|
Nobody ever said that this is easy. That's exactly the reason why lions must be a little smarter than those they are after. So let's amend my statement: Stay away from the herd, join the lions instead.
modified 26-Jul-17 7:34am.
|
|
|
|
|
..most of the industry uses Windows. Also, once the lions become the default, they become the new prey.
Most breaches that have been reported on this site were not due to using the wrong OS; WannaCry would hit Ubuntu too. Most breaches were caused by humans being idiots; not updating their machines, ex-employees who dump unencrypted databases, that sort of thing.
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
|
|
|
|
|
CodeWraith wrote: Stay away from the herd...
Is that a subtle way to say that Linux is unpopular and only used by animals that no other animals want anything to do with (skunks)? 
|
|
|
|
|
That, or it's used by the lions, who obviously know how the other lions do things.
|
|
|
|
|
I have seen just as many Linux servers breached as Windows because it doesn't matter which you use they will have vulnerabilities that need constant vigilance. You are living in a fantasy world if you think the OS determines security the human idiots is always the lowest common factor.
Go on any linux server with a lot of users and I guarantee you one will have a stupid password like "password","123" etc and the worst offenders are always management.
In vino veritas
|
|
|
|
|
You're both right, a bit. Linux is a tad safer simply because it is less well known. Windows is a bigger target, and most companies will prefer a product that is widely known.
Better known means more (security) experts, and with MS being a commercial company, their product would fail quickly if Windows was as insecure as it is often perceived. As Linus pointed out, lots of eyes makes bugs easy to detect - and MS has a lot of (gold) customers, and a big sack of money to address critical issues.
Whilst WannaCry was available for Ubuntu, they did not go through the effort of making a decent version that works equally well on Raspberry Pi. It is simple economics at work; there aren't that much paranoid idiots, and it is not worth the effort. Even Mac-users are more interesting than Linux-users 
It is harder to install something on Linux without knowing the sudo-password. And that is why companies prefer Windows over Linux - they need to get things done, not muck around with clearances.
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
|
|
|
|
|
The reason Linux is not targeted is that it's not mainstream: it just doesn't have the user numbers to make it worthwhile, not that it's intrinsically more secure. In fact, since it's open source, it could easily be less secure since the flaws and vulnerabilities are in plain view for anyone who can read the code...
I wouldn't feel too safe just because I'm using an unpopular OS: Android is Linux based, and it has a good, long - and growing - list of malware these days. When it was niche, it was safe as well...
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
OriginalGriff wrote: he reason Linux is not targeted is that it's not mainstream: it just doesn't have the user numbers to make it worthwhile, not that it's intrinsically more secure.
That's what I have been saying. Stay away from the herd and the lions will not go through the trouble of catching you alone. They stick with the herd.
OriginalGriff wrote: I wouldn't feel too safe just because I'm using an unpopular OS: Android is Linux based, and it has a good, long - and growing - list of malware these days. When it was niche, it was safe as well...
I'm quite sure of that. My best protection has always been to stay away from websites were the dumb masses are 'served'. I can proudly say that the lions hardly know that I exist and never really got me.
|
|
|
|
|
If that's your "best protection" then one day you are in for a very nasty surprise.
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
I think not. All I can lose are some savegames. Everything else is either not stored on my computer or backed up and I still have my older notebook ready to use. Pull the curent code from the repository and we are ready to go again.
|
|
|
|
|
Eddy Vluggen wrote: Imagine not trusting a soldier with a rifle. Would be a very effective army, wouldn't it
lol when the count gets huge, they fear the presence of the black sheeps. I think the companies fret mainly the loss of IPs. (intellectual properties). There were severe restrictions for source code access. & USB drives don't work. They were afraid of this fact, It was completely possible to steal the source code of a product and set up a shop on your own. This applies even today, but I think most industry has gone past this fear now.
The main reason for making so much of restriction network, firewall is the fact that they are running Windows! I guess they are so afraid it could be easily exploited.
Starting to think people post kid pics in their profiles because that was the last time they were cute - Jeremy.
|
|
|
|
|
Large companies back in the day had actual real firewalls most had cisco routers because they all had secure tunnels between there various sites. Most of what you quote is internet stories and trash that has no basis in fact.
