In response to the comment about apache on unix being "much more secure", I don't buy it. As far as I'm concerned, it's simply one of those persistant myths that IIS is any less secure than any other web server including Apache. An uniformed adminsitrator is just as likely to deploy an insecure apache server as they are an IIS server.
Oh, BTW, you might enjoy checking out the the 44 security flaws found by graduate students recently.
http://cr.yp.to/2004-494.html
I agree an uninformed admin is just as likely to deploy an insecure apache server.
And I did indeed enjoy checking out the flaws the students found. After all, if you're not open to new info you won't learn anything.
That said though, the link is not an ad for IIS on Windows either:
First slide : "Research area: How can we build a secure UNIX system?
(Vastly more difficult: How can we build a secure Windows system?
Attackers have more ways to break into windows compters.)"
Hey, did that same student get access to source code for windows products to see any security holes there?
Register
