| By Steve Suehring | Article Rating: |
|
| August 18, 2003 12:00 AM EDT | Reads: |
27,360 |
In the article in question the author Tony Northrup adopts the position that the Internet is a bad place where bad things happen to innocent people. To counter that problem he offers up that a firewall is necessary. Don't mind the fact that Windows XP includes a software firewall which the article admits is insufficient. Don't pay attention to the fact that there's really noway to turn off some open ports on Windows such as those exploited by the current DCOM worm. Never mind that a firewall does nothing to prevent attacks from being successful if they use a delivery mechanism such as e-mail.
I'm not going to make a claim that Linux has all of the answers for security. However, attacks can be prevented much easier with Linux. The answer is simple: Turn off unused services.
With Linux, it's quite trivial to turn off unnecessary functions or configure them so that they don't listen publicly for connections. While this may seem like a basic function that should be included in every OS, it's missing from Windows. Had this most basic function been included in any Windows operating system, the DCOM worm wouldn't have been nearly as successful.
I'm also not going to claim that users shouldn't use firewalls. I have one at home built with software included free with every Linux flavor I can think of. Unlike the ICF software included with Windows, a Linux firewall is a solid, fully configurable, enterprise class firewall that just works.
Should a Windows user get a firewall? Yes. Should a Windows user make sure that they check for updates daily? Yes. Should a Windows user get an intrusion detection system for their computer and internal network? Yes. Should a Windows user get anti-virus software and update it twice daily? Yes. Will that Windows user still be protected? No.
Microsoft may catch up to Linux and open source in the area of security. I'll admit that the folks in Redmond have been doing a commendable job of playing catch-up to the innovators in other areas such as Internet applications and services, stability, and scalability. Maybe by the next Windows release they'll be caught up to where Linux was last year.
Published August 18, 2003 Reads 27,360
Copyright © 2003 SYS-CON Media, Inc. — All Rights Reserved.
Syndicated stories and blog feeds, all rights reserved by the author.
More Stories By Steve Suehring
Steve Suehring is a technology architect and engineer with a solid background in many areas of computing encompassing both open and closed source systems, he has worked with a variety of companies from small to large, including new and old economy, to help them integrate systems and provide the best use of available technologies. He has also taken a hands-on approach with many projects and frequently leads teams of engineers and developers, and has written magazine articles as well as a book on the MySQL database server. He has also performed technical editing on a number of other titles.
![]() |
Microsoft 11/08/04 05:56:53 AM EST | |||
We never urge No one to not connect to the internet"Which was Created by Us":) Infact ALL Os got thier source code from Us we're the Best Around and NO OS Will ever pin us down Chow Chow! |
||||
![]() |
Dan 08/26/03 02:59:32 PM EDT | |||
To Jonathan commented on 18 August 2003: You are so VERY wrong.....my PC had the server service disabled, along with Workstation, Computer Browser and Messenger and I STILL got the msblaster worm. Know the facts before you speak. -Dan |
||||
![]() |
None 08/22/03 04:52:28 PM EDT | |||
You're right. At no point does Microsoft explicitly say "Don't connect Yes, you can turn off services in Windows. But according to Microsoft, http://www.microsoft.com/technet/treeview/default.asp?url=/technet/secur... Also, where does the author say that setting up a Linux firewall is The article seems reasonable to me. We're on a Linux site remember. It actually seems more innocent than some of the stuff that Microsoft puts out about Linux: |
||||
![]() |
BlueDog 08/22/03 08:38:53 AM EDT | |||
Good article, but what does Mr. Suehring consider a "recent" article from the Microsoft XP site? The article he cited is from one year ago. It is not a typo either. I only bring this up because I feel it is important for Linux sources to get their facts correct in order to not be guilty of spreading Microsoft-style FUD (fear, uncertainty and doubt) about Microsoft products and advice. I did agree with Mr. Suehring in his conclusions, although I believe that as all the flavors of Linux begin being used more and more throughout the world, we are going to be seeing more and more Linux security vulnerabilities showing up. It is part of the inevitable nature of computer programming, no matter whose language or product it is. |
||||
![]() |
Ian Avery Bryant 08/19/03 01:20:33 PM EDT | |||
Normally, I'd be reading this article with some amusement. It really isn't something to be angry about, generally. There are always going to be people who really need an OS like Windows, because they are never going to do anything more than write an Email or type up a document. I know many of these people, and while my first impulse is to teach them GNU/Linux, I understand that variety is the spice of life, but complexity (for some) is sometimes the bane of it. BUT, like I said, that would be my normal attitude. Here is why I am furious about this article today. Recently, in response to SCO v. IBM, Microsoft reportedly invested huge sums of money in SCO to pay for "licensing fees" related to Linux (I'd be interested in HOW Microsoft is using those licenses and what distros they run). Because the details are not all yet public, I can not make accurate criticism. But