LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices


Reply
  Search this Thread
Old 09-28-2005, 03:11 AM   #1
ilnli
Member
 
Registered: Jul 2004
Location: Pakistan
Distribution: Slackware 10.0, SUSE 9.1, RH 7, 7.3, 8, 9, FC2
Posts: 413

Rep: Reputation: 32
Linux Virii vs Windows Virii


Why most of the viruses are being written for windows? what does linux have to prevents virus writter to write viruses for Linux.
 
Old 09-28-2005, 03:36 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
it has a stronger user rights model and better fundamental resource handling, but to be honest it's the number of users. why write a virus for less than what... 5% of computers when you could write one that affects over 80%?
 
Old 09-28-2005, 03:58 AM   #3
addy86
Member
 
Registered: Nov 2004
Location: Germany
Distribution: Debian Testing
Posts: 332

Rep: Reputation: 31
And even within these 5%, the systems vary so much, that a virus couldn't easily affect another machine: one system might be vulnerable to the virus, but the next system might have a former or a later version of the program/kernel (which might not be vulnerable to this specific attack) - in contrast to Windows where most people have Windows XP with SP 1/2 and IE 6.
 
Old 09-28-2005, 04:23 AM   #4
reddazz
LQ Guru
 
Registered: Nov 2003
Location: N. E. England
Distribution: Fedora, CentOS, Debian
Posts: 16,298

Rep: Reputation: 77
Use the search function on this site to check out similar threads. This question seems to be asked several times every week.
 
Old 09-28-2005, 07:02 AM   #5
rpgfan
LQ Newbie
 
Registered: Sep 2005
Location: 127.0.0.1
Distribution: Mandriva, Knoppix and Ubuntu
Posts: 5

Rep: Reputation: 0
It's also because virii rely as much on social engineering as destructive instructions to the system.

Most Linux users have learned to execute only code that everyone else has vouched for, case in point repositories. Users of other systems, once they see an attachment from someone they trust, don't hesitate to click on it, unleashing the virus and quite likely wiping out their system.

One of the most powerful weapons of penetration is deception. That applies in war as well as viruses.
 
Old 09-28-2005, 07:38 AM   #6
JaseP
Senior Member
 
Registered: Jun 2002
Location: Eastern PA, USA
Distribution: K/Ubuntu 18.04-14.04, Scientific Linux 6.3-6.4, Android-x86, Pretty much all distros at one point...
Posts: 1,802

Rep: Reputation: 157Reputation: 157
It has nothing to do with the number of users... many of the server systems running the internet are Linux systems... It's because Linux security models are different, and virus propogation from it is not very efficient.

The number of users thing is M$ FUD...
 
Old 09-28-2005, 07:54 AM   #7
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
no it's not, how many firefox flaws were found when no bugger used it? how many are found since 1.0? I know in theory being in beta or rc implies it's allowed to have them but with FF on the up and up in windows as well as Linux, a lot more flaws and exploits have been found in it.

The security model in linux is a lot better and viruses are less likely to do damage etc.. but those holes do still exist and can be exploited.
 
Old 09-28-2005, 09:38 AM   #8
KimVette
Senior Member
 
Registered: Dec 2004
Location: Lee, NH
Distribution: OpenSUSE, CentOS, RHEL
Posts: 1,794

Rep: Reputation: 46
Quote:
Originally posted by JaseP
The number of users thing is M$ FUD...
It's not entirely FUD - part of it IS the fact that Windows is the largest share of the market.

Think of it this way: many of the viruses that users get on their system are in email attachments. It could be a message saying "reallycutepictureofmykidathisbirthdayparty.bat click it now to check it out" or "gorgeous hot babe with blahblahblahblahblah.vbs" and while it's not a pure virus, but a trojan horse, it has a viral effect because the idiots who are the type to open every single attachment are the type who forward it on to others first THEN open it. It is well worth noting though, that in most cases on *nix (where the user is NOT root and not a member of the root group) even an rm -rf / won't damage the system itself - it'll just wipe out the user's own home directory and environment, which while not being a great thing, is a good lesson in not being an idiot.

If Linux were more widespread, you can be sure that at least trojan horses would be a bigger problem in the *nix-using community - but right now even if there were a strong effort to infect *nix that way, probably better than 99% of Linux users would be clueful enough not to run shell scripts without knowing exactly what they do. Would you run an .sh attachment from an untrusted source? I sure wouldn't - at least not without reading it line for line first - and for me to run it, not only would it have to come from a trusted source, it'd have to be in a .tar/.dar file before I'd even check it out - I'd delete it without checking it otherwise.
 
