Ubuntu or Windows...

[kasuncs]

I am professional vulnerability checker.
Windows machines have very critical ones. If u install xp, there are many critical ones. But ubuntu very few. Ubuntu server is 1000 better than windows server.

 

[Anura8241]

Linux,ubuntu........

 

[Ethical_World]

LMAO....not according to 2008 Q1 reports.....

Windows has lesser vulnerabilities than ubuntu.....and even thou windows has only has very high level vulnerabilities in its system....ubuntu has even more unfixed holes for a competent hacker/cracker to exploit.....

http://blogs.technet.com/b/security...1-2008-client-os-vulnerability-scorecard.aspx

dude we are living in 2010 , yea there were some vuln for linux , but not very effective . getting in to windows . hight vulns like smb , smb2 for vista and 7 , shortcut vuln this year or last year . it went to a major virus spreading technique .. linux didnt had that much of a problem ...

 

[diamonddrago]

dude we are living in 2010 , yea there were some vuln for linux , but not very effective . getting in to windows . hight vulns like smb , smb2 for vista and 7 , shortcut vuln this year or last year . it went to a major virus spreading technique .. linux didnt had that much of a problem ...

did you know CEH course...has 2 whole chapters...on linux and how to turn it into mush with a few lines of code.....

i am talking large scale hardware overheating....data erased.....kernel manipulations...not rootkits.....just plain grab the kernel by its balls....and make it beg for its life......you get the picture.....

i know there is a lot of myth created by linux open source lovers to draw people in....i am afraid to say...its all overt exaggeration.....linux is open if not even more than windows....

a perpetuated tale....of fixes...and unfixes....with hackers...fan boys and developers...going the cheap way out....

i do admit that secure OS and backtrack are pretty solid....but by no means is any other OS any worse off...its all the balance of need performance...and usage....security is moot point.....in ANY OS....

 

[kasuncs]

did you know CEH course...has 2 whole chapters...on linux and how to turn it into mush with a few lines of code.....

i am talking large scale hardware overheating....data erased.....kernel manipulations...not rootkits.....just plain grab the kernel by its balls....and make it beg for its life......you get the picture.....

i know there is a lot of myth created by linux open source lovers to draw people in....i am afraid to say...its all overt exaggeration.....linux is open if not even more than windows....

a perpetuated tale....of fixes...and unfixes....with hackers...fan boys and developers...going the cheap way out....

i do admit that secure OS and backtrack are pretty solid....but by no means is any other OS any worse off...its all the balance of need performance...and usage....security is moot point.....in ANY OS....

OK one question? Why most virus are for windows and less for linux even world 80% web servers are running on linux.

 

[Ethical_World]

did you know CEH course...has 2 whole chapters...on linux and how to turn it into mush with a few lines of code.....

i am talking large scale hardware overheating....data erased.....kernel manipulations...not rootkits.....just plain grab the kernel by its balls....and make it beg for its life......you get the picture.....

i know there is a lot of myth created by linux open source lovers to draw people in....i am afraid to say...its all overt exaggeration.....linux is open if not even more than windows....

a perpetuated tale....of fixes...and unfixes....with hackers...fan boys and developers...going the cheap way out....

i do admit that secure OS and backtrack are pretty solid....but by no means is any other OS any worse off...its all the balance of need performance...and usage....security is moot point.....in ANY OS....

what CEH ? Never heard of such a thing .

CEH Teach's on windows .. all the tools runs on windows . plus CEH is the lamest security certification I have ever seen. just old technology . if u have done CEH u know what Im talking about ..

 

[diamonddrago]

OK one question? Why most virus are for windows and less for linux even world 80% web servers are running on linux.

the viruses trojans and malware...so far fixed in linux.....

