Social engineering (trojan) via gnome-look.org

[Frak]

I just think people are scared too easily. Security isn't black and white. It's all about the user not being silly and downloading crapware. If Linux were as popular as Windows, you would still have to go out and find this stuff, it wouldn't just hop onto your computer without your permission.

1. Maybe. There's a chance that holes will be found. There aren't enough police for the criminals if ya know what I mean.
2. Like Windows, when you throw commercial software into the mix, you get exploits through those. When people are attacked by drive-by-downloads, it's because of vulnerabilities in extensions such as Quicktime/Flash/Java/.NET Extensions/etc. It could even be through the browser itself.

If you're using UAC in Windows Vista/7 or a User Profile on Windows NT/2K/XP it's going to want your permission.

This.

[ibuclaw]

Yes this is so true, but we need to (especially in newbie friendly Ubuntu) get that basic knowledge across....

We have a "Security Discussions" sub-forum.

Although, no one really ever reads the stickies in there.

Ubuntu Security. Written by bodhi.zazen

Regards

[NoaHall]

Pull the Ethernet cable out, that's the most secure system.

Oh yeah? What about user damage? rm -rf etc.

[Techsnap]

Oh yeah? What about user damage? rm -rf etc.

Well how about you just don't turn the system on. Don't connect any cables.. that's ultra secure. Anything else would be hardware related.

[Frak]

Oh yeah? What about user damage? rm -rf etc.

That yields an error if you try it on root. Ubuntu won't let you.

As for the whole security argument, it sounds like a case of YoudHaveToRunAsRootForItToDoAnyDamage™.

Though, a truly secure system takes no input and yields no output.

[NoaHall]

That yields an error if you try it on root. Ubuntu won't let you.

As for the whole security argument, it sounds like a case of YoudHaveToRunAsRootForItToDoAnyDamage™.

Though, a truly secure system takes no input and yields no output.

So ? You can still use it on files by accident.
Anyway, you're agreeing with me - the safest system is one where the user can't do anything.

[Frak]

So ? You can still use it on files by accident.
Anyway, you're agreeing with me - the safest system is one where the user can't do anything.

Why do all my responses have to be disagreements?

[Techsnap]

Why do all my responses have to be disagreements?

Frak, I disagree.

[NoaHall]

Why do all my responses have to be disagreements?

Because you like to disagree.

[Frak]

Because you like to disagree.

i

Frak, I disagree.

RAWRAWRAWRAWRAWR

True.