Linux infection proves Windows malware monopoly is over

[Christopher Chan]

On Tuesday, June 15, 2010 03:41 PM, Basil Chupin wrote:
> On 15/06/10 15:22, Christopher Chan wrote:
>>
>>
>> On Tuesday, June 15, 2010 12:49 PM, Fred A. Miller wrote:
>>
>>> Linux infection proves Windows malware monopoly is over
>>> <http://ct.zdnet.com/clicks?t=549550802-f09aff1f3240c763b781087d83996fa3-bf&brand=ZDNET&s=5>
>>>
>>> Every time I write about Windows security software, I get a predictable
>>> flood of responses from Linux advocates who claim that they don't need
>>> any such protection.
>>>
>>> READ FULL STORY
>>> <http://ct.zdnet.com/clicks?t=549550803-f09aff1f3240c763b781087d83996fa3-bf&brand=ZDNET&s=5>
>>>
>>>
>> Linux operating systems do not get infected. There are no virii that
>> work on Linux. You can get trojaned or rootkitted but you won't get self
>> replicating malware. Linux operating systems get cracked. And that has
>> always been the only means of dropping malware.
>
> Do I have things wrong and not fully understand the implications of
> "security" and "cracking" and "hacking"...I do admit ignorance in this
> field.
>
> But isn't there an annual competition where the person who
> "hacks"/"cracks" the Windows or MAC or Linux system earns a prize of
> (?)$1000 plus the expensive laptop on which that OS was installed?

I have heard of stuff like that yes.


>
> And so far the only one not "cracked"/"hacked" has been Linux?

/me shrugs.


>
> Am I right? I would - seriously - like to be told that I am wrong in
> what I just stated.

You're assuming every Linux installation out there is maintained and up 
to date. I would not be surprised to find Redhat 9 or older connected to 
the Net somewhere. These might even be just straight installations of 
the CD and would be full of security holes waiting to be cracked. The 
list of fixed remote root exploits is rather long you know...

DJB ran a class not too long ago where his students concentrating on 
find security holes in daemons...they found a fair few and wrote exploit 
code IIRC.