Linux Format forums

Re: Pathetic news story of the week

LeeNukes — Sat Feb 12, 2011 3:17 pm

Author: LeeNukes

Posted: Sat Feb 12, 2011 3:17 pm

nelz wrote:

Ah yes, I'd forgotten that it needed AppArmor turning off.

I'm frequently turning off selinux, not good I know.

Re: Pathetic news story of the week

nelz — Sat Feb 12, 2011 12:56 pm

Author: nelz

Posted: Sat Feb 12, 2011 12:56 pm

Ah yes, I'd forgotten that it needed AppArmor turning off.

Re: Pathetic news story of the week

Rhakios — Sat Feb 12, 2011 11:18 am

Author: Rhakios

Posted: Sat Feb 12, 2011 11:18 am

nelz wrote:

Weren't those security features enabled quite recently? Meaning anything not up to date is vulnerable.

I don't know about ASLR, but AppArmor has been around for quite a while now. For openSUSE users, some years, not so sure about other distros.

Re: Pathetic news story of the week

nelz — Sat Feb 12, 2011 9:23 am

Author: nelz

Posted: Sat Feb 12, 2011 9:23 am

Weren't those security features enabled quite recently? Meaning anything not up to date is vulnerable.

Re: Pathetic news story of the week

Rhakios — Fri Feb 11, 2011 6:04 pm

Author: Rhakios

Posted: Fri Feb 11, 2011 6:04 pm

nelz wrote:

Dual infected sticks, work on Windows and Linux.

Good to see you have a plan.

Quote:

There are no instructions to follow, all they have to do is view the stick contents in Nautilus.

Yes there are, you have disable two security features first. The method of getting around them hasn't been demonstrated.

Re: Pathetic news story of the week

Bazza — Fri Feb 11, 2011 12:20 pm

Author: Bazza

Posted: Fri Feb 11, 2011 12:20 pm

Hi nelz...

> Never underestimate stupidity.

Guilty as charged m`lud.

Re: Pathetic news story of the week

nelz — Fri Feb 11, 2011 10:38 am

Author: nelz

Posted: Fri Feb 11, 2011 10:38 am

Dutch_Master wrote:

And even then: how can you be sure that stick is found by someone who uses Linux, hasn't updated for ages, is stupid enough do follow the instructions w/o knowing what they are and keep the stick inserted when he finds it's infected...?

Dual infected sticks, work on Windows and Linux.

The fix in evince is quite recent.

Never underestimate stupidity.

There are no instructions to follow, all they have to do is view the stick contents in Nautilus.

See third point.

Actually, you don't necessarily need to keep the stick inserted, if the malware's first step is to copy itself to your hard drive.

Re: Pathetic news story of the week

Ram — Fri Feb 11, 2011 10:33 am

Author: Ram

Posted: Fri Feb 11, 2011 10:33 am

Rhakios wrote:

bobthebob1234 wrote:

or drop them around. Its amazing what curiosity will make people do.

Really?

Curiosity killed the cat, but I'm not pressing that in work time.

Re: Pathetic news story of the week

Rhakios — Fri Feb 11, 2011 6:55 am

Author: Rhakios

Posted: Fri Feb 11, 2011 6:55 am

bobthebob1234 wrote:

or drop them around. Its amazing what curiosity will make people do.

Really?

Re: Pathetic news story of the week

Dutch_Master — Fri Feb 11, 2011 1:01 am

Author: Dutch_Master

Posted: Fri Feb 11, 2011 1:01 am

And even then: how can you be sure that stick is found by someone who uses Linux, hasn't updated for ages, is stupid enough do follow the instructions w/o knowing what they are and keep the stick inserted when he finds it's infected...? I think you'd have a better chance winning the lottery

Re: Pathetic news story of the week

bobthebob1234 — Thu Feb 10, 2011 11:33 pm

Author: bobthebob1234

Posted: Thu Feb 10, 2011 11:33 pm

or drop them around. Its amazing what curiosity will make people do.

Re: Pathetic news story of the week

nelz — Thu Feb 10, 2011 10:29 pm

Author: nelz

Posted: Thu Feb 10, 2011 10:29 pm

LeeNukes wrote:

Still interesting, but as with most things, if someone has physical access to the system, consider it compromised.

You don't need physical access for this, just give out free USB sticks.

Re: Pathetic news story of the week

wyliecoyoteuk — Thu Feb 10, 2011 10:02 pm

Author: wyliecoyoteuk

Posted: Thu Feb 10, 2011 10:02 pm

As always, if you have system which has oit been updated for 6 months, do this...and this... and click on this... you perhaps get Linux virus or malware.

Whereas windows systems get viruses just by being connected or browsing a web page. meh

I know Linux us NOT invulnerable but really...

Re: Pathetic news story of the week

LeeNukes — Thu Feb 10, 2011 9:47 pm

Author: LeeNukes

Posted: Thu Feb 10, 2011 9:47 pm

Still interesting, but as with most things, if someone has physical access to the system, consider it compromised.

Re: Pathetic news story of the week

Bazza — Thu Feb 10, 2011 9:22 pm

Author: Bazza

Posted: Thu Feb 10, 2011 9:22 pm

Hi Rhakios...

> And he has so much confidence in his ability to do this, that
> he is happy to tell his audience about, but not actually
> demonstrate it.

Yeah I noticed that too.

My Windies box caught a Virus/Worm/Whatever last night.

Didn`t bother me much, soon got rid of it...