LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-03-2004, 01:30 PM   #1
ungua
Member
 
Registered: Oct 2004
Location: bergen, norway
Distribution: OpenSuSe (SuSe 10.1), Win XP Pro
Posts: 539

Rep: Reputation: 30
spyware in linux?


a friend told me that though using linux, a firewall is necessary and i still should find a program to remove spyware with. is this true? what are the programs to be recommended? i thought using a router and linux suse 9.1 can make me feel safe.

regards
ungua
 
Old 12-03-2004, 01:39 PM   #2
sigsegv
Senior Member
 
Registered: Nov 2004
Location: Third rock from the Sun
Distribution: NetBSD-2, FreeBSD-5.4, OpenBSD-3.[67], RHEL[34], OSX 10.4.1
Posts: 1,197

Rep: Reputation: 47
A firewall does not make a secure computer. The stupid users in the DoD still have to have IT people remove virus and spyware code from their machines too, and they have the best perimeter security money can buy/build (though they'll admit it's not perfect )

Your computer will be *more* secure with a firewall than without, and Linux is for sure more secure (for the overage user) than Win32 as you don't have to be a local admin to use it, but a firewall and linux will not stop the determined ...

You can help secure the system by not doing silly things. Don't run programs that you don't need (services I mean). Don't run executable code sent to you from unknown people. Check the md5 sums on code you download from the net and don't build it as root (only install as root ... people who recall when OpenSSH's FTP got rooted know what I mean).

Just things like that.

As for spyware for Linux -- I don't know of any. I'm sure some could be written, and with some of the more complicated desktop environments (KDE|GNOME) there may be a way to slip something past a user, but the risk is seriously limited.

Last edited by sigsegv; 12-03-2004 at 01:40 PM.
 
Old 12-03-2004, 01:44 PM   #3
ror
Member
 
Registered: May 2004
Distribution: Ubuntu
Posts: 583

Rep: Reputation: 33
Given installing software is easy as double clicking an rpm on some distributions, spyware could soon become a very harsh reality. Ease of use leads to people not knowing what they're actually installing.
 
Old 12-03-2004, 02:11 PM   #4
sigsegv
Senior Member
 
Registered: Nov 2004
Location: Third rock from the Sun
Distribution: NetBSD-2, FreeBSD-5.4, OpenBSD-3.[67], RHEL[34], OSX 10.4.1
Posts: 1,197

Rep: Reputation: 47
Quote:
Originally posted by ror
Given installing software is easy as double clicking an rpm on some distributions, spyware could soon become a very harsh reality. Ease of use leads to people not knowing what they're actually installing.
That's not the issue ... Ease of use is not an excuse for laziness, ignorance or outright stupidity ... If you don't know what something is, don't go mucking about with it until you've at least goggled it.

Then again ... Not knowing what rm -f / does and trying it as root is a valuable learning experience (doing rm -rf * in a directory other than the one you meant to be in is good for learning why you operate under a normal user and not root, too)

Last edited by sigsegv; 12-03-2004 at 02:12 PM.
 
Old 12-03-2004, 03:14 PM   #5
ungua
Member
 
Registered: Oct 2004
Location: bergen, norway
Distribution: OpenSuSe (SuSe 10.1), Win XP Pro
Posts: 539

Original Poster
Rep: Reputation: 30
Quote:
Ease of use leads to people not knowing what they're actually installing.
that's right, something that prevented me from skipping from w98 to winxp... i am still a very big newbie, i did never compile something since i lack the time to set myself in how to use data from a .tar.gz for instance. but thank you for answering, looks like my "infect risk" is quite low...

regards
ungua
 
Old 12-03-2004, 03:29 PM   #6
ror
Member
 
Registered: May 2004
Distribution: Ubuntu
Posts: 583

Rep: Reputation: 33
Quote:
Originally posted by sigsegv
That's not the issue ... Ease of use is not an excuse for laziness, ignorance or outright stupidity ... If you don't know what something is, don't go mucking about with it until you've at least goggled it.
It's not an excuse, it's that most users ARE ignorant of what they are downloading and installing, that's how spyware gets on windows machines, it's not like the stuff installs itself, you can use windows without ever getting spyware on it if you don't install junk.
 
Old 12-03-2004, 03:45 PM   #7
sigsegv
Senior Member
 
Registered: Nov 2004
Location: Third rock from the Sun
Distribution: NetBSD-2, FreeBSD-5.4, OpenBSD-3.[67], RHEL[34], OSX 10.4.1
Posts: 1,197

Rep: Reputation: 47
Quote:
Originally posted by ror
It's not an excuse, it's that most users ARE ignorant of what they are downloading and installing, that's how spyware gets on windows machines, it's not like the stuff installs itself, you can use windows without ever getting spyware on it if you don't install junk.
That's not true at all. The vast majority of spyware infects windows computers through the browser and email with zero user intervention. The only way to use a windows computer on the internet and not get that crap is to disable all the things that say "active" and/or "script" in the browser security settings, and I doubt that would stop it all.
 
