create a boot-able disk from an iso file

Joep L. Blom jlblom at neuroweave.nl
Tue Jan 11 23:11:49 UTC 2011


On 11/01/11 23:42, Nils Kassube wrote:
> Joep L. Blom wrote:
>> There are so many claims of viruses for Linux but I never saw one
>> and I'm working with Unix since 1978 and with Linux since 1992. Of
>> course there are methods to enter Unix/Linux systems but gain access
>> to root - which is a necessity for doing serious damage - is IMO
>> only possible due to neglect by the owner (e.g. using root as his
>> main user).
>
> I think root access isn't necessary at all for doing serious damage. For
> a "normal user" like me, the most valuable data are stored in my home
> directory and malware running with my privileges can delete all those
> files. That would probably be the greatest damage that could be done to
> my system.  Furthermore, as a normal user the malware can start
> applications e.g. to join a botnet and send spam mails. That would also
> be a major damage, this time for the network, not for my machine. And
> again root access isn't necessary.
>
>
> Nils
>
Nis,
I tend to disagree. Malware has to enter. This of course can occur via 
port 80. However, to run a program an execute command must be given and 
the executable bit must be set. You can install as many programs as you 
want but a program that is not installed by you can not run as you and 
therefore cannot damage your home directory. Of course as soon as you 
grant somebody permission to enter your system (or your trusted program 
provider is not as honest as you think) than you have a problem. For 
that special case I have a special user with restricted permissions.
Another thing is to always have a firewall not so much for fending off 
intruders (OK is handy) but to prevent unknown malware to contact the 
outside world which means in practice that all outgoing ports are closed 
except when specific programs (listed on the firewall) request access.
  I agree that you must take some precautions even when using a Linux 
system, but hey, you have also locks on your house and you don't give 
away the key to everybody (which you do when you use windows, even 
worse, your trusted (OS) builder has made several secret doors in your 
house which you don't know but which aren't locked).
Joep





More information about the ubuntu-users mailing list