RE: [Full-Disclosure] aside: worm vs. worm?

[Darren Bennett <DARREN.L.BENNETT@saic.com>]

I disagree.. MS would have been hit harder than other OS's regardless of
the number of paying customers. The argument that Microsoft is the most
popular and therefore the most hacked is inaccurate. Apache is on more
than 2/3 of all web servers and IIS is STILL the most hacked. Sendmail
is on the majority of all (internet facing) email servers and Exchange
is the most hacked. Do I think Microsoft tries to screw up? NO.. they
just seem to have a gift. It is very hard to retrofit a ship to be a
submarine, and the same is true when you try and make a non-networked
application (windows) a networked OS. Unix/Linux/etc.. were designed to
be networked and secure, that gives them the edge (and always will).

	-DB

On Tue, 2003-08-12 at 07:44, Andrew Thomas wrote:
> > From: Mike
> > Sent: 12 August 2003 12:11
> > Subject: RE: [Full-Disclosure] aside: worm vs. worm?
> > 
> > 
> > lol yeah and 	I guess we would all need to move to a better platform
> > or a different job :)
> > 
> > -----Original Message-----
> > From: full-disclosure-admin@lists.netsys.com
> > [mailto:full-disclosure-admin@lists.netsys.com] On Behalf Of Joey
> > Sent: Tuesday, 12 August 2003 9:36 p.m.
> > To: Darren Reed; Andrew J Homan
> > Cc: full-disclosure@lists.netsys.com
> > Subject: Re: [Full-Disclosure] aside: worm vs. worm?
> > 
> > 
> > imagine if the bug wiped out the infected computers' 
> > harddrives. microsoft would be put out of business.
> 
> Not that I disagree with the assessment of there perhaps being a
> 'better platform' for a lot of operations, but by the same token
> would linux or freebsd no longer be used if someone had written
> or writes a malicious worm for these platforms?
> 
> I doubt it.
> 
> M$ may only be more vulnerable to this because of the fact that
> they have paying customers. Sure, it'll hit them where it hurts
> (financially) and they'd suffer more than an OS operating system,
> but that wouldn't be any more a rational response than we generally
> see from people when they're scared.
> 
> --
> Andrew G. Thomas
> Hobbs & Associates Chartered Accountants (SA)
> (o) +27-(0)21-683-0500
> (f) +27-(0)21-683-0577
> (m) +27-(0)83-318-4070 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
-- 
-----------------------------------------------
Darren Bennett 
CISSP, Certified Unix Admin., MCSE, MCSA, MCP +I
Sr. Systems Administrator/Manager
Science Applications International Corporation
Advanced Systems Development and Integration
-----------------------------------------------

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html