What We Talk About When We Talk About Love Bugs
While it is fun to pick on Microsoft about the love bug virus, those of us in the Linux community should ask ourselves: are we clean? The answer is: not at all. We are just a combination of not having a high enough visibility and pure luck. The visibility issue has to do with the fact that if you are going to write a virus, then writing it for MS-Windows is the best target. There are just more of those systems out there.
The other part of the story is that the average MS-Windows user doesn't know what a computer is. The average MS-Windows user just knows that he or she can write letters and, most importantly, do e-mail. Their MS-Windows system is configured so that the type of e-mail attachment is identified and the appropriate action is taken. One choice may be to execute a program that is written, say, in Visual Basic.
Now, let's say that Linux has won the desktop war, thus making Linux the best (as in most popular) target for viruses. And, just to make things a little better (or more portable), let's say all those users have their systems configured so that attachments in Java are executed automatically.
Would it take a lot of work to find everything that looked like an e-mail address in the user's mail or Mail subdirectory? How about removing all files in their home directory and subdirectories that ended with .jpg and .gif? I think not.
We are being so smug talking about systems being secure because we have user IDs and file permissions, because sendmail can screen messages and so forth. Well, we can be secure, but at the cost of making it harder for users to do their work. We could--and probably should--make every user manually deal with attachments. We could configure sendmail to screen incoming mail for various patterns. We could do a lot of things.
Fundamentally, what happened with the love bug virus was that MS-Windows systems were configured to offer insecure capabilities to its users. Specifically, the ability to point and click to execute code. If, even using the mime.types file, the average Linux desktop was configured to execute a program (Java, Tcl, binary ...), the Linux system is in the same situation.
If Linux was the #1 desktop, then Linux would become the optimal target for such a virus. Why write something that could only attack 1% of the computers available when, with the same effort, you could make it attack-capable on 90%?
We could brag about running as a user vs. root, but again, that wasn't an issue. This virus looked in the user's address book (something that Pine, Elm and Mutt all have) and deleted files in the user's directory.
We are Linux people. If we succeed in world domination, we will be the target. Clearly, it is time for us to work on some innovation.
|Dynamic DNS—an Object Lesson in Problem Solving||May 21, 2013|
|Using Salt Stack and Vagrant for Drupal Development||May 20, 2013|
|Making Linux and Android Get Along (It's Not as Hard as It Sounds)||May 16, 2013|
|Drupal Is a Framework: Why Everyone Needs to Understand This||May 15, 2013|
|Home, My Backup Data Center||May 13, 2013|
|Non-Linux FOSS: Seashore||May 10, 2013|
- RSS Feeds
- Making Linux and Android Get Along (It's Not as Hard as It Sounds)
- Using Salt Stack and Vagrant for Drupal Development
- Dynamic DNS—an Object Lesson in Problem Solving
- New Products
- Validate an E-Mail Address with PHP, the Right Way
- Drupal Is a Framework: Why Everyone Needs to Understand This
- A Topic for Discussion - Open Source Feature-Richness?
- Download the Free Red Hat White Paper "Using an Open Source Framework to Catch the Bad Guy"
- Tech Tip: Really Simple HTTP Server with Python
- Roll your own dynamic dns
3 hours 52 min ago
- Please correct the URL for Salt Stack's web site
7 hours 3 min ago
- Android is Linux -- why no better inter-operation
9 hours 19 min ago
- Connecting Android device to desktop Linux via USB
9 hours 47 min ago
- Find new cell phone and tablet pc
10 hours 45 min ago
12 hours 14 min ago
- Automatically updating Guest Additions
13 hours 23 min ago
- I like your topic on android
14 hours 9 min ago
- This is the easiest tutorial
20 hours 45 min ago
- Ahh, the Koolaid.
1 day 2 hours ago
Enter to Win an Adafruit Pi Cobbler Breakout Kit for Raspberry Pi
It's Raspberry Pi month at Linux Journal. Each week in May, Adafruit will be giving away a Pi-related prize to a lucky, randomly drawn LJ reader. Winners will be announced weekly.
Fill out the fields below to enter to win this week's prize-- a Pi Cobbler Breakout Kit for Raspberry Pi.
Congratulations to our winners so far:
- 5-8-13, Pi Starter Pack: Jack Davis
- 5-15-13, Pi Model B 512MB RAM: Patrick Dunn
- 5-21-13, Prototyping Pi Plate Kit: Philip Kirby
- Next winner announced on 5-27-13!
Free Webinar: Hadoop
How to Build an Optimal Hadoop Cluster to Store and Maintain Unlimited Amounts of Data Using Microservers
Realizing the promise of Apache® Hadoop® requires the effective deployment of compute, memory, storage and networking to achieve optimal results. With its flexibility and multitude of options, it is easy to over or under provision the server infrastructure, resulting in poor performance and high TCO. Join us for an in depth, technical discussion with industry experts from leading Hadoop and server companies who will provide insights into the key considerations for designing and deploying an optimal Hadoop cluster.
Some of key questions to be discussed are:
- What is the “typical” Hadoop cluster and what should be installed on the different machine types?
- Why should you consider the typical workload patterns when making your hardware decisions?
- Are all microservers created equal for Hadoop deployments?
- How do I plan for expansion if I require more compute, memory, storage or networking?