Perl vs ASP vs .NET vs PHP

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   Actually, almost every major web and app server runs on windows as well. Certainly in the corporate world where security and performance rule. There, MS SQL is considered lame for performance reasons... not for security reasons. MYSQL is considered lame for lack of functionality. 
Of the two languages, you don't see much asp because of performance and a limited object model. You see no PHP because of security issues. Java and JSP's rule there, although .NET C# is a commer.
Used to work for a Telco and have been using Unix since the 1st release by ATT, and since the first Berkley distibutions. - Back in the days when you configured and compiled your own kernal - uphill, in the snow. Learned C in a class taught by Ritchie - one of the two guys who invented Unix and C. Kernigan taught my first System Admin class.
The point is that I think I've "tried" unix enough to make the statement that Unix is not inherently more secure than Windows. It just has fewer boxes and fewer people capable of exploiting them. When it does get cracked, you're in a bigtime hurt. Both OS's have to be made secure... it doesn't just happen out of the box. 
My rule of thumb has been that you see more attacks aginst windows servers. You see more dangerous attacks against Unix servers. Can't say that rule has let me down yet.
SecureBSD followed by BSD are probably the best of the lot, but they have their problems - not the least of which is in order to get that security, you cripple useful functions. In order to enable those functions, people who don't know what they're doing often apply holes in the security. MS is going this route with their 2003 servers - a 2003 web server can't run as a db server and vice versa. Also has a lot of other stuff disabled depending upon what the server is to be used for. already, we see people taking reasonably secure OS's and adding things like DX to them - those are the systems that'll see problems in the future.
Open Source is a double edged sword. Because you can hit the code, a lot of good code has been hosed up in many installations. Also, security and performance issues that are marginal, never seem to go away - they get worked around because... God forbid... we disable some feature of the open source. Sendmail and SSH have been around for over a decade and we have exploits against them every year often those exploita are just variations on an old theme.
My $.02 - flame away