Tell me how debian is less secure out of the box ?
Well, if you're on x86 or x64, which most Debian probably will be,
then it's less secure in that it's capable of running the payload of
most cracking tools. [...]
Devil's advocate: isn't this the old
"security by obscurity"
argument?
In a sense. It's not the way the phrase is usually used, but it's
certainly not entirely unfair to look at it that way.
But to think that, because security through obscurity is pretty much
worthless against a targeted attack, it has no place, is to fail to
look at the threat model.
I think a VAX (or insert name of unusual operating
system and
architecture configuration here) is probably more secure in practice
but mostly because relatively few people know how to bust into one.
Exactly.
And, on a net where one is exposed daily, hourly, in some cases
minutely (to abuse a spelling that usually means something else), to
automated breakin attempts from botnets looking to spread? I think
calling inherent immunity to them "more secure" is fair.
/~\ The ASCII Mouse
\ / Ribbon Campaign
X Against HTML mouse at
rodents-montreal.org
/ \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B