Well that didn't go as expected...
Well that didn't go as expected...
Yeah that kinda thinking is really not useful. Linux is a very very juicy target these days due to your thinking. Desktop Linux installations are riddled with poor security settings and many server features enabled by default. IOT devices and self spun servers are regularly deployed unsecured as well.
I think you have a false sense of security with regards to Linux vulnerabilities and exploitations. There are dozen of known exploits throughout the Linux ecosystem that are publicly disclosed frequently.
What makes you think Linux is more secure than windows? I’m not trying to start an argument here I’m just curious.
To be fair if it’s scored high enough there are usually workarounds posted and supported to hold you over for patch Tuesday.
I’ve done patch management on both platforms and find the predictability easier to manage. But that’s not home use so grain of salt stuff.
To be fair, critical security patches for Windows are often delivered out of band (not on patch Tuesday). And malware definitions for Defender are daily.
Not trying to defend Microsoft entirely, but not everything is delayed until their monthly update schedule.
Open source can be a double edged sword for that but I dig it.
I think dependencies in Linux packages does cause a lot of issues but that’s mostly on air gaped networks, and even still manageable.
Sizing the target depends on what threat actors are involved though so those broad stroke statements don’t hold up well in reality, from my Experience.
it’s a smaller target and that hackers aren’t spending as much time trying to attack it
It’s the most popular server system, so I’m not so sure about that.
GNU/Linux is Libre Software, so that already makes it more secure, because anyone can actually verify what it does and modify it if needed. This means that users are really in control of what the operating system does. It’s difficult to verify what Windows does, but we know that it contains spyware, which isn’t easy to remove.
Installing software from a repository is also safer than downloading it from random websites.
When some library like OpenSSL has a vulnerability, you will get a new version with system updates and all programs will start using that patched version. On Windows usually each program has to have its own update mechanism or it will be stuck with old libraries.
Getting tired of this smaller target narrative. On desktop, maybe. We don’t know for sure since most Linux doesn’t carry telemetry and one ISO download doesn’t mean one install.
Also, Linux runs some insanely high percentage of the Internet (server, VM, container), IOT and mobile. For every individual who might own a hand full of computers there are 10’s, or perhaps hundreds, of Linux servers out there doing tasks for them. Virus and malware don’t only target desktops. There’s literally no larger target.