A
arachnid
Well, my main point here was that it was being inferred that there is no
need for protection if you are running linux, when in fact there is.
That was Alias' claim. I think by "Internet Security" he was referring to
reading email and visiting web pages.
Open source is available to hackers as well as the sysadmins.
And Windows source isn't available to either, yet Windows systems overall
are still deeply inundated under a flood of worms, viruses, and spyware.
It is credible, just because you don't see it doesn't mean it doesn't
exist.
Just because you haven't seen any pink-and-blue polka-dotted dancing
elephants doesn't mean they don't exist...
We're talking users, not sysadmins here. You only need one unguarded
machine. There are plenty around that have no idea what is going on with
their systems. Linux and Vista are both tightly secured, but there are
already 'proof of concept' bugs for both.
A virus that isn't spreading isn't a threat to other machines, including
mine. A virus that is spreading will be quickly detected when it hits one
of the secured machines. So if I buy your claim that there are Linux
viruses out there, then they aren't able to spread which only shows how
secure Linux is as compared to Windows. )
The number one way these vulnerabilities come to light is immediately
after a bug is written to exploit it. Like Window developers, they are
re_acting, not pro_active.
Quite the contrary. Open source code means that more programmers and
security researchers can apply their own code-analysis tools and methods
to the source code. The result is a constant flood of reported
"vulnerabilities" that are fixed long before anyone has a chance to create
worms or viruses that can exploit them. Go take a look at the fine print
on all those open-source vulnerability reports sometime. Most are problems
that can do only minor damage, or that can only be exploited under an
extremely unlikely set of circumstances, or that depend on technical
capabilities not yet developed. Yet, they were taken very seriously and
eliminated.
One of the downsides of the many iterations of Linux is that there is
not one central developer releasing updates to protect them all. You are
beholden to the distributor of your version for assistance. While Linux
proposes to be a collaberative effort, it is often very devisive
instead.
Security patches usually do come from the applications developer, who is
about as close as you're going to get to "central". The distributions just
bundle up the resulting code and prepare it for their respective
installation systems. However, if the original developer is too slow to
fix the problem, the distro's all have the source code and can also fix it
themselves. And of course we users have the source code, too.
a) That's great provided the developer remains interested or involved
and has enough time to work for free. The hobbiest nature of the home
user distributions is one of the reasons Linux does not become more
widely accepted.
But just think, this poorly-funded and (according to you) "hobbiest OS"
has 30% of the server market - a segment that it mostly took away from
highly respected mainframe UNIX and kept from the grip of a certain very
powerful OS monopoly that badly wanted it. About a third of IBM's
*mainframes* ship with Linux. It was used to design the Mars Rovers, it's
used to produce virtually all the high-end graphics you see in the movies,
and it runs about 40% of the Internet. Whole governments and some very
large international corporations have adopted it for their desktops and
more are considering it. It's forced Microsoft to drop their prices in
some countries. The OLPC project is critically dependent on it. And
despite the "hobbiest nature" of our OS, Linux users aren't the ones being
overrun by adware, spyware, viruses, trojans, and DRM.
Maybe those open-source developers aren't as amateur as you'd like to
think?
b) No doubt that some updates are pushed out unnecessarily. I dislike
DRM, WGA as much as you, but it is Microsoft's operating system to do
with as they please.
Umm, no, once I hand over the money the software is mine to do with as I
please on my own computer. If the seller doesn't agree then I will be
happy to refund the product to them *after* they return my money.
If they displease enough consumers, the market will shift.
In my case, the market *has* shifted. )
Study up on the changes made in Vista, much of which you just stated is
implemented in the Vista user experience.
Microsoft has been promising proper OS security "Real Soon Now" ever since
Windows 95. I'll believe it when it happens.
Also, it's funny how people complain about proprietary software for
Windows, yet in Linux you must also get your applications from an
approved repository.
There's absolutely no connection between proprietary closed-source
software and approved (or "Official", if you prefer) repositories
containing open-source software for which the source code is also
available on demand.
And BTW the repositories are an optional convenience. You can bypass them
if you want to but it takes more work.
Substitute Linux for Mac, as it's the same effect. Linux is not
targeted, so development of attacks and the search for exploits is not
as far along as it is for Windows.
Secure design is independent of market share.
If the market shifts to a predominantly Linux environment, you can be
assured that the virus development will shift similarly and quickly
advance. To think otherwise is to turn a blind eye.
What, precisely, is the vector by which these imaginary viruses of yours
are going to spread between Linux machines?