centos

Anyone who inclined to use CentOS as their daily driver probably was never going to like MS OS's anyway.

For distributions like Ubuntu LTS or RedHat/CentOS, security fixes are backported to older versions of applications like Apache or PHP.

I now have another reason to stay far away from redhat based distributions for anything, yes even centos.

I'm on CentOS 6 and have switched to docker for some services that don't easily run on that OS.

If we where a massive shop I'd probably look at CentOS but so far I've not had the need.

So I would guess CentOS and Fedora will also keep allowing root login, with password, by default.

My read of it (as someone in the Debian/Ubuntu world) is that the CentOS split meant new sysadmins and users tended more towards Ubuntu.

When I first started, my predecessor had been fighting with upgrading PHP so that we could run Drupal on CentOS...

The only server's I've seen (and subsequently replaced, with Debian) breached were old CentOS boxes.

I do a big chunk of my work on a CentOS desktop machine already.

- Openssl/OpenSSH is now up to date according to the CentOS repo, which has backported patches for exploits mentioned.

After figuring out that CentOS wasn't the direction I wanted to go.

The key thing here is not "Debian is bad" or "CentOS is bad" it's that you need to keep up to date with security patches.

I develop in Java and I can deploy the same things from OSX to my Linux (Centos) servers and know they're going to work as expected.