Tell me how debian is less secure out of the box ?
Well, if you're on x86 or x64, which most Debian probably will be, then
it's less secure in that it's capable of running the payload of most
cracking tools.
A VAX isn't, not unless you run an x86 emulator on it (which is
definitely not an out-of-the-box configuration).
Debian is also less secure in that it's popular enough to have had a
lot more cracker attention; Debian-attacking tools are far commoner and
far more commonly used than VMS-attacking tools.
/~\ The ASCII Mouse
\ / Ribbon Campaign
X Against HTML mouse at
rodents-montreal.org
/ \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B