Re:Is the Linux Desktop less secure than Windows 10? [pdf]
by yAnonymous on Monday February 06, 2017 @06:31AM
(#13578508)
You're ignoring that most Linux distros come with better defaults, i.e. no open ports. Reducing the attack surface is an important part in keeping the OS safe. Windows is remarkably bad in that regard.
[ Parent
| on HN ]
Re:Is the Linux Desktop less secure than Windows 10? [pdf]
by tjoff on Monday February 06, 2017 @08:43AM
(#13579297)
Windows comes with its firewall turned on by default since XP SP2, most popular distros doesn't do that even today.
Windows 10 doesn't even respond to ping by default (which is a pita).
Re:Is the Linux Desktop less secure than Windows 10? [pdf]
by Boubouar on Monday February 06, 2017 @09:03AM
(#13579461)
Not sure about other distros but opensuse comes with a pretty strict firewall out of the box. My logic says that this is probably common practice for many general-use distros.
Re:Is the Linux Desktop less secure than Windows 10? [pdf]
by cuillevel3 on Monday February 06, 2017 @09:42AM
(#13579786)
openSUSE uses a password protected root account (shared secret), doesn't use ASLR and doesn't even run apparmor...
Re:Is the Linux Desktop less secure than Windows 10? [pdf]
by tjoff on Monday February 06, 2017 @09:41AM
(#13579779)
Ubuntu and debian does not. Well, they are installed and debian is enabled too (but defaults to allow all traffic).
Re:Is the Linux Desktop less secure than Windows 10? [pdf]
by mavhc on Monday February 06, 2017 @07:58AM
(#13579012)
I had a look at Windows 10, by default, assuming you clicked Private for the network connection, there are no ports that are open for any program to use. There are 33 rules for the All profile, 18 for the private profile, some duplicates, each of which specifies what local program is allowed to receive data:
9 connect to Modern Windows apps, 1 for ICMPv4, 12 for ICMPv6, 1 for IGMP, 1 for ISATAP, 12 for TCP, Cast to device, IPHTTPS, Network Discovery, WiDi. 15 UDP: 2 for Cast to device, 2 for DHCP, 1 for Teredo, 1 for Delivery Optimization, 1 for mDNS, 7 for network discovery, 1 for miracast.