In response to the comment about apache on unix being "much more secure", I don't buy it. As far as I'm concerned, it's simply one of those persistant myths that IIS is any less secure than any other web server including Apache. An uniformed adminsitrator is just as likely to deploy an insecure apache server as they are an IIS server.
Oh, BTW, you might enjoy checking out the the 44 security flaws found by graduate students recently.
http://cr.yp.to/2004-494.html
End of Article
)
And I did indeed enjoy checking out the flaws the students found. After all, if you're not open to new info you won't learn anything.
That said though, the link is not an ad for IIS on Windows either:
First slide : "Research area: How can we build a secure UNIX system?
(Vastly more difficult: How can we build a secure Windows system?
Attackers have more ways to break into windows compters.)"
Anonymous User January 26, 2005