ummm....elistan that's contradictory...unless your definitions of web sites and web servers are different than mine.

 

even so, the bug affected the SQL server not the web server.

 

Not at all. Consider having one Apache server running five websites, and five IIS servers each with a single website. (I've read a couple different theories about why this is so...)

True - I was just responding to Strike, who was talking web servers, about why people might still concentrate more on MS stuff.

We now return you to our regularly scheduled thread:

Anybody who leaves a database server, which really should be a backend system, exposed to the 'net in general needs to take a refresher course on network design and security best practices.

 

[QUOTE]Originally posted by Elistan
[B]Hmmm...

 

[QUOTE]Originally posted by Strike
[B]

Why would anyone make the conscious decision to affect the most boxes?

 

Okay you got me there. However, that includes at least 4 flavors of Windows. If you were going to write a virus to take advantage of Windows you'd have to make sure it was flexible enough to affect pretty much every version of Windows except 3.x. Since they all seem to have differing weaknesses this would probably not be the easiest task in the world. Of course, then there's applications like Outlook which run on most versions of Windows and are extremely vulnerable as well. In any event, Windows is the last platform I'd choose to put out there publicly for business.