Richard Corfield

UK

IT

The "Its Used More" excuse for Windows insecurity doesn't apply to web servers, or even servers in general. Apache, the open source web server, easily outpaces IIS, yet has not had anything near the amount of vulnerabilities.

Code in the open has more need to be secure, because its your reputation. More people can see it and find weaknesses that a closed source supplier may just think they can sweep under the carpet. Secrets in the algorithm don't stand up in Open Source.

There has also been less desire in the Open Source world to rush to market with incomplete software. Development versions are always available for those that want to be on the leading edge, so no fear of competitors being first to release. On the other hand. proprietry vendors often seems to release incomplete software to be first to market.