View Single Post
  #50   Report Post  
Old 07-05-2004, 01:08 PM
Jaques d'Alltrades
 
Posts: n/a
Default OT - hiding email details on newsgroups

The message
from "Tumbleweed" contains these words:

It may be more powerful but that is definitely at the expense of
ease-of-use. This is from a desktop rather than a server POV. What it has
got going for it ATM is relative immunity to viruses, partially because of
how it works and partially because the virus/worm writers dont target it.


Yet. In fact it has been targeted

I have lifted this out of a Zetnet help group - I hope its author, a
rather techy Zetgod, won't mind:


: And I wonder how long this window of safety for Linux users will
: continue - virus writers must have them in their sights by now!

: Unix software has been under attack before, and does get attacked.
: Remember the "Internet Worm" of 1988?

: It is almost impossible for unprivileged users receiving an email to
: cause that machine to be infected. Reasons:

: * Sensible mail clients don't do anything with executable attachments
: * User privilege only applies to user's own files

: Server-level vulnerabilities are patched around much more quickly. Unix
: boxes tend not to have monolithic software that needs complete
: replacement (eg. IIS).

: ssh had many exploits out for it, most of which were fixed within 24
: hours. Matrix Reloaded shows an old ssh being exploited.

: The other advantage is diversity of software.

: I'd expect MySQL to be one of the first targets of the black hats,
: which is one reason why we don't use it for our own purposes (apart
: from it being a toy database server).

The whole thread might be of interest - unfortunately (for non-Zetnuts)
the Zetgroups are closed to outside reading/contribution now, after
being invaded by trolls and (self?) abusers some years ago.

--
Rusty
Open the creaking gate to make a horrid.squeak, then lower the foobar.
http://www.users.zetnet.co.uk/hi-fi/