Re: [gentoo-user] Linux viruses

[Dale]

Walter Dnes wrote:
> On Mon, Jul 08, 2013 at 08:24:03AM -0500, Dale wrote
>
>> Questions.  Can a virus infect the OS when running on Linux through
>> java/javascript/flash?
>   There are two levels of "infection"...
>
> 1) One-off execution of bad stuff when you visit a web page.
>
> 2) A more permanent infection that survives restarting the web browser,
> and rebooting the machine.  But that would need to be linux executable.


OK.  I do banking online.  I also pay my bills online along with social
sites as well.  I use Lastpass so that I can have some really REALLY
funky passwords.  I think I am one of few that has not had his facebook
hacked.  Anyway, I run Gentoo which is known here.  I use
Firefox/Seamonkey as my web browser.  So next question sort of takes us
back to my point with the knucklehead in the store.  Am I safer, much
safer, using Linux over windoze?  That answer would take into account
the fact that most virus/nasty code is written for windoze and not Linux
but also that Linux is just built with security in mind.  I belive that
I am much safer with Linux myself.  Just a rough example of what some
passwords look like for me:

5u9YU7335cb29hPE

I don't actually use that as a password so no need in some script kiddy
trying it.  LOL


>> Or would the infection at the least be limited to that user?
>   Usually, unless they find a privilege escalation hole.  Then again,
> it's the user-info (bank login and password, credit card number, etc)
> that's really profitable for organized crime.

I can certainly agree with that.  I have a few people that use windoze
and refuse to even think about ordering online, banking or anything that
requires financial type info.  If they are not going to keep their stuff
up to date, may be a good idea.  These are the same folks that don't
update anti-virus and such too.  :/


>
>> How is html5 going to affect this?  Better or worse?
>   If/when it results in the end of Flash, that's an improvement.  The
> thing I worry about is that anything "powerful enough" can be (ab)used.
>

I was hoping if they was going to all the trouble on creating this that
it was going to do some sort of good and improve security.  I don't mean
just for Linux folks either.  For the record, I use https everywhere and
I think I have a similar thing for html5 too.  I know I opted in for
youtube. 

Thanks for the answers.  I think you see where I am going with this.  I
still laugh when I think about what that guy said tho. 

Dale

:-)  :-) 

-- 
I am only responsible for what I said ... Not for what you understood or how you interpreted my words!