OS Security/Viruses :S

[bugmenot]

Why are there bearly any Viruses/Spyware for Linux and Apple platforms? :confused:

My first guess would be that it is because there isn't that many users out there... or is securitty really tougher to get through in those OSs? :shrug:

Thanks, have a great week! xD

- bmn

[thecoldanddark]

http://marketshare.hitslink.com/report.aspx?qprid=2&qptimeframe=M&qpsp=96

marketshare is one, I mean Vista already has half of Linux in Jan 07.

Second the biggest problem is that most people who use windows run it as admin. Well that and they download shady stuff and go to shady sites.

[nn_step]

that is the thing, some linux distros are more secure than others.

[Sparky]

I remember seeing awhile back an article where they found that Win XP Pro SP2 had fewer security holes than Max OS X (or some version, can't remember which). But no one cares to make viruses for macs because they can do more damage making one for PC's since most people use a PC with windows.

[nn_step]

I remember seeing awhile back an article where they found that Win XP Pro SP2 had fewer security holes than Max OS X (or some version, can't remember which). But no one cares to make viruses for macs because they can do more damage making one for PC's since most people use a PC with windows.
umm that was KNOWN security holes. And for open source software that is ALL of THEM.

[XSAlliN]

Why are there bearly any Viruses/Spyware for Linux and Apple platforms?

You should ask the guys that spend time making a virus for Win, most of then are part of open source and could mess with Linux same as they do with Win (even better since they know it like the back of their hand), but they have nothing against it.

And about Mac, if some guys with good abilities when it comes to security, would want Mac to get same problems as Win they could, that was proven in January, for those of you who don't know January was so called the Month of Apple Bugs (http://projects.info-pull.com/moab/)

http://img480.imageshack.us/img480/6890/picture00cxxxssvmf0.jpg

http://img110.imageshack.us/img110/9255/picture002csdsdar1.jpg

http://img480.imageshack.us/img480/7706/picture003cxcfr1.jpg

http://img110.imageshack.us/img110/3549/picture004cxsdsrp3.jpg

Just because they don't talk about it, doesn't mean they don't have problems, at M$ there's an interior team and exterior community that searches for vulnerabilities so they can fix it, at Mac I guess they have...an interior team, but not sure even about that, since this is the first exterior team that proved how secure Mac really is, then again Mac doesn't like negative publicity even if they found tons of vulnerabilities they wouldn't tell you about that: "A lie well hidden sounds better then a true well told" - M$ got used to negative publicity so it's a different case.

The funny thing about Linux, 13 - 15 years old kids hack in to it and live some Boots behind, all that with a Win OS, one the most secured Servers in the world (or at least that's what they say) UNIX Based from NASA was hacked last year by a guy that know very little about programing, the funny thing is he did that with WinXP OS. :fact: :eek: :D

More stable - no doubt about that, more secure - could be, the Grail of OS when it comes to security - the Joke of the century :D, I know this comes a shock for some of you but it's true.

[Jinxxed]

Why are there bearly any Viruses/Spyware for Linux and Apple platforms? :confused:

My first guess would be that it is because there isn't that many users out there... or is securitty really tougher to get through in those OSs? :shrug:

Thanks, have a great week! xD

- bmn

Market share and most of todays linux distros have proactive stuff that limits an infection even if a single user should get infected, such as ArmorAll from SuSE for example.

The exception is Ubuntu.

[Jinxxed]

umm that was KNOWN security holes. And for open source software that is ALL of THEM.

So you are saying that for FLOSS they presented "ALL of THEM" and for others they presented only "KNOWN".

Heh, how do you present ANYTHING besides what is known? Because that is what you are saying, that for FLOSS they presented more than they did for others and since for the others they presented all known then to present more, you'd have to tap into the unknown.

The truth is that exploits are not more common on MS OS's but more exploited, there is also another issue in there, it is EASIER to use the exploits in MS OS's and if you do it you can do more damage.

At least up to Vista but since most morons just turn off UAC, well, maybe not for morons.

I'm sure they will blame Vista for it though and not their own stupidity they exercised by turning off UAC.

[mrapples]

You should ask the guys that spend time making a virus for Win, most of then are part of open source and could mess with Linux same as they do with Win (even better since they know it like the back of their hand), but they have nothing against it.
no.

it seems you are implying that the linux kernel has a bunch of vulnerabilities that people could exploit if they wanted to, but they dont just because they like it
if this was true, chances are they would be reported and fixed, but that is not a terribly common occurrence with the kernel, as so many eyes are on it all the time, most bugs get ironed out before it is made stable

also, making the assumption that most virus developers are 'part of open source' is unfair and prejudicial

perhaps you should ask the guys so that you can get your facts straight before making posts such as this

[Jinxxed]

no.

it seems you are implying that the linux kernel has a bunch of vulnerabilities that people could exploit if they wanted to, but they dont just because they like it
if this was true, chances are they would be reported and fixed, but that is not a terribly common occurrence with the kernel, as so many eyes are on it all the time, most bugs get ironed out before it is made stable

also, making the assumption that most virus developers are 'part of open source' is unfair and prejudicial

perhaps you should ask the guys so that you can get your facts straight before making posts such as this

Well, he's right you know, have you ever checked out the list of kernel vulnerabilites not to mention X vulnerabilites or even userland driver vulnerabilites?

