View Single Post

  #6 (permalink)  
Old 10-30-2004
Tim Haynes
 
Posts: n/a
Default Re: Trojans and Trojan-scanner

Michael Heiming <michael+USENET@www.heiming.de> writes:

> In comp.os.linux.security erik <erik@geenspam.vanwesten.net>:
>> Michael Heiming wrote:

>
>>> In comp.os.linux.security Frank J?lich <usenet@frankjuelich.de>:
>>>> Hi,
>>>
>>>> Trojans are not really a big topic at Linux, are they?
>>>
>>> No.

>
>> Bzzzzzzzzzt. Wrong answer. Trojans _are_ a big topic on linux. Have a
>> look at chkrootkit and why it is so popular. Last time I heard somebody
>> say that there environment was safe I found that all 70 servers were
>> severely infected...

>
> Running Linux since ages on a large amount of systems I have never seen
> one. So it doesn't seem to be a big topic. Correct answer.


Now now .. Where does someone who's encountered 3 cracked boxes (owned by
other people, over a course of 2-3 yrs) fit between 0 and 70? What if said
someone thinks the name `trojan' is meaningless and that what matters is
there's been no security exploit of any stupid name conducted on your box?



The reasons one doesn't hear too much about these things are two-fold:
a) the people not getting cracked are the ones who've gone to the trouble
to protect their assets, who take a personal interest in the running of
their servers, while
b) the fuckwits who get all their boxes cracked are the ones who don't show
any care and either turn up on here and whinge, or don't even notice.

In any case, we linux-ers still have a better track-record than the vast
millions who use windoze. Statistics have been flying again, this past
~fortnight, about the percentage of windoze boxes infected by at least one
virus or spyware program.

~Tim
--
Sometimes you're the pigeon, |piglet@stirfried.vegetable.org.uk
Sometimes you're the statue. |http://pig.sty.nu/Pictures/composition/
Reply With Quote