Trojans

• Kaiten - Linux.Backdoor.Kaiten trojan horse[18]
• Rexob - Linux.Backdoor.Rexob trojan[19]
• Waterfall screensaver backdoor - on gnome-look.org[20]

Viruses

• 42 [21][22]
• Arches [23]
• Alaeda - Virus.Linux.Alaeda[24]
• Bad Bunny - Perl.Badbunny[7][25]
• Binom - Linux/Binom[26]
• Bliss - requires root privileges
• Brundle[27]
• Bukowski[28]
• Caveat [29][30]
• Coin [31][32]
• Diesel - Virus.Linux.Diesel.962[33]
• Hasher [34][35]
• Kagob a - Virus.Linux.Kagob.a[36]
• Kagob b - Virus.Linux.Kagob.b[37]
• Lacrimae (aka Crimea) [38][39]
• MetaPHOR (also known as Simile)[40]
• Nuxbee - Virus.Linux.Nuxbee.1403[41]
• OSF.8759
• PiLoT[42][43]
• Podloso - Linux.Podloso (The iPod virus)[44][45]
• RELx [46]
• Rike - Virus.Linux.Rike.1627[47]
• RST - Virus.Linux.RST.a[48] (known for infecting Korean release of Mozilla Suite 1.7.6 and Thunderbird 1.0.2 in September 2005[49])
• Satyr - Virus.Linux.Satyr.a[50]
• Staog - made obsolete by updates
• Vit - Virus.Linux.Vit.4096[51]
• Winter - Virus.Linux.Winter.341[52]
• Winux (also known as Lindose and PEElf)[53]
• Wit virus[54]
• ZipWorm - Virus.Linux.ZipWorm[55]

Worms

• Adm - Net-Worm.Linux.Adm[56]
• Adore[57]
• Cheese - Net-Worm.Linux.Cheese[58]
• Devnull
• Kork[59]
• Linux/Lion
• Linux/Lupper.worm[60]
• Mighty - Net-Worm.Linux.Mighty[61]
• Millen - Linux.Millen.Worm[62]
• Ramen worm - targeted versions 6.2 and 7.0 of the Red Hat Linux distributions only
• Slapper[63]
• SSH Bruteforce[64]

please follow link to read on all the fixed vulnerabilities on windows.....

http://en.wikipedia.org/wiki/List_of_computer_viruses


i hope you get my point.....

Security portal Zone-H, which documents attacks on and defacements of web pages, has compiled statistics about the attacks within the last year. Apparently, Linux servers were successfully defaced twice as often as Windows servers. Apache servers were defaced three times as often as Microsoft's IIS. Zone-H registered a total of just under 500,000 defacements in 2007.

source > http://www.h-online.com/newsticker/news/item/Linux-web-servers-broken-into-most-often-734577.html


hackers attack the peak.....dosen't mean the parts below the peak are stronger...just not very visible.....

 

[diamonddrago]

what CEH ? Never heard of such a thing .

CEH Teach's on windows .. all the tools runs on windows . plus CEH is the lamest security certification I have ever seen. just old technology . if u have done CEH u know what Im talking about ..

the course might be outdated.....but the theory is still relevant to this day....

the only thing outdated in CEH are the tools...not the coursework....

 

[Ethical_World]

the viruses trojans and malware...so far fixed in linux.....

Trojans

• Kaiten - Linux.Backdoor.Kaiten trojan horse[18]
• Rexob - Linux.Backdoor.Rexob trojan[19]
• Waterfall screensaver backdoor - on gnome-look.org[20]

