SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Technology Stocks : How high will Microsoft fly?
MSFT 488.02+0.2%Dec 24 12:59 PM EST

 Public ReplyPrvt ReplyMark as Last ReadFilePrevious 10Next 10PreviousNext  
To: Charles Tutt who wrote (38904)3/1/2000 11:12:00 PM
From: rudedog  Read Replies (1) of 74651
 
Charles -
A well designed Unix site can be just as secure as a well designed W2K site - and there are probably more people who understand the issues. But in practice I have seen lots of sloppy practice, even in big sites - administrators get lazy and want to provide a lot of personal hooks to cut down on their effort to manage a big site, and often those leave holes. The range of commonly used Unix utilities, and familiarity with the internals of those utilities in the Unix community, also opens a potential security hole, especially for "trojan horse" insertions such as were used to acquire slaves in the recent DoS attacks.

I believe that as more people become familiar with Win2K, there will be a corresponding increase in the number of security lapses, especially in "plug and chug" sites.

The "targets" of the DoS attacks were not actually the place where the sloppy administration was an issue - but rather the various university and commercial sites which were slaved for the attack.

Your point about "number of machines" is well taken, and a few large machines are more vulnerable than a large number of small machines. That is also true about normal system loading, and is one of the reasons that large web sites are tending towards large numbers of 1P or 2P servers. There is no inherent advantage to Win2K in that particular dynamic, as far as I can tell - a lot of Linux machines, or Solaris machines, would act the same way.
Report TOU ViolationShare This Post
 Public ReplyPrvt ReplyMark as Last ReadFilePrevious 10Next 10PreviousNext