Arch Linux

szymon_g

Member

Registered: 2008-11-24

Posts: 36

Re: Should security be taken seriously on linux?

Please take a look here => How to write a Linux virus in 5 easy steps

you forgot to add info about other, dangerous virus: rm -rf /
you just have to type it as root, and it will destroy all data. really dangerous virus.

cardinals_fan

Member

From: /dev/null

Registered: 2008-02-03

Posts: 248

Re: Should security be taken seriously on linux?

Please take a look here => How to write a Linux virus in 5 easy steps

you forgot to add info about other, dangerous virus: rm -rf /
you just have to type it as root, and it will destroy all data. really dangerous virus.

That's not a virus, it's a feature.

---

Segmentation fault (core dumped)

Aprz

Member

From: Newark

Registered: 2008-05-28

Posts: 277

Re: Should security be taken seriously on linux?

just..
http://xkcd.com/538/

Nah, this is really how it all goes down.

Muunleit, I really liked that article. I've always told myself and others that GNU/Linux isn't completely secure, but never knew of any real security threat like that until now. I've heard of bug exploits before. No idea how it worked, never really looked much into it, but wasn't their a kernel bug in 2.6.24 (or something like that) that allowed root access? I recall reading about that some where on the forums.

Edit: Oh my God, that image cracks me up all the time, haha! Hilarious! I run Linux! Teehee. The outlining around it too.

Last edited by Aprz (2009-06-13 11:05:40)

Themaister

Member

From: Trondheim, Norway

Registered: 2008-07-21

Posts: 652

Website

Re: Should security be taken seriously on linux?

It's an interesting idea. However, you still have to manually execute something you just got off the web. That's like the #1 rule of computer security

---

@ GitHub

b9anders

Member

Registered: 2007-11-07

Posts: 691

Re: Should security be taken seriously on linux?

Imagine someone writing a tiny "malware" that just idles, checking for your bash history's last line. if there's a sudo in there, run sudo <naughty command here>. since it's likely still timeout period, away goes your work.
Why is this Ubuntu talk all of a sudden? Sudo is bad everywhere

That's avoidable by having tty_tickets enabled.

quarkup

Member

From: Portugal

Registered: 2008-09-07

Posts: 497

Website

Re: Should security be taken seriously on linux?

you can setup sudoers file to grant permission only to few regular applications, and set the timeout for the sudoer.

Security should always be taken seriously on a box.
It's harder to deal with it in windows.. (i mean security by yourself, real security)
Iptables rocks, its a very simple tool to manage connections.

Last edited by quarkup (2009-07-19 10:42:18)

---

If people do not believe that mathematics is simple, it is only because they do not realize how complicated life is.
Simplicity is the ultimate sophistication.