Dan Geer lost his job, but gained his audience. The very idea that got the computer security expert fired has sparked serious debate in information technology. The idea, borrowed from biology, is that Microsoft has nurtured a software "monoculture" that threatens global computer security.
Geer and others believe Microsoft's software is so dangerously pervasive that a virus capable of exploiting even a single flaw in its operating systems could wreak havoc.
This thought was mentioned in comments to a posting about Outlook last week as well.  I am somewhere in the middle on this.  Clearly, the ubiquity of Microsoft's software means that any attack against their vulnerabilities spreads widely.  But MS's defense rings hollow to me -- there are other software products that are pervasive.  Netcraft says there are 31 million Apache webservers on the Internet,  yet we don't see the kinds of attacks/exploits against Apache that have happened against IIS (with less than 10 million webservers on the Internet).
Link: (via Wired News) -- Warning: Microsoft 'Monoculture' >

Post a Comment