I am furious. And, where I normally view advice from Microsoft such as that found in this article as simply babying a technically-inept public, I now see it for what it is: maximizing Microsoft's marketing reach, and fattening their wallets. If the money funnelling into SCO from Microsoft is any indication, Microsoft would rather see software die a slow death from the restrictions placed upon creative programming due to licensing and expensive software. Remeber, Microsoft had to pay $60 million to Caldera in an earlier lawsuit. What other reason would Microsoft have to pay SCO/Caldera except the hope that SCO wins the legal battle and software is forever wrapped in the chains of licensing and patents? Forget about securing your PC to go online being an important issue; soon, you'll have to worry about securing your Linux distro from prying lawyers who want to sue you for the source you use to make your Linux distro unique and useful. |
||||
![]() |
Sebastien 08/19/03 08:23:53 AM EDT | |||
This is the reasons why many Linux advocates cannot be taken seriouly, they're blinded by the only pupose they have in life: prove that Linux is better than Windows. Windows and Linux both have easy to configure (and free) firewall available. So the question why computers on the Internet are insecure? Because the average user don't understand the technology well enough to protect himself. The weakess link is the user. |
||||
![]() |
Mike Alberts 08/19/03 07:43:15 AM EDT | |||
What a ridiculous article. Arrogant FUD like this that have no basis in reality is one reason for Linux remaining on the fringes. A Linux firewall is easy to set up? Yeah right. For who? People like me maybe, but not the average computer user. The average computer user doesn't even know what a port is. Don't get me wrong, I use Linux and Unix all the time and appreciate the power and choices they bring, but articles like this are just a total waste of bandwidth. Get off your elitist high horse and help some people. |
||||
![]() |
Eric Zayas 08/19/03 06:49:34 AM EDT | |||
Microsoft Urges Users Not to Use Windows on the Internet? |
||||
![]() |
CoffeeBreaks 08/19/03 02:20:22 AM EDT | |||
Agree with Incogmito: there's NO such sentence in the article URGING the users to NOT CONNECT Windows to the Internet. If I were the author, I would add an apology at the top of the article. I won't come back to that site until this is done. |
||||
![]() |
Incogmito 08/18/03 11:02:23 PM EDT | |||
This is just so much hot air. Nowhere does the microsoft article that is referred to proclaim "don't connect windows computers to the internet!" The author of the original article is giving practical advice that any computer user should follow. My linux box is running a firewall and yours should too. Promote Linux but don't use stupid FUD to do it. |
||||
![]() |
Jonathan 08/18/03 02:20:52 PM EDT | |||
I am questioning your entire premise of this article... If a user shutdown the Server Service on their Windows OS (a unnecessary service for a home user for sure and probably one for most corporate users) their PC would never have been infected. The turning off the Server Service shuts down all INCOMING RPC requests while still allowing you to browse other network resources.....isn't that exactly what you said Windows was incapable of doing? "The answer on Linux boxes is simple: Turn off unused services"...well...I hear that the same thing for the Windows OS's as well. |
||||
![]() |
M. A. 08/18/03 06:44:00 AM EDT | |||
Windows XP DOES include a function to turn off services!!! |
||||
- Ubuntu-based Open Source Linux Mint Tests KDE Version
- Linux Virtualization and Tired Open Source Myths
- IGEL Supports Red Hat Enterprise Virtualization 3.0
- CloudLinux Announces Support for Atomia
- Amazon Kindle Fire Gets Its Own 'Personal Cloud Desktop' with AlwaysOnPC App Launch
- SPIRIT DSP Receives 2011 INTERNET TELEPHONY Product of the Year Award
- The Utility Infrastructure Security Market 2012-2022: Cybersecurity & Smart Grids
- FORTUNE Magazine Names Rackspace Among “100 Best Companies to Work For”
- EnterpriseDB Announces Availability of Postgres Plus Cloud Database
- Convirture Reports Strong 2011 as Virtualization Management Takes Off
- iFollowOffice Turns to Virtual Bridges and Savvis for On-Demand Virtual Desktop Services
- Connectria Hosting Achieves "Off the Chart" Operational Efficiency With Cloud-Based Storage Solution From Nexsan and CommVault
- i-Technology in 2012: Five Industry Predictions
- Ubuntu-based Open Source Linux Mint Tests KDE Version
- Amazon to Rent Out Supercomputers
- Amazon Émigré Starts Network Monitoring Firm
- HP’s Putting a Back Door in the Itanium Alamo
- Linux Virtualization and Tired Open Source Myths
- CloudLinux Announces Preferred Partner Program
- MapR Pushes the Hadoop Envelope
- Rightware Announces Gaming Performance Benchmark for OpenGL ES 3.0/Halti
- IGEL Supports Red Hat Enterprise Virtualization 3.0
- CloudLinux Announces Support for Atomia
- 3Dconnexion Announces its Newest 3D Mouse - the SpaceMouse Pro
- The i-Technology Right Stuff
- Linux.SYS-CON.com Exclusive: Linus Discloses *Real* Fathers of Linux
- After Ubuntu, Windows Looks Increasingly Bad, Increasingly Archaic, Increasingly Unfriendly
- A Closer Look at Damn Small Linux
- Linus' Top Ten SCO Barbs
- SCO CEO Posts Open Letter to the Open Source Community
- Netscape Co-Founder's 12 Reasons for Growth of Open Source
- Where Are RIA Technologies Headed in 2008?
- *POINT - COUNTERPOINT SPECIAL* What's Wrong with the Open Source Community?
- Introducing "Cooperative Linux" - Linux for Windows, No Less
- Linux.SYS-CON.com Exclusive: What Would UserLinux Look Like?
- Why Recovering a Deleted Ext3 File Is Difficult . . .






















