Welcome Guest | Sign In
Salesforce Industries Summit
E-Commerce Times TechNewsWorld CRM Buyer LinuxInsider

LinuxInsider Talkback

ECT News Community   »   LinuxInsider Talkback   »   Re: Microsoft's Ballmer Addresses Linux, Security

Re: Microsoft's Ballmer Addresses Linux, Security
Posted by: Elizabeth Millard 2004-09-02 09:11:05
See Full Story

Microsoft CEO Steve Ballmer provided the keynote speech for the Massachusetts Software Council's (MSC) annual fall membership meeting Wednesday, and used the forum to discuss how the company views Linux, as well as to address Longhorn delays and security concerns. In the speech, given in front of an audience of more than 700 of the state's technology community members, Ballmer covered much terrain, delving into the future of IT spending, and research and development directions.

Re: Microsoft's Ballmer Addresses Linux, Security
Posted by: rickmci 2004-09-07 12:58:16 In reply to: Elizabeth Millard
Still can not fathom how a company so bad at security can even think that talking trash about Linux security would be a good thing. Do they really understand how many experenced IT people like myself are laughing at them everyday? And then there is the cost of ownership.... even a bigger laugh.... Hey dummies at MS.... Your old customers are laughing at you. Next year is going to be even harder than you think..... if you don't shutup, and fix your mess, you call Windows...

Re: Microsoft's Ballmer Addresses Linux, Security
Posted by: unoengborg 2004-09-05 09:09:59 In reply to: Elizabeth Millard
Ballmer is right, whatever system that is popular will be attacked frequently.
However, he fails to mention that the attacks will only be succesful on badly designed systems. And Linux is not in that category. Today several Linux distros follows Common criterea EAL3+ or better putting them in the same category as Trusted Solaris.
The reason for this quite recent increase in security is that the SELinux extension originally developed by NSA now ships with every new Linux kernel and provides mandatory access control. It is now for the security policy to decide if a program may open network connections, what files a program may or may not see, what files a program may alter or execute, what new processes that can be spawned, all this regardless what user that is trying to do it. There is no longer a superuser that can control everything. This makes it much harder for the attack
E.g. it is quite simple to disallow your browser or e-mail program to run executable code that it have downloaded.
Jump to:
When considering a new smartwatch, which feature set is most important to you?
Alerts and Notifications
Calls and Messaging
Clock and Time Tracking
Contactless Payments and Banking
Design and Personalization
GPS and Maps
Health and Fitness
Music and Video