'Bot herders' may have controlled 1.5 million PCs

TalkBack 32 of 48:

Next »

« Previous

• Thread View
• Flat View

...

"Are you laboring under the misapprehension
that everybody started using IIS6 and Apache 2.0 as soon as they were released?"

I'm simply comparing the lastest version. What is the problem with that? Would it be fair for me to compare IIS6 with some old build of Apache with several unpatched vulnerabilities? No, I don't think so. Even IIS5 which had a dismal security record in it's early stages has seen a drastic decrease in newly discovered vulnerabilities in the past few years. I know linux fanboys love to make fun of it, but it does seem that the commitement to security Microsoft publicly made a few years ago has actually made a difference.

"All I need to do is look at my logs to see that there are still thousands of infected IIS servers out there trying to spread Code Red. Sasser and a whole host of other worms are still running rampant."

And all I need to do is look at my (sshd) logs to that there are thousands of owned linux/apache (when I bring up the IP address in a browser I allways get the "Welcome to Apache!" page) boxes out there....but I'm not going to claim that linux/apache are insecure because some dolts out there don't bother to patch their boxes, or put an secure password on their machines. By citing your logs, are you saying that IIS is less secure than Apache because a bunch of Windows machines are out there are not patched against 5 year old exploits?

"Maybe you've patched your server against
these vulnerabilities, but clearly not everyone has."

Of course I have. But again, how does the fact that many dummy windows admins out there don't patch their machines make Windows insecure? If everyone was still installing and running old distros of Red Hat 6 and not patching them, would that mean linux is insecure?

Posted by: toadlife   Posted on: 10/22/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now