On Mon, Sep 29, 2003 at 07:27:51PM -0500, Frank Knobbe wrote: > Don't shift blame to the admins. There are good admins on Windows, and "Shift blame" ? I'm not doing such a thing. Also, I'm not here shift blaming from admin. I'm just saying the OS A_L_O_N_E should not be blammed. There are bugs on OS, true. But one should not blame the OSes alone. Work has to be done on the software, the admins, and on users. > In both cases, Windows and Unix, the role of the admin is important. But > take the admin out of picture for the moment and just compare Unix to > Windows from an architectural point of view. You won't get an argument from me on that point. As I stated earlier, I DO think Unix is much more secure then Windows. I don't have a single Windows machine at home or at my company, for that matter. So, before anyone else misinterpret what I said before, lemme try to say it one more (and for the last) time: 1) I DO think Unices are more secure then Windows 2) I DO think Netware is more secure then Windows 3) I DO think MacOS and MacOS/X are more secure then Windows ok ? Now, for the part I was stating earlier: 4) Some (most?) people try to lay all the fault on Windows (pick your OS here). But the OS is not at fault alone. Many, perhaps even most, vulnerable system (Unix, Windows etc) are so because of bad admins, who don't configure it correctly, don't install patches and so on 5) Users are, in many cases, also the most dangerous security related link do the chain As some may recall, my original statement was an answer to someone that was points that Unix is more secure then Windows (I agree up to this point), and gave and example telling that there are still several codered vulnerable machine around. This is the point I was commenting about. And you do have to agree that is a machine, today, is still vulnerable to Codered, it is mostly due to a fault of the administrator. []s -- Rodrigo Barbosa <rodrigob@xxxxxxxxxxxxxxx> "Be excellent to each other ..." - Bill & Ted (Wyld Stallyns)
Attachment:
pgp00078.pgp
Description: PGP signature