LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices


Reply
  Search this Thread
Old 06-23-2002, 05:24 PM   #1
hotrodowner
Member
 
Registered: Mar 2002
Distribution: Too many to count
Posts: 368

Rep: Reputation: 30
To anyone=(To go public or not to go public that is the question...)


I don't know whether to help people in my community discover linux or not. I mainly just want these questions answered I have been thinking about for a few months now.
1) Since Linux is Open Source, doesn't that mean it would easier for crackers and "Bad People" to write malicious code? (Viruses, Trojan Horses, etc.)
2) How do I know ,without viewing that gibberish you (plural) call source code, that there isn't some secret Super-User login that the coders put in?
3) What's with the Lindows people, their going to give Linux a bad name?
4) How fast could the Linux community respond to a virus?
 
Old 06-23-2002, 05:43 PM   #2
trickykid
LQ Guru
 
Registered: Jan 2001
Posts: 24,149

Rep: Reputation: 269Reputation: 269Reputation: 269
1.) Not necessarily. They can see the code but that doesn't mean that all Linux boxes are the same. Plus the way regular users and then root is setup, if your regular user gets a virus in most cases the whole system wouldn't get affected since a regular user doesn't have full permissions on the system, usually only for their home directory.

2.) View the code to make sure for yourself.
I highly doubt that would happen since if anyone who does find it will usually report it since everyone has access to the source itself.

3.) Just ignore them and they'll surely die out hopefully.

4.) Fairly fast, faster than Microsoft does. Look how quickly updates and patches come out. Microsoft still has known vulnerabilities that they still deny don't exist. Plus if your smart enough, you can always patch it yourself maybe..
 
Old 06-23-2002, 05:58 PM   #3
hotrodowner
Member
 
Registered: Mar 2002
Distribution: Too many to count
Posts: 368

Original Poster
Rep: Reputation: 30
I understand that the regular user has limited permissions, but isn't it possible for a trojan &/or cracker to break this limit?
 
Old 06-23-2002, 06:10 PM   #4
trickykid
LQ Guru
 
Registered: Jan 2001
Posts: 24,149

Rep: Reputation: 269Reputation: 269Reputation: 269
Well anything is possible, but still I find it a very difficult task to make a trojan or virus to possibly break this. Also to consider that not all distro's are specifically the same, with different configurations and such.
 
Old 06-23-2002, 06:23 PM   #5
Phonics3k
Member
 
Registered: Jun 2002
Location: Wales, UK
Distribution: Gentoo 2005.1
Posts: 213

Rep: Reputation: 30
if i am right most viruses these days are made in vb and vbs, meanin they dont work in linux(or at least i dont think they do). So we are fairly safe
 
Old 06-23-2002, 06:41 PM   #6
hotrodowner
Member
 
Registered: Mar 2002
Distribution: Too many to count
Posts: 368

Original Poster
Rep: Reputation: 30
I appreciate the replies and hope for more thoughts!
 
Old 06-23-2002, 08:08 PM   #7
Goatdemon
Member
 
Registered: May 2002
Location: The good 'ol USofA
Distribution: ArchLinux - Slackware 8.1
Posts: 398

Rep: Reputation: 30
script kiddies arn't gonna take the time to mess with linux and most if not all respectable hackers either hate windows or windows users for one reason or another
 
Old 06-24-2002, 05:58 AM   #8
Mik
Senior Member
 
Registered: Dec 2001
Location: The Netherlands
Distribution: Ubuntu
Posts: 1,316

Rep: Reputation: 47
I think open source is a lot better. A person can try to make their code as safe as possible but there is always some things you might overlook. So having a bunch of people able to see how the program works will generally make it safer.
The other side of that would be "Security by Obscurity" which is what Microsoft tries to do. But I think that's exactly what attracts hackers. It's a challenge to try and hack something that no one knows about.
I don't think that any opensource coders would put backdoors in their code. I think basically all the coders use their own programs. Most programs get written because they need it themselves. So writing a backdoor would also create a weakness in their own system.
 
Old 06-24-2002, 06:24 AM   #9
Calum
Member
 
Registered: Mar 2002
Location: London
Distribution: Red Hat 9
Posts: 302

Rep: Reputation: 30
it's impossible to have a backdoor in open source software, because anybody could see it and use it. ipso facto, any backdoor becomes a huge revolving frontdoor.

If this were ever to happen, nobody would use the software, useless as it would obviously be, hundreds of people would write to the author with email about the problem, and within hours somebody would have released patches or a new version which had the gaping hole completely fixed.
 
Old 06-25-2002, 08:14 AM   #10
hotrodowner
Member
 
Registered: Mar 2002
Distribution: Too many to count
Posts: 368

Original Poster
Rep: Reputation: 30
How does OpenSource and/or linux protect againist this!
 
Old 06-25-2002, 09:19 AM   #11
Stephanie
LQ Addict
 
Registered: May 2001
Location: Arizona
Distribution: 9.2 Mandy 1.4 Gentoo 5.1 FreeBSD WinXP
Posts: 1,166

Rep: Reputation: 45
In most cases, it requires root access to install programs and such that are capable of stealing info and taking over a PC.

Linux security may not be as great as OpenBSD, which was designed around security, but it is many times over better than M$.

And keep in mind, most distros do not have al the security up to powerful. You can do that yourself.

I would say the best thing to do is not to download and install any program which transmits info over the web. Things like Kazaa and Seti are apps that use your computer for their work. I am sure security breachs can be found in that software for someone to use.

And no, from my understanding Linux does not have a backdoor like Winblows. Even if one was put in, someone out there would create a patch for those that want it.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
YUM requires public keys, how do I get public keys? GNUROCKS Linux - Newbie 3 05-29-2005 08:50 AM
Legal Question: Can a public library 'borrow' the design of the FC website? AlexV General 3 02-21-2005 01:13 AM
GNU Public License Question fang0654 General 8 12-30-2003 03:10 AM
general question: public key and fingerprint cevjr Linux - Newbie 1 09-19-2003 12:39 PM
kde public file server question illtbagu Linux - Newbie 2 02-24-2003 06:03 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 10:45 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration