The Media, Security Flaws & Microsoft
McAfee and Symantec released a virus alert on Monday about a new worm that targetings PHP and CGI scripts stored on vulnerable Web servers. The Linux/Lupper.worm looks to be real nasty, with the only fix being reinstalling the OS. The reason for this drastic fix is that worm could do things that would be difficult to detect.
So what does this have to do with Microsoft and the media? Well, consider if this worm targetted the Windows OS, and the only fix was reinstalling the entire OS. The media would have a field day! But, with this being on the Linux platform, the media probably won’t even pick up on this one.
Now Microsoft certainly has security issues. There’s no hiding that, and certainly they should be held accountable by the media, but in the same breath, so should any other OS. We keep alot of personal data stored on our personal computers, so security should be a priority in any desktop OS. We also keep alot of personal data stored (sometimes unknowingly) by web servers running Linux, so we should expect the same commitment to security on those servers that are storing our data on the Internet. Linux has a good track record in this area. Security holes are found regularly, and Linux sysadmins are diligent at patching and upgrading their systems.
However, having said that, I think the media needs to do a more balanced job with reporting security holes on all operating systems. Windows flaws affect alot of people and so do Linux flaws. As users of the Internet, we need to be aware when our network-stored personal data may potentially be at risk.



If you consider the demographic of people watching the daily news, reporting more heavily on Windows is gonna make more sense. Average Joe is gonna hear Linux and their gonna think it’s a new type of cat, not the OS (a lot wont even know what OS means) that the web sites they visit are running on.
However, news aimed at “geeks” and “nerds” have adequatly reported this issue, including Slashdot, ZDnet and now Digital Media Minute.
We also need to consider that most linux users are very active in keeping their servers up-to-date. Security flaws with them dont require waiting for a windows update, but rather more of a fix they can do without waiting…