Why MS OS/server product has so many secruity vulnerability as opposed to Open Sources software like Linux & Apache ?

[jimmyhaha]

Why MS OS/server product has so many secruity vulnerability as opposed to Open Sources software like Linux & Apache ?

MS has a huge cash flow and spend quite a lot on R&D, and still can't solve the problems....

I have seen that MS won't admit the problem unless ppl post the vulnerability on the interent, then MS release a patch...

what's up with that ?

I never understand why company use MS product on their server environment despite a high stake of security vulnerability...

hmm...

 

[Kev]

because the hackers use the open source crap, they don't want to mess with it.

 

[BadNewsBears]

What Kev said, and the fact that MS isnt open source.

 

[NuclearFusi0n]

Peer review and proactive security measures

 

[OulOat]

Why waste the effort finding vulnerabilities in another OS if 90+% of all desktops are running Windows?

 

[Kadarin]

Originally posted by: OulOat
Why waste the effort finding vulnerabilities in another OS if 90+% of all desktops are running Windows?

The original poster's question has to do with server OS/applications as opposed to desktop OS. Read the original post a little more closely.

I remember seeing a statistic somewhere that Apache has a greater market share than IIS, but fewer security vulnerabilities and fewer reported intrusions. While I have no way to personally verify this, intuitively it makes sense. Open source software is subject to continuous peer review, and theoretically anyone can write and submit a patch (which itself is subject to peer review). This is as opposed to closed source software, where everyone is at the mercy of the vendor for a patch. If the vendor is incompetent, but enjoys large market share...

 

[milagro]

The reason is because the user base for MS is so large. Provide 90% of the population with any OS and viruses will be written for it...i don't care what os...mac osx, any flavor of linux, anything...nothing is foolproof... MS simply is the largest target...

 

[milagro]

Originally posted by: Astaroth33

Originally posted by: OulOat
Why waste the effort finding vulnerabilities in another OS if 90+% of all desktops are running Windows?

The original poster's question has to do with server OS/applications as opposed to desktop OS. Read the original post a little more closely.

I remember seeing a statistic somewhere that Apache has a greater market share than IIS, but fewer security vulnerabilities and fewer reported intrusions. While I have no way to personally verify this, intuitively it makes sense. Open source software is subject to continuous peer review, and theoretically anyone can write and submit a patch (which itself is subject to peer review). This is as opposed to closed source software, where everyone is at the mercy of the vendor for a patch. If the vendor is incompetent, but enjoys large market share...

apache may be bigger than iis but there are tons of businesses and home users w/ windows based file servers..

 

[BatmanNate]

Originally posted by: OulOat
Why waste the effort finding vulnerabilities in another OS if 90+% of all desktops are running Windows?

But more than 50% of the servers on the internet are running Apache...much more than IIS.

 

[Iron Woode]

Originally posted by: milagro

Originally posted by: Astaroth33

Originally posted by: OulOat
Why waste the effort finding vulnerabilities in another OS if 90+% of all desktops are running Windows?

The original poster's question has to do with server OS/applications as opposed to desktop OS. Read the original post a little more closely.

I remember seeing a statistic somewhere that Apache has a greater market share than IIS, but fewer security vulnerabilities and fewer reported intrusions. While I have no way to personally verify this, intuitively it makes sense. Open source software is subject to continuous peer review, and theoretically anyone can write and submit a patch (which itself is subject to peer review). This is as opposed to closed source software, where everyone is at the mercy of the vendor for a patch. If the vendor is incompetent, but enjoys large market share...

apache may be bigger than iis but there are tons of businesses and home users w/ windows based file servers..

That is truely scary.

I use Linux for my web and file server here at home. Its not that hard to set up and I know next to nil about Linux.

 

[dexvx]

Originally posted by: BatmanNate

Originally posted by: OulOat
Why waste the effort finding vulnerabilities in another OS if 90+% of all desktops are running Windows?

But more than 50% of the servers on the internet are running Apache...much more than IIS.

Theres also Windows apache too you know.