Viruses

• 42 [21][22]
• Arches [23]
• Alaeda - Virus.Linux.Alaeda[24]
• Bad Bunny - Perl.Badbunny[7][25]
• Binom - Linux/Binom[26]
• Bliss - requires root privileges
• Brundle[27]
• Bukowski[28]
• Caveat [29][30]
• Coin [31][32]
• Diesel - Virus.Linux.Diesel.962[33]
• Hasher [34][35]
• Kagob a - Virus.Linux.Kagob.a[36]
• Kagob b - Virus.Linux.Kagob.b[37]
• Lacrimae (aka Crimea) [38][39]
• MetaPHOR (also known as Simile)[40]
• Nuxbee - Virus.Linux.Nuxbee.1403[41]
• OSF.8759
• PiLoT[42][43]
• Podloso - Linux.Podloso (The iPod virus)[44][45]
• RELx [46]
• Rike - Virus.Linux.Rike.1627[47]
• RST - Virus.Linux.RST.a[48] (known for infecting Korean release of Mozilla Suite 1.7.6 and Thunderbird 1.0.2 in September 2005[49])
• Satyr - Virus.Linux.Satyr.a[50]
• Staog - made obsolete by updates
• Vit - Virus.Linux.Vit.4096[51]
• Winter - Virus.Linux.Winter.341[52]
• Winux (also known as Lindose and PEElf)[53]
• Wit virus[54]
• ZipWorm - Virus.Linux.ZipWorm[55]

Worms

• Adm - Net-Worm.Linux.Adm[56]
• Adore[57]
• Cheese - Net-Worm.Linux.Cheese[58]
• Devnull
• Kork[59]
• Linux/Lion
• Linux/Lupper.worm[60]
• Mighty - Net-Worm.Linux.Mighty[61]
• Millen - Linux.Millen.Worm[62]
• Ramen worm - targeted versions 6.2 and 7.0 of the Red Hat Linux distributions only
• Slapper[63]
• SSH Bruteforce[64]

please follow link to read on all the fixed vulnerabilities on windows.....

http://en.wikipedia.org/wiki/List_of_computer_viruses


i hope you get my point.....

Security portal Zone-H, which documents attacks on and defacements of web pages, has compiled statistics about the attacks within the last year. Apparently, Linux servers were successfully defaced twice as often as Windows servers. Apache servers were defaced three times as often as Microsoft's IIS. Zone-H registered a total of just under 500,000 defacements in 2007.

source > http://www.h-online.com/newsticker/news/item/Linux-web-servers-broken-into-most-often-734577.html


hackers attack the peak.....dosen't mean the parts below the peak are stronger...just not very visible.....

dude if u checked on windows Im pretty sure you can list more virus , trojans for windows . linux web servers cant get defaced , only the sites can get defaced . servers get rooted because most of the sites runs on linux servers , and its not because of the server vulns servers get rooted, it becouse of the site vulns ,

 

[diamonddrago]

dude if u checked on windows Im pretty sure you can list more virus , trojans for windows . linux web servers cant get defaced , only the sites can get defaced . servers get rooted because most of the sites runs on linux servers , and its not because of the server vulns servers get rooted, it becouse of the site vulns ,

apacehe servers are the most sought after and easy target for script kiddies....

heck a simple CGI walk gets more than enough info for fingerprinting....

i repeat...its not me...its a compiled study done by a website AFTER it got defaced.....and pointed the cause to the web servers....

dude forget all the stuff you have been told and you believe....not OS in this world...can guarantee more than 60% security on itself....hardening increased it to about 80%...and you get a possible 15% through strict staff security training....

every single OS is same.....its only an illusion...based on statistics and hearsy.....

hackers go for the most visible target....and as that target gets hammered....its hardens....but moves out of the limelight...and then the next target....

linux has such infamy...that its attacked without actually getting to the peak...if more ppl started using linux....

 

[kasuncs]

apacehe servers are the most sought after and easy target for script kiddies....

heck a simple CGI walk gets more than enough info for fingerprinting....

i repeat...its not me...its a compiled study done by a website AFTER it got defaced.....and pointed the cause to the web servers....

dude forget all the stuff you have been told and you believe....not OS in this world...can guarantee more than 60% security on itself....hardening increased it to about 80%...and you get a possible 15% through strict staff security training....

every single OS is same.....its only an illusion...based on statistics and hearsy.....

hackers go for the most visible target....and as that target gets hammered....its hardens....but moves out of the limelight...and then the next target....

linux has such infamy...that its attacked without actually getting to the peak...if more ppl started using linux....

If every OS is same, then why shoud we pay them and pay their security updates?
IIS is the best?