Old 09-28-2005, 10:40 AM   #9
craigevil
Senior Member
 
Registered: Apr 2005
Location: OZ
Distribution: Debian Sid/RPIOS
Posts: 4,886
Blog Entries: 28

Rep: Reputation: 533Reputation: 533Reputation: 533Reputation: 533Reputation: 533Reputation: 533
Most wndows users are clueless. "Oh look it says click here, ok."

The plural of virus is viruses, not virii. Read the security references and do a search of the forum/Google, this question and which distro should I use? are asked every few days.

The simple fact that most Linux users run as "user" and not as root keeps thing like viruses , spyware from being a problem.Since most softare require root access to install.
 
Old 09-28-2005, 11:28 AM   #10
bunnyrage
Member
 
Registered: Sep 2005
Distribution: Fedora Core 2
Posts: 34

Rep: Reputation: 15
*nix systems are bad breeding grounds for virii

the reasons for this first off, is unix operates on a file structure that is a lot idfferent that windows,

windows is also easy to infect because the registry is very vunerable \\

windows also doesnt recover very well because it depends too much on the registry being perfect

linux and unix have compartments and if one is infected, then a section of your system will not function
sometimes its a lot more verbose about whats going on

unix is simply a system that is more likely to run the infected code, yet not be affected by it

windows is also automated to a great degree,

and yes i do agree, email attachments, very stupid
 
Old 09-28-2005, 11:35 AM   #11
bunnyrage
Member
 
Registered: Sep 2005
Distribution: Fedora Core 2
Posts: 34

Rep: Reputation: 15
i agree with those who have said,

unix viruses are not likely to be executed because the usually come in the form of scripts run by a shell

you can easily open the file and see what the script will do

in windows, its a compiled binary (.exe) or other, you would have to reverse engineer it to see it
most windows users would even bother to look at the souce HTML of the web page they view

most user just dont think that way

most linux users are big computer geeks, this is somthing that sparks curiosity.
they are always looking at source code anyway
 
Old 09-28-2005, 12:22 PM   #12
addy86
Member
 
Registered: Nov 2004
Location: Germany
Distribution: Debian Testing
Posts: 332

Rep: Reputation: 31
Quote:
Originally posted by bunnyrage
unix viruses are not likely to be executed because the usually come in the form of scripts run by a shell
Are you sure about that? I mean, if I were to create a virus for Unix, I wouldn't implement it as a shell script, but rather as binary.
 
Old 09-28-2005, 01:34 PM   #13
bunnyrage
Member
 
Registered: Sep 2005
Distribution: Fedora Core 2
Posts: 34

Rep: Reputation: 15
if you created a binary virus, i wouldn't install it

any sensible linux user would download binaries from moderated sites that are trusted

so yes im shure, i would install any old binary

utility scripts however are more of a risk because you copy the source and run it

or you could write one yourself and create problems if its buggy, especialy if it runs as root
 
Old 09-28-2005, 01:35 PM   #14
bunnyrage
Member
 
Registered: Sep 2005
Distribution: Fedora Core 2
Posts: 34

Rep: Reputation: 15
sorry wouldnt install any old binary
 
Old 09-28-2005, 03:01 PM   #15
addy86
Member
 
Registered: Nov 2004
Location: Germany
Distribution: Debian Testing
Posts: 332

Rep: Reputation: 31
That's right, but suppose you could break into a trusted site, say, a Debian mirror, and alter the files? Then it wouldn't matter whether a script or a binary contains the virus, and I guess that it's often easier to implement a virus in C than in Bash (especially when exploiting buffer overruns).
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
does wine make me vulnerable to windows virii? drigz Linux - General 3 08-03-2004 07:29 AM
Linux Virii and defrag ch4s3r Linux - General 13 03-04-2004 09:52 AM
Win Virii in Linux Joey.Dale General 4 02-13-2004 02:20 PM
Another newbie, thanks to SCOX and virii lordshipmayhem LinuxQuestions.org Member Intro 0 09-28-2003 10:40 AM
Linux Virii ???? qwijibow Linux - Newbie 4 06-25-2003 03:10 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 07:35 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration