 Rossz
join:2002-12-12
Dublin, CA | Vulnerability & Popularity A large number of people are saying IE is being targeted because it is popular. Wrong. It is targeted because it is easy. You want proof? No problem.
Most websites run on Apache. In fact, Apache runs three times more websites than all other web servers combined. That would make it the logical target for script kiddies. So where are the panicked reports of Apache hacking? What happened? Yes, there have been reports of vulnerabilities. They were discovered and reported -- and a patch (that worked - what a concept) was typically available within 24 hours.
The script kiddies don't target Apache because it's too hard. They target Microsoft IIS. They target IIS because it is easy. They are successful in cracking into IIS systems rather often. Too often. When a vulnerability is discovered, Microsoft takes their sweet time to release a patch, giving the kiddies lots of time to play. When the patch is released, it usually causes more problems than it fixes.
Expecting security in a Microsoft product is like expecting a gourmet meal at McDonalds because they are also popular. |
