Hacker News Reader

BSD UNIX can be good from a security standpoint. But, there are also OS out there written from the ground up to be secure.

Sure, but this attack modified local binaries so that they performed operations for attackers. How do you fight that?

The short answer is to only run signed binary's and or not allow new code at all. How to manage that while maintaining flexibility and minimizing costs ends up getting really complex. But, really there is a long continuum between say a personal blog at one end and an ICBM at the other. IMO, the banking system is at the high end of that scale.

I would say a cross-platform kernel, and the business logic running in a virtual machine, like Java. That combined with a hardware encryption module.

Much of what that article is about, their software relies on Oracle DB for just about everything.

Perhaps "why using easy to hack native binaries" is a better question.

Maybe an IBM Mainframe running z/OS. just wondering ..

From a security stand point, why is Windows a bad choice?