Quote:
Originally Posted by deviant
This isn't entirely true. I work in security and a majority of web based vulnerabilities over the last couple of years have been found in linux based systems and not windows.
There hasn't been a vulnerability found in ASP.NET since 2007 and even then there were only two found that year both relatively minor issues.
I could also go into linux kernel vulns vs windows OS vulns but which is much the same story.
I still use linux and PHP for webapps, but I have to stay on top of it like a hawk.
|
Well, how many vulnerabilities do you think would be found in Windows if everyone had access to the source code? Seriously. The very permissions model windows uses is flawed.
From the user's point of view, the inability to see the source code is a security flaw in and of itself.
Now, about programming languages being insecure, I find that it is the programmer's skill that determines whether software is secure, not the language itself, if it were totally a language issue, then Ada would be the only safe language to write applications in, period.
It really is funny that you claim M$FT products are more secure than open source - when was the last time the world witnessed one of the many security disasters we have all seen (do I really need to list them?) in the M$FT camp in relation to FOSS? Seriously man, please enlighten me, because I seriously can't remember the occasion.
If you truly have to constantly watch something like a hawk, you are doing something wrong friend. Software security is not something which you implement by watching over something at all times.
Funny, this is the only board I have ever seen on the web where M$FT products are safe (and powerful) and MAC addresses do not exist, or behave according to the whim of whatever jackass is posting.
Laughable.