It's not strictly a statistical count of machines running package "X". How many people do you know who routinely recompile IIS when they
install it? Anybody? Now, how many people routinely rebuild either the Linux kernel and/or Apache and/or other significant parts of the
system when they do an install?
It's the homogeniety of IIS installations that makes them so vulnerable, not their mere numbers. The *nix practice of literally
compiling in/out certain features of an installed module for most important modules actually works to reduce the likelihood of mutiny by
wayfaring invaders. And the fact that it's common to spread functions across machines.
-David Schwartz
Matt Alexander wrote:
> It annoys me when people say that the only reason IIS is compromised so
> much is because it's so popular. Ummm... last I checked, Apache had at
> least twice the market share of IIS.
>
> On Fri, 28 Sep 2001, John Starta wrote:
>
> > Computerworld [1]: "Microsoft said its Internet Information Server (IIS) is
> > as secure as comparable products from other vendors following a Gartner
> > recommendation that companies hit by the Nimda and Code Red worms look at
> > alternatives to IIS."
> >
> > [1] <http://computerworld.com/nlt/1%2C3590%2CNAV47_STO64226_NLTAM%2C00.html>
> >
> > ________________________________________________
> > See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.
> >
> > PLUG-discuss mailing list - PLUG-discuss@lists.PLUG.phoenix.az.us
> > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> >
>
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.
>
> PLUG-discuss mailing list - PLUG-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
(text/plain)