Language Selection

English French German Italian Portuguese Spanish

Linux lags Windows in new security report

Filed under
Linux
Microsoft
Security

A report released today indicates Windows Server 2003 may actually be more secure than its most popular Linux competitor when it comes to vulnerabilities and the time it takes to patch them.

"The fact that Security Innovations [which produced the paper] retained 'editorial control' doesn't help; if Microsoft is paying the bills, there can be all sorts of nonverbal pressure behind the scenes. It isn't like it was 'co-funded' by both Microsoft and Red Hat," said Michael D. "Mick" Bauer, senior editor of Linux Journal and director of value-subtracted services for Wiremonkeys.org.

He also questioned the narrow focus. "This study appears to be more concerned with vulnerability counts and patch-release cycles than in actual security or securability. Certainly, if Microsoft has reduced the amounts of bugs in [its] software and gotten faster at patching bugs, that's great. But the bug-patch rat race is only one part of a much more complicated security picture, and the way I see it, Linux still has compelling advantages from a security standpoint."

Such a reaction was anticipated by authors Richard Ford, Herbert H. Thompson and Fabien Casteran. They intentionally ignored threat profiles in favor of inherent vulnerabilities in Windows Server 2003 and two versions of Red Hat Enterprise Linux 3.0. The goal, they said, is to provide a security metric for IT professionals to apply to their own software shopping.

"I don't think people should make adoption decisions purely based on the results, but I think it does at the very least give decision makers and diehards on either side, or even the neutral people, a chance to look beyond hype and speculation and look at hard numbers," said Thompson, director of research at Melbourne, Fla.-based Security Innovation Inc., the application security provider that produced the report.

Thompson denies Microsoft's money influenced results but admits that's a source of contention for a lot of people. "We've gotten funding from Microsoft and as a result of that people have come back and said this automatically must not be relevant and fair and balanced. That's one reason our mission has been to be completely transparent in the methodology."

Full Story.

More in Tux Machines

It's Time to Upgrade to Fedora 24 Linux If You're Still Using Fedora 22

Fedora Program Manager Jan Kurik announced that the Fedora 22 Linux operating system has officially reached end of its life on July 19, 2016, urging users to upgrade to either the Fedora 23 or Fedora 24 releases. Read more

Running Windows apps on Linux

Now just to clear the air. I personally don't run Windows in a virtual machine or dual-boot. However, there are some games I play using WINE. If you're stuck trying to pull yourself away from legacy Windows applications take heart, there is hope. One of the options above may provide you with a means of using Linux for most daily tasks while still having access to any Windows applications you can't live without. What say you? Do you find yourself dual-booting or using WINE? Perhaps you didn't know that it's possible to run an unregistered copy of Windows 10 without any show-stopping restrictions? Hit the Comments and share your experience with Windows applications as a Linux user. Read more

ArchStrike Ethical Hacking Linux Operating System Gets Its First ISO Builds

The ArchStrike developers have announced today, July 25, 2016, that their Arch Linux-based operating system designed for ethical hackers now has official installation mediums as ISO images. Read more

GNU Linux-libre Kernel 4.7 Officially Released for Users Who Want 100% Freedom

Alexandre Oliva from the GNU Linux-libre project happily announced the release and general availability for download of the GNU Linux-libre 4.7 kernel for those who want 100% freedom when using a GNU/Linux operating system. The release of GNU Linux-libre kernel 4.7 comes a few hours after Linus Torvalds' announcement for the new Linux 4.7 kernel branch, on which GNU Linux-libre 4.7-gnu is based, and, as usual, it contains deblobbing changes for various of the included drivers, including Radeon, Intel i915 CSR, Intel Skylake audio, HFI1 InfiniBand, Realtek rtl8xxxu Wi-Fi, iwlwifi, mwifiex, Broadcom brcmfmac, and Atheros ath10k. Read more