‘Gigabyte hit by ransomware attack by hacker collective RansomEXX’ – Computer – News

How is Linux more secure? The only reason Linux isn’t in the news more often because of hacks is because it isn’t used on workstations where complex authentication and role systems are required. If you expand the complexity of a large corporate network in Linux, you have the same vulnerabilities with less good virus scanners.

There are tons of Linux viruses, but nobody cares about a Linux exploit. Recently, an exploit was released that allows you to completely bypass Snap’s sandbox by adding a folder in addition to a media file that contains an alternative library. Loaded, executed, hacked in one go. All those sandboxing and execute bits won’t help if your software isn’t written properly.

I use Linux almost exclusively but it’s a complete myth that Linux is necessarily more secure than Windows or vice versa, just like it’s a myth that macOS is more secure than Windows. All platforms are full of holes, and any attacker with enough money and reasons can get in just about anywhere. Windows may be the primary target because just about every company in the world runs it (and most importantly, because it has less tech-savvy staff serving it), but it wouldn’t be any different with a Linux desktop.

In my view, the average Linux installation is grossly inferior. The encryption never uses the TPM by default, nobody ever turns on secure boot, drivers and bootloaders are practically never signed (and if they are signed they are not validated), group policies are virtually non-existent, kernel security features that have been built in since Windows 8 , are missing from just about every LTS-Linux distribution, and the ACL system, for both the file system and in-memory objects and processes, is a lot less powerful than on Windows.

If I had to set up a company, I would like to give Linux to as many people as possible, but I think I would rather choose Windows in terms of security. I’d like to give Linux to developers, servers, and tech-savvy people, because it’s objectively superior there in many cases, but from an organizational security perspective, Linux on the desktop just isn’t right for large companies.

–