Reply to Message

The problem with your theory...

storm14k 3rd Feb 2009

...is that it makes little sense. For one there may very well be vulns in MS code that have not yet been discovered because no one but MS can see the code and anyone else must reverse engineer to find them.

Linux would almost always have more vulns because the source code is open for anyone to find them. Thats the whole point. It tickles me when people attempt to make fun of "eyes on code" actually WORKING. People are going to make mistakes. Thats inevitable. The point is that anyone can find those mistakes and it appears to be working.

Now if you want to talk about which system is more secure then you need to look at the extent of damage that can be done by exploiting these vulnerabilities. With Mac and Linux if the vuln does not include the ability to escalate to root then you know the damage can do no more than the what the user under which the exploit is running has permissions to do. And even with root an app can still be made to not do anything outside of its own permission set via SELinux or AppArmour.

Theres a guy that leaves his box open on the internet and gives you root access and asks you to hack his box. He's relying on SELinux and fine tuning it. Would you do that with a Windows box and feel you have any chance of surviving?