Re: OT - Most *hackable* OS's

["Paul M. Jones" <pjones@ciaweb.net>]

on 2001-01-09 12:18, Kevin Sindhu at kevin@tgivan.com wrote:

> Found this on attrition.org. They list the most hack(ed) webserver(s)
> for the year 2000. Thought someone might like to see it.
> 
> BTW, there have been 7 case of a OpenBSD webserver being hacked(I am
> thinking, most likely a bad cgi-script or something)
> 
> Link - http://www.attrition.org/mirror/attrition/os.html#ALL

One thing that is misleading about this is that the OSes are compared in
toto without any reference to what percentage that OS makes of the whole.

For example, 5000+ hacks of WinNT servers out of 10,000 servers polled means
a 50% rate of WinNT cracked servers.  Thus, 7 cracks of an OpenBSD server
would be even more amazing if we saw that there were 700 OpenBSD servers
polled (for a 1% cracked rate).  These are hypothetical numbers, of course
-- I don't know how many servers were polled.


--pmj (who has way too much to do, but complains about statistics anyway ;-)