Old 12-03-2004, 03:46 PM   #8
ungua
Member
 
Registered: Oct 2004
Location: bergen, norway
Distribution: OpenSuSe (SuSe 10.1), Win XP Pro
Posts: 539

Original Poster
Rep: Reputation: 30
my windows was ruined after i downloaded quicktime. i have never heard of this before and never after but that's the reason why i use linux now, 30gb of as-stupid-as-i-am unbackuped data poorer. you won't call quicktime for junk?

regards
ungua
 
Old 12-03-2004, 04:42 PM   #9
ror
Member
 
Registered: May 2004
Distribution: Ubuntu
Posts: 583

Rep: Reputation: 33
Quote:
Originally posted by sigsegv
That's not true at all. The vast majority of spyware infects windows computers through the browser and email with zero user intervention.
BULLSHIT.

Been using windows 2000 since a short while after it was released and have had no spyware infections. (despite scanning regulary, all is found is cookies, which are completely harmless.

to get most spyware installed you need to click "yes" at loads of things popping up asking to install, usually disguised as "click yes to enter this site" or some bs.

If people click yes to those I consider that ignorance and I consider that user intervention.

And the majority of spyware comes from actually CHOSEN TO DOWNLOAD stuff. The thing about windows users, is there's a mentality of downloading a program to do everyhting they want, no matter how simple. People download programs that will change their wallpaper, they download programs to rename files, they download programs to theme other programs, the download programs to manage programs. And in a vast amount of times, the user just gets lost in self-serving advertisments and ends up downloading software they don't know how good it will be.

And a lot of the time people on p2p will download ALL the results from a p2p search in the hope that one will work...
 
Old 12-03-2004, 04:43 PM   #10
ror
Member
 
Registered: May 2004
Distribution: Ubuntu
Posts: 583

Rep: Reputation: 33
Quote:
Originally posted by ungua
my windows was ruined after i downloaded quicktime.
Where did you download it from?

If you downloaded it from apple.com then it's coincedence you lost data after install it, if it wasn't from apple.com then you need your head examined.
 
Old 12-03-2004, 05:34 PM   #11
sigsegv
Senior Member
 
Registered: Nov 2004
Location: Third rock from the Sun
Distribution: NetBSD-2, FreeBSD-5.4, OpenBSD-3.[67], RHEL[34], OSX 10.4.1
Posts: 1,197

Rep: Reputation: 47
Quote:
Originally posted by ror

Been using windows 2000 since a short while after it was released and have had no spyware infections. (despite scanning regulary, all is found is cookies, which are completely harmless.
You should quickly notify the appropriate authorities on such things, as I'm almost positive you're the only one.
 
Old 12-03-2004, 05:41 PM   #12
ror
Member
 
Registered: May 2004
Distribution: Ubuntu
Posts: 583

Rep: Reputation: 33
Why should I feed my ego and think that somehow I'm special? I'm not, there are plenty of people out there who do look at how they use computers, most of them sure are probably using linux, but there are non-clueless windows users, so drop the "better than thou" attitude towards windows users.
 
Old 12-03-2004, 05:47 PM   #13
sigsegv
Senior Member
 
Registered: Nov 2004
Location: Third rock from the Sun
Distribution: NetBSD-2, FreeBSD-5.4, OpenBSD-3.[67], RHEL[34], OSX 10.4.1
Posts: 1,197

Rep: Reputation: 47
My being better than most windows users has nothing to do with what operating system they choose to use...
 
Old 12-04-2004, 02:24 AM   #14
bru
Member
 
Registered: Sep 2003
Location: South Carolina
Distribution: Ubuntu, CentOS, BT4, Debian
Posts: 132

Rep: Reputation: 15
From what I've seen in my 4 years in the IT feild is most Windows users disable tons of security features, don't tend to read the warnings... Because they do not wish to, they just want to read their X, Y & Z, and play their G** D*mn stupid F***ing falsh games!!! (<- sorry just a pet peive)
Most of them have no idea the amount of headaches spyware, adware causes the admins, its not their problem, but it is your problem and your fault that their computer is not working like it did that one day before they got the spyware/adware... Most do not understand what any of it is. They tend to believe that if they do not click "YES" (or whatever) that they will not be able to play their fav. flash game, or check out their fav. site. That tends to be their mentality and reasoning behind their ways



:disclamier:
Mind you this is through my personal experience with my user base, not everyone eles' user base. And just for refrence my user base includes office admin, wrench spinners, bosses, and "smart" admins.
 
Old 12-04-2004, 04:28 AM   #15
linux_terror
Member
 
Registered: Aug 2004
Location: Northbrook, Illinois
Distribution: CentOS-5
Posts: 311

Rep: Reputation: 30
Quote:
all is found is cookies, which are completely harmless.
tracking cookies are harmless? hmmm
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Linux Spyware BajaNick Linux - Security 24 09-08-2007 05:25 AM
Spyware and Linux? stunter Linux - Software 4 07-01-2004 02:04 PM
Can Linux have spyware? ProtoformX Linux - General 4 03-15-2004 06:51 AM
spyware in Linux? moger Linux - General 1 01-27-2004 04:39 PM
Linux and spyware mfarley Linux - General 3 08-14-2003 12:48 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 12:54 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration