RE: How Secure is Windows, Really?

So, to do a comparative analysis where are the iSeries links that would show
similar stats/info?  The only place I would consider the iSeries to be at
risk (outside of having a Windows partition card) is the IFS, but even then
we have similar user/object level control over that.  Could someone release
a *nix style virus in Qshell successfully if the IFS is tied down
appropriately?

I was speaking with some security vendor at a recent conference (COMMON
Miami I think) and they said iSeries security software sells because IT
higher ups are used to, and need, to feel "safe" by having virus/security
software installed on all their machines.

Aaron Bartell

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Joe Pluta
Sent: Friday, December 29, 2006 9:59 AM
To: 'Midrange Systems Technical Discussion'
Subject: How Secure is Windows, Really?

While I realize there's a certain amount of "preaching to the choir" in this
particular email, I still think that it's important to end the year with a
real world look at the security of Windows.

The Windows apologists have recently jumped on the "Vista is the most secure
Windows ever" bandwagon and managed to morph that into saying that Windows
is somehow comparable in security to the iSeries.

NOTHING COULD BE FURTHER FROM THE TRUTH.

I subscribe to Windows Secrets (a newsletter I highly recommend to anyone
who has Windows machines in their network).  Go here for the current
edition:

http://windowssecrets.com/comp/061229

In it, you'll find a brief article on ten current outstanding security
threats ranging from Denial of Service to Remote Control, some of which have
been outstanding since October.

The article also points to a great page on this topic from the SANS Internet
Storm Center:

http://www.incidents.org/diary.php?storyid=1940&isc=56bdbad9f85fa3427d43ec6b
fdd4c389

This lists the 10 outstanding incidents and shows that, for client versions
of the OS, four are rated critical and one important.  For server versions,
the issues are not as critical, but instead six are rated as important.

My favorite, though, is the one marked "unknown", in which Microsoft
"accidentally" released a patch that caused a security hole on Macintosh
computers.  Oooops!  <grin>

Joe


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.