Commentary
Where Was Linux In The Pwn2Own Contest?
The first round of the Pwn2Own was something of a redux of the previous one: the Mac was the first to fall (I'm actually not surprised given Apple's culture of obscurity-over-security), with Windows 7 via IE 8 shortly thereafter. But Linux wasn't even in the running this time. What gives?
The first round of the Pwn2Own was something of a redux of the previous one: the Mac was the first to fall (I'm actually not surprised given Apple's culture of obscurity-over-security), with Windows 7 via IE 8 shortly thereafter. But Linux wasn't even in the running this time. What gives?
More Software Insights
White Papers
- Mobile BI: Actionable Intelligence for the Agile Enterprise
- Red Alert: Why Tablet Security Matters - by BlackBerry
Reports
More >>Webcasts
- Maximize ROI with Database Consolidation onto Private Clouds
- The ABC's of Cloud Computing in the Midmarket
A couple of comments posted on the TippingPoint blog about the Pwn2Own contest might provide a clue. When people asked about why Opera was left out of the running, the response was: "Based on market share we only accept Internet Explorer and Firefox vulnerabilities" (although there were plenty of counter-responses regarding Opera's prevalence in the mobile market).
If that's the case, it sounds like Linux was dropped from the contest for the same reason: its market share still bulks tiny next to either Windows or the Mac. And in the abstract, they're right about it: people write malware and exploit zero-day weaknesses in Windows because that's where the money is.
But it doesn't make sense to ignore Linux entirely, especially when a) it's a growing market segment in many respects and b) its supporters must stop seeing security as an inevitable by-product of the open source development process. It helps, not hurts, their image to have their security tested in high-profile ways like this.
Addendum: Turns out the competition was browser- rather than OS-centric, which explains at least in part why Linux per se wasn't featured. I'm not positive that's the best way to proceed, since a given browser can demonstrate security deficiencies differently on different platforms.
InformationWeek Analytics has published an independent report on disaster recovery planning. Download the report here (registration required).
Follow me and the rest of InformationWeek on Twitter.
Related Reading
| To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy. | |
|
|
T-Shirt Giveaway: Each week we're selecting one great comment from our readers. The author of the comment will receive an InformaitonWeek Community t-shirt. So get posting! |
Subscribe to RSSResource Links
This Week's Issue
Technology Whitepapers
- Mobile BI: Actionable Intelligence for the Agile Enterprise
- How To Regain IT Control In An Increasingly Mobile World - by BlackBerry
- The BlackBerry PlayBook tablet's Good Bones - by BlackBerry
- Red Alert: Why Tablet Security Matters - by BlackBerry
- New Visual and Wizard-Driven Paradigms for Exploring Data and Developing Analytic Workflows
Featured Broadcast
This white paper explains how to create a manageable, scalable environment suited to answer real-time business needs by building out a data center on a standards-based, virtualization-aware, energy-efficient and affordable platform. Plus, learn how virtualization is making the jump from the server realm into the application, mobile and database worlds in the additional resources section.
Learn More












