7 ms·
Microsoft's refusal to deprecate old APIs is definitely a reason for many of their security problems. However, the old theory that "windows has a bigger install
by whydid 4y ago
Microsoft's refusal to deprecate old APIs is definitely a reason for many of their security problems. However, the old theory that "windows has a bigger install base, therefore it's a bigger target" seems logical but is disproven with several other popular examples- Apache vs. IIS was a common counter-argument in the early 2000s.
I've worked at companies with 100s of thousands of Linux servers, and only 10s of thousands of Windows desktops and servers. The quantity of security problems these companies had with their Windows systems compared to their Linux systems was astounding.
- ShredKazoo 4y ago>The quantity of security problems these companies had with their Windows systems compared to their Linux systems was astounding. In which direction?
- agloeregrets 4y agoAdditionally, you have the value perspective. Get into a Windows machine and you might get some info about a person. Break into a Linux server and you might get an entire DB.
- rickdeckard 4y agoI don't think you can compare metrics of Linux servers against Windows Servers AND Desktops. At least on Windows Desktops I'd say most of security incidents today are initiated by the end-user in front of that Desktop, which creates an entirely different attack-surface than a unattended server maintained by someone working almost always in the field of IT.
- hulitu 4y ago> At least on Windows Desktops I'd say most of security incidents today are initiated by the end-user in front of that Desktop To install programs on my work PC i need admin account. Except for (rolling drums) Teams.
- tracker1 4y agoYou need an admin account to install programs for "all users" odds are the teams install (and others) are local-account installs. Not that it's much better. You can disable execution on user profiles from the directory level.
- vips7L 4y agoHave you looked into using scoop? It installs everything into the user profile and won’t require elevation.
- jmau111 4y agoI've tried to analyze the situation with objective arguments, but it seems to make me appear as a Windows/Microsoft advocate or fan boy, which is a bit ironic. Many security news worried about actively exploited 0-days, but many of these vulnerabilities are addressed or mitigated. It's not perfect at all but talented people have budgets to work on it. I wonder if the figures you mentioned are that relevant. Cybercriminals usually attack juicy flaws, and windows systems might be more attractive.