In ,
Alias wrote:
On 01/08/2012 01:53 PM, BillW50 wrote:
In ,
Alias wrote:
On 01/08/2012 12:13 PM, BillW50 wrote:
In ,
philo wrote:
All well and good but in the case of root kits...
what would lead someone to suspect one is when their credit card
or bank account gets compromised...
in other words *too late*

That's why I moved over to Linux 2+ years ago

You are a Linux user and don't know what Root means? That is where
the rootkit was originally created for. Hacking into Linux and Unix
machines. It just amazes me how many Linux users who knows nothing
about Linux malware. Most Linux users don't run AV software or
anything. And they could be totally infected with malware and still
be totally clueless.

Cite one virus or root kit for Linux in the wild.

You got to be the laziest person I know.

http://packetstormsecurity.org/UNIX/...ation/rootkits

Cross-platform Boonana Trojan targets Facebook users | Naked Security
http://nakedsecurity.sophos.com/2010...acebook-users/

http://www.ossec.net/rootkits/lrk.php

The ONLY way it can happen is if the user lets it happen by keying
in his or her password when something tries to install.

No that isn't the only way. Like an attacker using a buffer overflow
to gain root level access is just one other way. And you can get
infected through an official repository too. Through Firefox,
through Adobe Flash, etc.

Gentoo ships backdoor
http://www.zdnet.com/blog/bott/linux...r-updated/2206

Having a router with a NAT firewall enabled and keeping up-to-date
with security updates is ALL you need with Linux.

That is not what the Linux security people say.

Securing Linux
http://www.net-security.org/article.php?id=111

Linux Security HOWTO
http://tldp.org/HOWTO/Security-HOWTO/

Linux Installation
http://www.phys.ufl.edu/docs/system/linux.html

YOU, Mr. No Windows Updates, are probably infected and
don't know it.

Always wishing upon a star, eh?

All your links require user stupidity. No wonder you believe them. The
Facebook one is classic. No wishing, sport, you're infected.

User stupidity as in Alias? How in the world could you miss: "UnrealIRCd
detailing a trojan packaged with their IRCd (Internet Relay Chat deamon)
for Linux."? Linux users were downloading this trojan for over 7 months
and nobody noticed this backdoor running on their system. That is
because Linux users have this foolish blind trust that makes them
complacent.

Most Windows users don't have this blind trust and an Windows AV would
have flagged it right away and it would be gone. But Linux users don't
normally run AV, now do they?

Linux: Infected by Complacency | Computing on Demand
http://computingondemand.com/linux-i...y-complacency/

--
Bill
Gateway M465e ('06 era) - OE-QuoteFix v1.19.2
Centrino Core Duo T2400 1.83GHz - 2GB - Windows XP SP3