411–420 of 456 posts
Earlier quoted context omitted.
log4j is a once in a decade event, while vulnerable Microsoft software is more like once a month.
Zero day actively explored events are not a once a month thing. Are you trying to argue there’s no Linux vulnerabilities monthly??
And I also did not say that zero days are a once a month thing, I said that vulnerable Microsoft software is a once a month thing.
It’s kind of wild how we end up here over and over, a big government breach, angry headlines, but the tech never seems to change (imo). If you work in IT, this whole SharePoint story is probably a deja vu, A few real-world points that stood out to me: - SharePoint (and a lot of other MS stuff) didn’t win because it was bulletproof, just because it was bundled “FREE” and nobody got fired for rolling it out in the 2000…
I do not think that is the only difference between Windows and Linux though.
For one thing Linux has multiple distros, some very varied. Its less of a monoculture. If Linux was more widely used it would also get grater usage for BSDs because a lot of things that run on Linux will run on them too.
Linux IS very widely used on servers, and on Chromebooks, and embedded. The kernel and a few other bits are widely used on phones too.
Earlier quoted context omitted.
yet nearly all internet facing servers are linux; and we don't see the same volume of issues.
I hate Microsoft products as much as the next person, but I don’t think your statement is entirely fair: SharePoint isn’t Windows. It’s a Microsoft product that’s only available for Windows Server. But it’s not Windows. The reason I make that distinction is because if you widen the scope of services available on Linux then you might come a lot closer to the same volume of issues. For example, take a look at how frequ…
One popular CMS in particular?
Earlier quoted context omitted.
> If it were we'd all destroy our computers, never write anything down, and simply accept the collapse of society. No, this is the same sort of defeatism that prevents us from making progress on security. We could engineer usable systems where actual security is a priority, and not just security theater. We don't because nobody in a position to change anything actually gives a shit.
You can engineer systems where security is a priority. You can't engineer useful systems where security is the priority.
It’s kind of wild how we end up here over and over, a big government breach, angry headlines, but the tech never seems to change (imo). If you work in IT, this whole SharePoint story is probably a deja vu, A few real-world points that stood out to me: - SharePoint (and a lot of other MS stuff) didn’t win because it was bulletproof, just because it was bundled “FREE” and nobody got fired for rolling it out in the 2000…
> When people say Linux would be more secure in these environments, maybe. But if Linux or Red Hat took over everywhere, you can bet it would become the juiciest target immediately. I do not think that is the only difference between Windows and Linux though. For one thing Linux has multiple distros, some very varied. Its less of a monoculture. If Linux was more widely used it would also get grater usage for BSDs beca…
Earlier quoted context omitted.
> Why do Microsoft products enjoy a monopoly on the server in these sectors when more secure (Linux-based) options are far cheaper and widely deployed already? Because there is no FOSS solution even coming close to the level of out-of-the-box integration of Office 365. Thunderbird has zero integration with LibreOffice, LibreOffice has zero integration with Owncloud (or whatever else one might use), neither has integr…
You are very close. But Office isn't the secret to Microsoft's unassailable dominance in enterprise. I could remove Office at work and we'd be okay. Active Directory is the key. A unified management of users, devices, groups, and policies that everything else is built on. Nothing outside of the Windows world even comes close. There's Linux tools to impersonate or talk to Active Directory, but no alternative to it. Gr…
For Linux, I'd probably whip up Ansible these days if I were tasked with it, but getting it off the ground is ... nasty. Set it up as a systemd unit to run on boot, login and network-online.target, and that's it.
I've heard many Pentagon employees claim that if someone wanted to take out the US military, all they'd have to do is kill Sharepoint. It's the go-to warm-up joke whenever someone in the military gives a speech.
If somebody deleted PowerPoint the US Army would fall to its knees
Earlier quoted context omitted.
Sure. Just saying when that first was brought up in 2007+ and I had to admin it and people loved their folders and searching and such wouldn’t work because if the view sizes.
...That's a completely different complaint. And also solved long ago.
Earlier quoted context omitted.
Zero day actively explored events are not a once a month thing. Are you trying to argue there’s no Linux vulnerabilities monthly??
No, as we both know, there are vulnerabilities on Linux, like log4j. And I also did not say that zero days are a once a month thing, I said that vulnerable Microsoft software is a once a month thing.