[AntiVirus + Ubuntu] was - Re: And another Ubuntu convert!

[Brian McKee]

On Thu, Jan 22, 2009 at 9:37 AM, Mark Haney <mhaney at ercbroadband.org> wrote:

> ANY internet facing system is at risk.

Yes!

>  And every precaution you can
> take SHOULD be taken.

That would include disconnecting it from the internet....

The most secure computer I'm aware of is right here -> http://is.gd/Wsu


If that's not what you want, then you've got to balance risk against reward.

> Do you not routinely do a scan with rkhunter?

Yes, *I* do!  And if the OP had said he'd installed rkhunter and set
it to email HIM if it found anything I'd be saying - hey, that was a
really great idea!    But anti-virus is not rkhunter.   ClamAV will
not help that user as much as 30 seconds of training once a year.
It's a waste of time better spent elsewhere.

> I've rebuilt way too many compromised systems to trust that it will
> NEVER happen to me.

And how many of those systems had AV on them? And the ones that didn't
might have been saved if the user was better educated.  Assuming they
were Windows users, at least somebody could have training them to
install and update their AV!

I think AV is a tool, like many others, that should be used when
appropriate, and ignored when not, and in this case, was rightly
ignored.

Hope I'm not coming off as anything but friendly !

Brian