Re: Looking for some website which installs spyware on Linux

From: SPAM SPAM (spam_at_arcor.de)
Date: 12/09/03


Date: Tue, 09 Dec 2003 00:05:52 +0100


NeoSadist wrote:
> I surf the basic same websites as my wife does. I will not say that it's
> impossible for someone to poison some java stuff on a website, but I'd say
> that it's harder, as security specialists have already said thousands of
> times that java is more secure than microsoft's activeX. The problem lies
> in microsoft's tendency to take something good (java/flash) and try to make
> their own version (activeX), which is worse than the original. It's all
> part of their "open standards".

Well, isn't UNIX the original and Linux just a clone, similar to
Java/Flash being an original and ActiveX a clone?

> Anyways, it's not impossible to poison websites to target linux machines,
> but I'd say it's a lot harder due to the way Linux is. First off it's not
> popular yet (obscurity).

Well, okay. There is sure a lot less satisfaction for the poisoner to
target Linux/Unix since too few people are using it. However, it seems
to be very interesting for Crackers to break into Linux/Unix machines.

> ... Secondly its file system is a LOT more secure
> (usually is secure right out of the box).

Agree!

> But I will say a couple of things in abstract about this. First off, it is
> the admin's job to keep the computer(s) safe (or, the owner, or whatever).
> Most people don't care about HOW things work, they just want them TO work
> (which is why people get fleeced a lot). Ignorance and laziness is the #1
> reason why people's computers "crash" or get infected with
> virii/adware/spyware, #1 reason why people's cars break down sooner than
> normal, etc. etc.

Well, in pre-XP days when most people did run 3.1, 95 or 98 there was no
security at all, now since XP is getting more widespread there should be
a security concept. But why do people still get infected?

Why do people log onto their machines with superuser priviledges? Or is
it a conceptual problem of the respective OS?

Even trivial web pages like the following can cause harm
Warning IE - Users: DO NOT EVEN THINK OF CLICKING ONTO THIS LINK!
http: // www.raus.de / crashme <--- remove the blanks!
Users of Mozilla with popups blocked: don't care, it is safe for you!
[[ No virus, just a crazy javascript ]]

However, I use UNIX/Linux since '86 and I never had any contact with any
mail or webpage containing some virus which I could execute on my
machine or which did any harm to the operating system itself. Well,
pages like the above can confuse my browser, but a kill from a text
console later, it is gone. And that page above was the badest experiance
I ever had.

So I am still looking for web sites / mails which crash my OS.

W.F
wfor at arcor dot de



Relevant Pages

  • Re: Microsoft websites screw up IE6(SP2)
    ... I won't get involved in the horrible java mess between MS and Sun. Let them ... > At this point I'm not sure if I agree that the fault lies with SP2. ... > websites compatible with Windows XP Home, which is what I'm running, ... >> JVM for IE (in install), or after install via the JavaPlugin control ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Microsoft websites screw up IE6(SP2)
    ... Microsoft should take proper care to make their own websites ... Maybe that is indeed a javascript or java problem, ... > Script Debugging Problem ... > Sun also offers an automatic download and install of the 1.4 Java plug-in ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: error: org.apache.jasper.JasperException
    ... still can't get onto all websites. ... Norton Internet Security because whenever I disable it, ... > If your mother has Java installed, make sure it is the latest version. ... have her uninstall Java and reinstall the latest version ...
    (microsoft.public.windowsxp.general)
  • Re: Java speed vs. C++.
    ... you should test both C++ and JAVA programs using socket listeners. ... a thousand or so requests (a single printf is not a valid test. ... thousands of commercial websites run using tomcat/java as the basis ... for their web apps with perfectly acceptable performance results, ...
    (comp.lang.java.programmer)
  • Re: Java speed vs. C++.
    ... you should test both C++ and JAVA programs using socket listeners. ... a thousand or so requests (a single printf is not a valid test. ... thousands of commercial websites run using tomcat/java as the basis ... for their web apps with perfectly acceptable performance results, ...
    (comp.lang.java.programmer)