The only problem with this analysis is that, based on the info I'm getting
on my security lists these days, MORE bugs are being found now with
open-source software than with MS software.
It's just basic probability in action:
New versions = more features + greater complexity
More features = greater risk of bugs being created.
More complex the software = greater risk of bugs being created.
More users = greater probability of bugs being discovered
More clueless the admin = greater risk of being nailed by a security bug
:-)
I agree with you on the other MS points though. If only they'd put IIS
together so that someone who was security-ignorant couldn't expose
themselves in the 'net, LOL - perhaps IIS wouldn't be viewed in the same
light that it is today.
I certainly DON'T agree with your Apache security statement. Do a Google
search on +Apache +exploit +root +access and you'd see what I mean :-).
Brian
----- Original Message -----
From: "$Bill Luebkert" <[EMAIL PROTECTED]>
To: "Perl Users" <[EMAIL PROTECTED]>
Sent: Thursday, August 15, 2002 10:22 PM
Subject: Re: Getting cgis to work
[snip]
> > * Apache is driven by feature-to-market, IIS is driven by
> > time-to-market. In general, Open Source software is released when the
> > authors feel it's finished, commercial software is released when someone
> > promised the market it would be, based on an estimate someone other than
> > the developers made six months ago. In general.
[snip]
_______________________________________________
Perl-Win32-Users mailing list
[EMAIL PROTECTED]
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs
