Language Selection

English French German Italian Portuguese Spanish

Linux lags Windows in new security report

Filed under
Linux
Microsoft
Security

A report released today indicates Windows Server 2003 may actually be more secure than its most popular Linux competitor when it comes to vulnerabilities and the time it takes to patch them.

"The fact that Security Innovations [which produced the paper] retained 'editorial control' doesn't help; if Microsoft is paying the bills, there can be all sorts of nonverbal pressure behind the scenes. It isn't like it was 'co-funded' by both Microsoft and Red Hat," said Michael D. "Mick" Bauer, senior editor of Linux Journal and director of value-subtracted services for Wiremonkeys.org.

He also questioned the narrow focus. "This study appears to be more concerned with vulnerability counts and patch-release cycles than in actual security or securability. Certainly, if Microsoft has reduced the amounts of bugs in [its] software and gotten faster at patching bugs, that's great. But the bug-patch rat race is only one part of a much more complicated security picture, and the way I see it, Linux still has compelling advantages from a security standpoint."

Such a reaction was anticipated by authors Richard Ford, Herbert H. Thompson and Fabien Casteran. They intentionally ignored threat profiles in favor of inherent vulnerabilities in Windows Server 2003 and two versions of Red Hat Enterprise Linux 3.0. The goal, they said, is to provide a security metric for IT professionals to apply to their own software shopping.

"I don't think people should make adoption decisions purely based on the results, but I think it does at the very least give decision makers and diehards on either side, or even the neutral people, a chance to look beyond hype and speculation and look at hard numbers," said Thompson, director of research at Melbourne, Fla.-based Security Innovation Inc., the application security provider that produced the report.

Thompson denies Microsoft's money influenced results but admits that's a source of contention for a lot of people. "We've gotten funding from Microsoft and as a result of that people have come back and said this automatically must not be relevant and fair and balanced. That's one reason our mission has been to be completely transparent in the methodology."

Full Story.

More in Tux Machines

Tiny SODIMM-style COM runs Linux on Atmel Cortex-A5 SoC

Ka-Ro’s SODIMM-style “TXA5″ COM runs Linux on Atmel’s SAMA5D42 SoC, offers Ethernet, LCD, USB, GPIO, and serial I/O, and supports industrial temperatures. The TXA5 is the first Atmel-based member of the Ka-Ro Electronics family of “TX” COMs. Most of Ka-Ro’s COMs have used Freescale processors, and many have been sold under the Strategic Test label, including the i.MX283-based TX-28S from 2012. Read more

Meet Geary: A Thunderbird Email Client Alternative on Linux

On Linux there are a few open source alternatives to the Thunderbird email client. There’s Evolution, KMail, Claws-Mail, Alpine (if you’re really old-school), and a handful of other clients (most of which, don’t live up to anyone’s expectations). There’s also a new kid on the email block. That kid is the brainchild of Yorba. Meet Geary, the new default IMAP email client for the GNOME desktop (and the likes of Elementary OS Freya). Read more

Philly’s open source mentorship program is back and expanding to 3 cities

Women are drastically underrepresented in the open source movement. Of the open source contributions made in 2013, only 11 percent were made by women, according to a survey of the open source community. Girl Develop It wanted to change that. That’s why the nonprofit partnered with civic hacking group Code for Philly last year to launch a summer-long open source fellowship for women. Fellows said the program helped them find their place in the tech community. Read more

SourceForge hijacks GIMP account, loads it with adware

It looks like SourceForge has taken over the account of GIMP user Jernej Simončič who was maintaining the Windows version of the project. Read more