Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
| Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
 |
GNU/Linux Basic Guide
This 255-page guide will provide you with the keys to understand the philosophy of free software, teach you how to use and handle it, and give you the tools required to move easily in the world of GNU/Linux. Many users and administrators will be taking their first steps with this GNU/Linux Basic guide and it will show you how to approach and solve the problems you encounter.
Click Here to receive this Complete Guide absolutely free. |
|
 |
11-03-2005, 12:05 PM
|
#1
|
|
Senior Member
Registered: Oct 2005
Location: It varies, but usually within 100 feet of a keyboard.
Distribution: Fedora 10, Kubuntu 8.04, Puppy 4.1.2, openSUSE 11.2
Posts: 1,126
Rep:
|
Online banking security issues
At another forum, we started discussing an article over at MSNBC, where they talk about RATs. As a first guess, I thought that using Linux for online banking and other secure transactions may be better than using Windows, since most of these Trojans and other malware seem targeted to Windows systems. I wanted to ask here as well to learn the opinion of people who are more generally Linux-savvy than others. Here is the article:
http://www.msnbc.msn.com/id/9898957/
|
|
|
|
11-03-2005, 12:50 PM
|
#2
|
|
Senior Member
Registered: Oct 2003
Posts: 2,280
Rep: 
|
I know of no trojan like those described in the article for linux or *nix . Propogation would be very difficult in a linux environment.
First, things cannot be automatically installed in linux like they can in windows. The article refers to automatc and unknowing installation of this malware - that's windows and MS's security impaired ActiveX technology at work. ActiveX is generally regarded as a security abomination, so much so that Vista has it disabled by default as a new "feature". ActiveX allows an untrusted remote source to download, install and run code on your box without any interaction from the user. Talk about a blueprint for disaster. Ironically, many bank/financial sites rely on ActiveX technology in order to run properly.
Second, while linux users are not immune from social engineering manipulating them to install the malware, writing such malware for linux is much more difficult because there is so much variation within linux. You do not have a uniform environment like you do in windows. It would be very difficult to get a set of malware binaries together that could be successfully installed on a broad spectrum of *nix boxes without someone detecting the true nature of the malware. Even assuming some attack vector in *nix that would allow for installation of malware without the users knowledge, crafting that malware would be a ton of work given the huge variation in linux kernels used, not to mention other software. This software diversity has greatly limited the spread of any such trojans in *nix environments when compared to windows environments. It's just so much easier on windows to do.
|
|
|
|
| Thread Tools |
Search this Thread |
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT -5. The time now is 06:14 AM.
|
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|