drugs? They are made of the same ingredients. They taste the same. They both went through the same approval processes, but brand name drugs are still significantly more expensive than generic drugs... can you "readily tell" the difference between a brand name drug and a generic drug if all identifying markings were removed?
This is why counterfeiting is so rampant and easy to do. Many times all a counterfeiter has to do is add a tag or marking similar to a popular brand. Branding doesn't necessarily represent differences in products in order to be effective...
Great Idea! New technical concepts and products always excite me. We must keep one thing in mind however, hackers/crackers/spammers/whatever you want to call them are clever and very imaginative people. Single concepts and technologies will be overcome and bypassed. The security/spam fight needs to be a continuous and evolving process. One cannot simply rely on a single product or conceptual model to end malicious actions. When people start realizing that keeping computers secure is a process and NOT a product, the world will be a lot safer and secure.
Branding is a strong advantage when it comes to marketing a product. When basic Strengths, Weaknesses, Opportunities, and Threats* (SWOT) analysis is done on any well known business, strong brand name recognition is almost always considered an advantage.
A great example is another Java maker, Starbucks.... Very few people are willing to pay 3 bucks for plain, regular coffee from 7-11 or McDonalds, but may are willing to fork over 3 bucks if the coffee comes in a cup with a big green Starbucks logo.
Secondly, SUN is trying taking steps to improve its strategic position. Put yourself in SUNs position, your strongest product is JAVA. Appliances all over the world use JAVA, JAVA is taught in most colleges and universities, JAVA is widely used on the Internet, and most importantly (from SUNs point of view) JAVA isn't making SUN the money it could be.
If I were on SUN's team, my first step would ensure regular people (moms, dads, and non-slashdotters) realize how widespread JAVA is and how "good" it is for computing. Then I would ensure regular people associate JAVA with SUN. Thirdly, (to the dismay of most slashdot readers) I would use my JAVA = SUN association to make money.
SUN will be criticized for making moves to strengthen its position and SUN will be criticized for NOT making moves to strengthen its position, so ignore the critics, make solid technical and business decisions and do what every business was designed to do, make some money
Actually.... Windows XP has been Pwn3d several times.....
If we're talking about webservers, zone-h.com is a great resource. A quick examination of thier defacement stats shows that linux based webservers are hacked more often than windows web servers.
Granted... these are only webpage defacements that have been reported to zone-h....
It's generally accepted that there are three systems for authentication. Something you know (knowledge based authentication), Something you have (Token based authentication), and Something you are (Biometric based authentication). Each type of authentication has its strengths and weaknesses. An example of a few strengths and weaknesses are:
Knowledge based: A user can forget the "secret".
Token based: Token can be stolen or lost.
Biometric based: User cannot obtain a replacement if the original is compromised.
It's also generally accepted that a combination of different authentication methods is strongest (but not necessarily the most useable/ convenient)
Although each authentication system is unique in the way it provides authentication, all have the same fundamental weakness.... reliance on fallible human beings.
I chose passphrases as my Masters Thesis topic (hpu.edu) and was amazed (and in some cases, shocked) regarding some of the research I came across!
We (geeks/nerds/slashdotters) need to remember that not every problem can be solved by technology. We're quick to point out that Linux/Unix/Solaris/everything is a lot better than Windows, but the problem isn't convincing users of the technical superiority of other technologies over Windows, is more of a problem with Organizational/Cultural change.
Organizational change is something that affects every new technology/policy/business merger/etc... Business schools and savvy business people understand the importance of Organizational/Cultural change and entire curriculums and degrees have been devoted to teaching business people how to effect successful change.
Windows and MS products (MS Office for example) is not just "software" that users are familiar with, its part of their business/personal culture. We can't expect users to "just switch" to firefox or Linux, even if all the literature says they should. This isn't a problem that will be solved by geeks writing more efficient/secure code, it's a problem that will be solved by savvy business people who understand the benefits of moving away from Microsoft AND who also understand how to effect successful organizational/cultural change within thier organization.
I must say, I'm always a little disappointed in todays games. It seems like todays game are the same as last years, but with better graphics.
I started playing computer games on an 8088 with 256k of memory. I couldn't wait to get home and play Kings Quest or Space Quest or (if I get past the age check) Leisure Suit Larry. Even my parents didn't mind me playing these types of games (they never knew about LSL). I loved the problem solving and the "adventure" of each game. Me and my friends would call each other as soon as a new item was acquried or a difficult problem was solved.... The experience of the game made the characters timeless, not the 16 color graphics and blocky adversaries. King Graham, Roger Wilco, and Larry Laffer will always have a special place in my heart.
I'm just not interested in today's games (except Doom 3.... I cannot tell a lie). I might play for a couple weeks... then thats it, into my CD archive, never to be touched again.
It seems todays games take full advantage of the most current hardware, but little advantage of creativity and human brain power....
I disagree, and I present a few examples of my position:
Starbucks - I'm not talking about the specialty coffee (mochas, frappo's, latte), but the regular coffee. Can you "readily tell" the difference between Starbucks coffee and 7-11 coffee? What about Dunkin Doughnuts coffee? Why then can Starbucks charge a premium on their coffee?
Clothing - What is the difference between a $40 pair of Levi blue jeans and a $200 pair of Versace jeans? Are Versace jeans made of a special type of denim? Could you "readily tell" the difference between the two if all tags and identifying markings were removed?
Prescription drugs - What is the difference between brand name drugs and generic drugs? They are made of the same ingredients. They taste the same. They both went through the same approval processes, but brand name drugs are still significantly more expensive than generic drugs... can you "readily tell" the difference between a brand name drug and a generic drug if all identifying markings were removed?
This is why counterfeiting is so rampant and easy to do. Many times all a counterfeiter has to do is add a tag or marking similar to a popular brand. Branding doesn't necessarily represent differences in products in order to be effective...
Thanks for the discussion
Great Idea! New technical concepts and products always excite me. We must keep one thing in mind however, hackers/crackers/spammers/whatever you want to call them are clever and very imaginative people. Single concepts and technologies will be overcome and bypassed. The security/spam fight needs to be a continuous and evolving process. One cannot simply rely on a single product or conceptual model to end malicious actions. When people start realizing that keeping computers secure is a process and NOT a product, the world will be a lot safer and secure.
A great example is another Java maker, Starbucks.... Very few people are willing to pay 3 bucks for plain, regular coffee from 7-11 or McDonalds, but may are willing to fork over 3 bucks if the coffee comes in a cup with a big green Starbucks logo.
Secondly, SUN is trying taking steps to improve its strategic position. Put yourself in SUNs position, your strongest product is JAVA. Appliances all over the world use JAVA, JAVA is taught in most colleges and universities, JAVA is widely used on the Internet, and most importantly (from SUNs point of view) JAVA isn't making SUN the money it could be.
If I were on SUN's team, my first step would ensure regular people (moms, dads, and non-slashdotters) realize how widespread JAVA is and how "good" it is for computing. Then I would ensure regular people associate JAVA with SUN. Thirdly, (to the dismay of most slashdot readers) I would use my JAVA = SUN association to make money.
SUN will be criticized for making moves to strengthen its position and SUN will be criticized for NOT making moves to strengthen its position, so ignore the critics, make solid technical and business decisions and do what every business was designed to do, make some money
Thoughts?
* Porter, M. Harvard Business School