What did get rolled over quite a bit was end users and as you had lots of novice users on Windows PC's they were the most hit. Which goes back to the most common weakness HUMANS.
In vino veritas
|
|
|
|
|
leon de boer wrote: Most of what you quote is internet stories and trash that has no basis in fact.
What do you mean? I have written about what was happening WITH ME & Other employees in the companies WE worked for. What part of it you found to be a "Trash" and have no basis? sounds funny
If we wanted an "exclusive" access to a site, there were applications & formal mails to send to the IT guys. Who would review and all the sites for a limited time.
Starting to think people post kid pics in their profiles because that was the last time they were cute - Jeremy.
|
|
|
|
|
Sorry I have trouble with TABS on the site when I have the Japanese codepage running. It was meant for the stupid linux myths of Codewraith.
In vino veritas
|
|
|
|
|
 cross fire!. lol , Excuse my unfriendly reply.
Starting to think people post kid pics in their profiles because that was the last time they were cute - Jeremy.
|
|
|
|
|
If I was to slack to hit the windows key and turn the language back to English I would say I deserve it
In vino veritas
|
|
|
|
|
Vunic wrote: I think the companies fret mainly the loss of IPs. (intellectual properties).
Yes; some even afraid that somebody will copy their unmaintained VB6-code by simply looking at the UI. Ask the average programmer what to do with a brownfield, and they'll sing "rewrite from scratch".
Vunic wrote: This applies even today, but I think most industry has gone past this fear now.
There's regularly a question on the forum on how to hide the table-structure from the customer.
I'm often tempted to answer that no sane person would "steal" something that is reproduced within a few hours without the existing errors.
Bastard Programmer from Hell
If you can't read my code, try converting it here[^]
|
|
|
|
|
|
Just by the numbers Linux servers make up around 40% of the server market the bulk of the rest being Windows.
On one of the few Anti virus companies that will provide numbers is Sophos and they see around 30,000 linux servers breached everyday. The number was 41,000 Windows servers per day. The numbers are pretty close to market share so I would not objectively say either is better.
So if you want to make claims about some O/S being better than another provide numbers to backup your claim.
The 2017 CVE Vulnerabilities list says the same
Top 50 products having highest number of cve security vulnerabilities in 2017[^]
In vino veritas
modified 25-Jul-17 11:52am.
|
|
|
|
|
Vunic wrote: I walked up to the boss and suggested to disable USB ports & cut of admin rights to developers
I couldn't work at all then since our sw requires admin rights and we need to communicate with a lot of hardware (COM ports, PCI and USB among others).
Hell, I even have to work on a "test pc" which is not under company control otherwise I would be stuck with a 64 bit system while I still have to update and maintain Win2k systems with VB6 software. And the centralized antivirus does more harm than good since it blocks a lot of executables without reason, permanetly deleting them without asking.
* CALL APOGEE, SAY AARDWOLF
* GCS d--- s-/++ a- C++++ U+++ P- L- E-- W++ N++ o+ K- w+++ O? M-- V? PS+ PE- Y+ PGP t++ 5? X R++ tv-- b+ DI+++ D++ G e++>+++ h--- ++>+++ y+++* Weapons extension: ma- k++ F+2 X
* Never pay more than 20 bucks for a computer game.
* I'm a puny punmaker.
|
|
|
|
|
So I heard a rumour that someone who shall remain nameless *cough*Nagy*cough* is officially joining the old gits club today, entering his sixth decade.
Happy Birthday, oh ancient one! I suspect a bottle (or two) of Gordon's finest is in order. 
🎂 🍾 🥃
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
Looks like he's been celebrating for months. Not seen here since late March.
|
|
|
|
|
I was just going to mention that fact. Hope he is alright.
|
|
|
|
|
Happy Birthday @Nagy-Vilmos
Hard to believe you are older than me...:EvilGrinSmiley:
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
Speaking of the Nagster hope he's OK, like somebody above said hasn't been here for ages, like another old hand (DalekDave) has he grown up?  ...
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