 

[diamonddrago]

dude if u checked on windows Im pretty sure you can list more virus , trojans for windows . linux web servers cant get defaced , only the sites can get defaced . servers get rooted because most of the sites runs on linux servers , and its not because of the server vulns servers get rooted, it becouse of the site vulns ,

oppoos sorry...and no...these are the lists of viruses/malware that were found....and most of them patched.....

and if you follow the link...the windows list is much larger....as in more detections...and patching than linux.....

linux has a shiny tin shield....(no dedicated vulnerability scanners and only a firewall based protection by most users....some don't even patch it properly)

while windows has a battered and trusty steel shield.....(experience....auto updates....and reviews done by windows for us....)

which is better?.....

 

[Ethical_World]

apacehe servers are the most sought after and easy target for script kiddies....

heck a simple CGI walk gets more than enough info for fingerprinting....

i repeat...its not me...its a compiled study done by a website AFTER it got defaced.....and pointed the cause to the web servers....

dude forget all the stuff you have been told and you believe....not OS in this world...can guarantee more than 60% security on itself....hardening increased it to about 80%...and you get a possible 15% through strict staff security training....

every single OS is same.....its only an illusion...based on statistics and hearsy.....

hackers go for the most visible target....and as that target gets hammered....its hardens....but moves out of the limelight...and then the next target....

linux has such infamy...that its attacked without actually getting to the peak...if more ppl started using linux....

apache has nothing do with linux , apache is a 3rd party application .
kinda can agree with you

Im off to bed cya

 

[diamonddrago]

If every OS is same, then why shoud we pay them and pay their security updates?

coz if we pay them...they send the patches to us.....and actually do their homework...coming up with the best protection.....(but really...did you pay for your OS?....)

if we don't have such premium service...we have to patch on our own...wasting our own time and money....and you only patch AFTER you get infected....nobody does it for you....and it could be too late by the time you know about the threat...and if there is a patch for it.....yes linux users DO create a fix in matter if hours sometimes...but if you don't know about it....it might has well not exist....get my point?....


its better to pay 7000/- for a good brand pen driver than to go buy a 635/-...and then later find out its a Chinese mock up...and you have been tricked.....

 

[kasuncs]

I run on Laughlin (Fedora 14.) No windows copy on my lap.
Since I am professional I dont use any pirate copy of software.
Have to go down. C u tomorrow.

 

[Ethical_World]

oppoos sorry...and no...these are the lists of viruses/malware that were found....and most of them patched.....

and if you follow the link...the windows list is much larger....as in more detections...and patching than linux.....

linux has a shiny tin shield....(no dedicated vulnerability scanners and only a firewall based protection by most users....some don't even patch it properly)

while windows has a battered and trusty steel shield.....(experience....auto updates....and reviews done by windows for us....)

which is better?.....

dude what do u mean shiny thin shield ? linux mostly has a inside authentication problems, while windows have alota remote exploitations ...
and please dont make me start on windows firewall

 

[diamonddrago]

dude what do u mean shiny thin shield ? linux mostly has a inside authentication problems, while windows have alota remote exploitations ...
and please dont make me start on windows firewall

ah but even windows also has quite competent firewall controls...if we harden it though DOS.....

not to mention if you bring in commercial firewalls.....including broadsword used by the US military....

 

[kasuncs]

Dude hardware firewalls are the most popular method now.
But as I know Snort is a very good IDS.

 

[diamonddrago]

apache has nothing do with linux , apache is a 3rd party application .
kinda can agree with you

Im off to bed cya

I run on Laughlin (Fedora 14.) No windows copy on my lap.
Since I am professional I dont use any pirate copy of software.
Have to go down. C u tomorrow.

cya 2moro gys...it was fun debating with you...i learnt alot.....

 

[Ethical_World]

ah but even windows also has quite competent firewall controls...if we harden it though DOS.....

not to mention if you bring in commercial firewalls.....including broadsword used by the US military....

no point of talking firewalls ofc there are better firewall than windows one .