Dylan Smith wrote:

(In fact, OSX comes with the
root account *disabled*).

I only learned of this recently (in discussion on system security in a forum
where it's on topic {8^). It's a nice touch.

[...]

As for security cultu consider this. Although Apache by far and large
is the most common web server, all the serious exploits so far has been
for the minority web server - IIS (Code Red et al.) I'm still getting
hits from attempted Code Red infections. Perhaps there is something to
the differing security cultures since in an area where Microsoft are a
decided minority, they *still* are the attack vector of choice?

MSFT fanatics ignore data like this. To them, they're the majority
everywhere. But it's getting some press, even outside the trades that only
professionals see. I think there was even an article in the Washington
Post on this a number of months back.

Ah, I've found:


http://www.washingtonpost.com/ac2/wp...&notFound=true

Not quite your point, but related.

- Andrew