Re: what to do with spywares

From: Gary Petersen (garypNOSPAM1492NOSPAM_at_needed.or.wantedearthlink.net)
Date: 07/24/03 

Date: Thu, 24 Jul 2003 04:06:52 GMT

On Mon, 21 Jul 2003 00:32:24 -0500, Steve Manzo wrote:

> In linux unlike windows,
> you can't* really get viruses due to the way the OS works. Its very
> hard to, if almost impossible, but there are not that many viruses out
> there. Since you don't run as root all the time(I assume you don't) it
> would be very hard to have a virus gain god access on your computer.
> Also spy ware is not that possible, yes you can get those tracker
> cookies, but you can just delete them. You can't get any programs(as
> far as I know) that would be spy ware, because they are mainly designed
> for windows users.

Don't get over confident. Spyware, trojans and worms are valid
concerns for Linux/Unix users. Not only do many programs have
exploits, but new Linux users can be suckered into downloading
and installing a trojan. Since many people install programs
as root, a trojan can take over the system when the program
is installed.

I've heard on the Internet of instances where an hacker
was able to get root access and install his own (modified)
kernel--guaranteeing the intruder unchecked root access.

> Since Linux does not have a registry and once again
> I state you don't run as root, a background program cannot be installed
> automatically or at all since they are designed for windows, i.e. Gain,
> Alexia, etc.

I think that KDE and Gnome have configuration directories
under $HOME that function like the Windows registry.
Even without root access, a user-installed trojan could
examine the files in those directories and send
personal information to a hacker.

> Basically you don't need a virus scanner or anti-spy ware
> software. You may hear about anti-virus software for linux such as clam
> anti virus, but those are mainly for servers to protect windows
> computers connected to the linux boxes.
>
> *By can't I mean, not very easily. I have heard of a virus's for
> linux(like one or two if that), but those are because of poor sys admins
> who don't check to see what they are running. This is from what I know,
> please don't flame my ass.
>

In a sense, each Linux user is a sysadmin, but newbie users
aren't aware of security issues that trained sysadmins
should know of. Newbies should try to follow these rules:

1) Don't run programs as root whenever it can be avoided.
2) Download software from trusted sources only.
3) Learn about Linux security issues.
4) Be suspicious.

> Hope this was of some help, and enjoy linux.
>
> -Steve

Yes, enjoy Linux!