Thread: Asp.net Vs. Php
View Single Post
Old 01-28-2003   #88
EricP
Members
 
Join Date: Oct 2002
Location: Orlando, FL
Posts: 299
Default

Ulife, I COMPLETLY understand your point, But...

As far as the security issues are concerned, a large majority of MS security cases are caused from inexperienced admin who do not follow MS Security Recommendations properly, thus the reason Microsoft put out such free software as;

The " v4 Windows Update " The latest version that updates your system or network automatically.

The " Baseline Security Analyzer " that will probe your entire system (or Network) and tell you how to fix security vulnerabilities. (Works on Desktops too - XP, 2000) Give it a try. It also has a great user interface.

The " IIS Lockdown Tool " that locks down IIS from well known mis-configurations that could allow a breach in security.

If very well paid 'system admin' were as smart as their 4 year computer degree says they are, they would be using the tools above to help secure a W2K Server.

With the release of Windows Server 2003 and SQL Server (Yukon), I think we will see a very large improvement in security.

MS has made it their 1# priority and a very large part of it starts with .NET.

http://www.gotdotnet.com/team/clr/about_security.aspx

http://www.microsoft.com/mscorp/execmail/default.asp
...In early 2002 we took the unprecedented step of stopping the development work of 8,500 Windows engineers while the company conducted 10 weeks of intensive security training and analyzed the Windows code base...

http://www.microsoft.com/security/



Last edited by EricP at Jan 28 2003, 07:44 PM
EricP is offline   Reply With Quote