Tuesday, March 01, 2005

Security

There are two predominate groups around when you start talking about browsers and internet security. The IE group says that IE is not a bug ridden, dismal attempt at a secure browser, but rather is a rather good browser that just happens to be under attack more often than anything else because it is so popular. The non-IE group says that that is a joke and that IE is just poorly written. Well written web browsers or anything to do with internet security should be bug free or at the very least safe to use no matter how many people use it.

This article is clearly on the IE side, claiming that now that Firefox is gaining popularity it will be next to be hit with all these security attacks. I bet it will, and some of them might actually work, but why is popularity being equated with security. If anything, it should be the inverse relationship, the more popular a program, the more secure it is.

Take for example, web servers. Apache is used much more than IIS, but which is more secure? Which do you hear about getting broken in to? Now, which do you think has more attacks against it? Maybe this says more about Microsoft than it does about security, but I think they need to change their emphasis a little. To their credit, MS has pulled off some incredible feats of making software user friendly, but in their quest to make everything so easy to use, they forgot to make it hard to break.