Hey, cool, I recognize you from the OBSD-Misc list. Anyway: I think they used to suck; I think that a lot of their decisions in things like ActiveX and IE 6 im

Hey, cool, I recognize you from the OBSD-Misc list. Anyway: I think they used to suck; I think that a lot of their decisions in things like ActiveX and IE 6 implied that they didn't yet have the kind of focus on security that they have now. But, despite this article, Microsoft has taken a ton of heat from the computer industry for their various security issues, and I do think they've tightened it up a lot. I also think that the quote in the article conjecturing that we wouldn't see Linux botnets is absurd, given the number of Linux rootkits in the wild. The only reason we aren't seeing Linux botnets is because there aren't enough Linux systems to form one. (A joke, but only a little!) And, I don't think you can sit a novice computer user in front of a Linux or BSD system and expect them to get security right. chroot Apache still breaks a lot of stuff, and the first inclination from the user is to change httpd to -u. Microsoft does relatively OK these days.