But i do agree about one thing, and that is that most (at least for frequent updaters of their systems) of those vulnerabilites have been patched faster than anyone could have exploited them.

That is what is great with FOSS, it's an enormous amount of people working together to achieve a common goal.

The ONLY form of communism that can actually work, and it scares the living dayligths out of most people, which is fun too.

[nn_step]

Well, he's right you know, have you ever checked out the list of kernel vulnerabilites not to mention X vulnerabilites or even userland driver vulnerabilites?

But i do agree about one thing, and that is that most (at least for frequent updaters of their systems) of those vulnerabilites have been patched faster than anyone could have exploited them.

That is what is great with FOSS, it's an enormous amount of people working together to achieve a common goal.

The ONLY form of communism that can actually work, and it scares the living dayligths out of most people, which is fun too.
Technically it is Socialism. Then again we are speaking about two paradigms with vulnerabilities, known and to be discovered. KNOWN security holes are patched very quickly with FLOSS, since people know how they work and can logically spend a little bit of time to protect against them. Then there are holes that in theory exist but have no demonstration for how they work. For example set up windows 2000 and close all but port 80, in theory it is entirely hackable; however it wouldn't be

[Jinxxed]

Technically it is Socialism. Then again we are speaking about two paradigms with vulnerabilities, known and to be discovered. KNOWN security holes are patched very quickly with FLOSS, since people know how they work and can logically spend a little bit of time to protect against them. Then there are holes that in theory exist but have no demonstration for how they work. For example set up windows 2000 and close all but port 80, in theory it is entirely hackable; however it wouldn't be

NO, socialism is a means to control the market forces through laws and rules, it's communism, look it up.

My statement holds true and you know it.

In reality, port 80 is fairly useful for a hacker, in fact, most novice hackers only use that port. besides, W2K doesn't work all that great without 443 enabled, i'm sure you noticed that when you peddled around your warez.

[nn_step]

NO, socialism is a means to control the market forces through laws and rules, it's communism, look it up.

My statement holds true and you know it.

In reality, port 80 is fairly useful for a hacker, in fact, most novice hackers only use that port. besides, W2K doesn't work all that great without 443 enabled, i'm sure you noticed that when you peddled around your warez.
alright to completely argue with you, I am going to take a retail version of Windows 2000 SP4 and set up a computer without any firewall and close all ports but 80, then I will pay your $100 if you can hack into it. And Yes I am familiar with HTTPS

[Jinxxed]

alright to completely argue with you, I am going to take a retail version of Windows 2000 SP4 and set up a computer without any firewall and close all ports but 80, then I will pay your $100 if you can hack into it. And Yes I am familiar with HTTPS

You're a wimp, $100? Make it 100K's and i might do it for fun, i don't need the money but hell, if you are going to bet on something, do it right.

You will have to run what you say you are running though and on an in/out going firewall that does not restrict port 80.

I'll leave you a package and record the session in two ways both by a scanner program to track all traffic and by a videocamera.

I wouldn't get out of bed for $100 though, but you being the brand new MS business partner, man, you must be like a multi billionaire, right?

[nn_step]

You're a wimp, $100? Make it 100K's and i might do it for fun, i don't need the money but hell, if you are going to bet on something, do it right.

You will have to run what you say you are running though and on an in/out going firewall that does not restrict port 80.

I'll leave you a package and record the session in two ways both by a scanner program to track all traffic and by a videocamera.

I wouldn't get out of bed for $100 though, but you being the brand new MS business partner, man, you must be like a multi billionaire, right?
money isn't the matter, or you are unable to back up your claims?

[Jinxxed]

money isn't the matter, or you are unable to back up your claims?

Nema problema little bro but it will cost you to see me perform.

You got 100K?

[nn_step]

Nema problema little bro but it will cost you to see me perform.

You got 100K?
don't call me Bro.
Heck I'll give you $500,000 if you can gain access via its network connection. Sound fair to you?

[Sparky]

Umm.... that's an awefully large amount of cash, what happens if he can do it...?

[nn_step]

Umm.... that's an awefully large amount of cash, what happens if he can do it...?
he can't, Microsoft made the exact same bet when they first released Windows 2000 and no one cashed in.

[flashnc]

pure lunacy