Comment of the Day October 13, 2005 RE: Linux v MS Security

IMESHO much more relevant than this.

While Linux and Unices in general also have layers of ancient cruft in them, the developers have generally been much more willing to tear up subsystems and start again from scratch.

It kind of reminds me of real-life viruses: because we clean out the 'fridge every so often -- simple sanitation -- we're much less susceptible to each version of the Black Plague as it comes through; there's hardly anything for it to grow on.

During the real Black Plague, many Jews were strung up and/or burnt on charges of being "in league with the devil" for going through the Plague largely unscathed. They did it sans demonic alliances by simply following a set of strict sanitation laws laid down for them several thousand years earlier. Rather than having to fight the Plague, they simply avoided getting it in the first place.

Linux follows, if you like, a similar set of laws. One of the valuable but seldom-recognised things which Linus does for Linux is stresses keeping things simple (sanitary), and being more than willing to rip up the floorboards and rebuild when necessary.

Bill Gates, OTOH, has been more than willing to let garbage pile onto cruft until MS-Windows became an unmanageably tangled mess drenched in complexities and exceptions, each of them practically begging to have a virus planted in it. Instead of extending MS-DOS one more time (the evil is not in the command-line, but in the absence of a handful of key features and the sweeping implications of that ignorance), it needs to be categorcially shot and replaced.



Wonder of wonders, that is actually being done. MS-Vista is significant not for big new features but for being a substantial rewrite. I think others in Microsoft (not Bill) saw the writing on the wall, and it said: "if you don't tear this cruft up and throw it away, your users will tear up and throw you away."

MS-Vista has been the third really big rewrite in Microsoft-land, and the first ever that didn't involve parasitising on the Digital Equipment Corporation.

The first two were the NT codebase (basically a VMS variant called MICA which they stole holus-bolus (it was "spelling-error compatible") and later paid fines for), and the big SQL Server rewrite. Without those two big injections of fresh conceptual blood, Microsoft would be insignificant today.

The two rewrites of big slabs of MSIE also deserve an honourable mention.

The massive re-engineering which has gone into Vista will take a long time to pay off, especially because they haven't yet done enough (partly because of the layers of cruft that they copied over for compatibility's sake, and partly because their mandate is burdened with heavy doses of DRM and other distractions which have nothing to do with core system strength), but it is finally a step in the right direction.



Pointing out the rare and anaemic viruses for Linux is really beside the point as long as we fair to draw the important lessons from it. These include but are not limited to: