Is MS security REALLY THAT bad Compared to Open S? 3

[Spirit]

Is MS security / coding rally as bad as the media try to make out and is Linux / Sum etc really that secure or is it a case of;

"I found this way to crash a server via a vulnerability in MS Exhchange 2003" Answer "you da man / you go go girl"
and
"I found this way to crash a server via a vulnerability in RedHat Linux" Answer "Redhat whatnow?"

Due to these "flaws" in MS I now have in place excellant patch management, firewalls with server locked down but should it be a case of opening it rather than locking it down?

Just a nice one to debate in the runup to xmas......

Iain

 

[strongm]

Thanks, SemperFiDownUnda. At least you seem to have got the main thrust of my point(s).

 

[sleipnir214]

Honest criticism of Mi¢ro$oft's software engineering practices and software is not bashing -- it is criticism. And we all are aware of the title of this thread, right?


Every open-source product I've ever used has a responsible person or persons in charge of development. Although anyone can take the code and modify it to his needs and even redistribute the modified code if the licensing allows for such, only the responsible persons can modify the central repository and make changes to the distribution.

Take a look at the projects at SourceForge: every project allows people to download, but not upload and every project lists a responsible person or persons.

This link describes how project management at the Apache Foundation is handled:

http://www.apache.org/foundation/roles.html

.

I think we've already discussed the luminaries responsible Linux kernel development.


You've hit the hammer on the head: "needed functions". Take Mi¢ro$oft's plan to move IE into the operating system:

http://www.apache.org/foundation/roles.html

. Since when is a web browser a needed function of an operating system? Oh yeah...since that's what they told the judge during their antitrust trial.

I am reminded of the words of Antoine de Saint-Exupery: You know you've achieved perfection in design, not when you have nothing to add, but when you have nothing more to take away.





And what does Linus Torvalds' use of proprietary software have to do with the topic of this thread? BitKeeper isn't a Mi¢ro$oft product, is it?


Want the best answers? Ask the best questions:

http://www.catb.org/~esr/faqs/smart-questions.html

TANSTAAFL!!

 

[Tarwn]

Sorry if my comments on bugs/LOC above were misconstrued, I was actually commenting on something from the link Semper profided, not anyone elses previous comments. My commentary was merely that, commentary on another argument that I probably should not have included, I apologize if the source of that statement was misunderstood.

-T

[sub]01000111 01101111 01110100 00100000 01000011 01101111 01100110 01100110 01100101 01100101 00111111[/sub]
The never-completed website:

http://www.tiernok.com/