From owner-freebsd-questions@FreeBSD.ORG Tue Nov 9 19:50:30 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 21B0A16A4D1 for ; Tue, 9 Nov 2004 19:50:30 +0000 (GMT) Received: from toxic.magnesium.net (toxic.magnesium.net [207.154.84.15]) by mx1.FreeBSD.org (Postfix) with ESMTP id F280943D45 for ; Tue, 9 Nov 2004 19:50:27 +0000 (GMT) (envelope-from kline@magnesium.net) Received: by toxic.magnesium.net (Postfix, from userid 1070) id BA00CDA8B5; Tue, 9 Nov 2004 11:50:27 -0800 (PST) Date: Tue, 9 Nov 2004 11:50:27 -0800 From: Gary Kline To: RacerX Message-ID: <20041109195027.GB61383@thought.org> References: <20041109124247.Q67402@makeworld.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20041109124247.Q67402@makeworld.com> User-Agent: Mutt/1.4.1i X-Organization: Thought.Org's Alt Site. cc: freebsd-questions@freebsd.org Subject: Re: Its not like we didn't already know this but... X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2004 19:50:30 -0000 On Tue, Nov 09, 2004 at 12:44:06PM -0600, RacerX wrote: > Sent to me by a friend - > ------------------------- > > Surprise. > > According to a study the British security firm mi2g, Linux is the world's > "most breached" OS and is exploited more frequently than Windows. The > company recently analyzed more than 235,000 successful attacks against > computers that were permanently connected to the Internet during the past > year and concluded that Linux was responsible for most of the successful > exploits. > [[ .... (malware, &c. ]] > ... BSD-based machines make up a small percentage of the > installed base of permanently connected machines. In all probability, > those machines weren't attacked simply because there was little incentive > to do so, not because of any inherent superiority over Linux- or > Windows-based systems. > This study raises questions of how the Linux machines were breachede, by whom and for what reasons. Also, questions about the malware. It also implies that there is a (desperate[?]) need for security programs to detect malware. This is an opportunity for guys with internals and security savvy to earn (the old fashioned way), oh, a few hundred $million. Scan src code. gary -- Gary Kline Seattle BSD Users' Group (seabug) | kline@magnesium.net Thought Unlimited Org's Alternate Email Site http://www.magnesium.net/~kline To live is not a necessity; but to live honorably...is a necessity. -Kant