First IA64 Windows Virus Released
NinjaPablo writes "W64.RugRat.3344 has been released as a proof of concept virus. It is the first virus which will only run on Windows on the IA64 platform, and uses APIs from 3 native DLLs to avoid crashing applications. It infects files that are in the same folder as the virus and in all subfolders. The author of the virus has also written other concept virii in the past."
The virus carries the following string within itself which is never displayed: "Shrug - roy g biv"
This presumably refers to the colours of the rainbow: Red Orange Yellow Green Blue Indigo Violet.
Here's to a long and fruitful future for Win64 viruses...
It was only a matter of time...
Hmmm.
I for one, welcome our new IA64 Win32 Script Kiddy overlords.
Now we hunt him down and execute him, right?
pb Reply or e-mail; don't vaguely moderate.
1) The virus uses native DLLs - it should've used .NET managed code to avoid common memory leaks and other mistakes
2) The virus does not run on 32-bit platform - so no chance of getting "Windows XP Compatible" logo.
3) The virus does not take advantage of the latest Longhorn, Avalon and Indigo features.
Overall, the work is impressive, but I am waiting for more robust and efficient viruses.
I'm surprised that this tiresome topic wasn't raised before the third post.
Iii neverii getii anyii virii. Itii mustii beii painfulii toii runii windowii.
The plural of "virus" isn't "virii." There is no such word. The plural of "virus" is "viruses."
Here's a good explanation from cdknow.com, quoted here in its entirety because the people who most need to read this won't click on a link.
More plural-of-virus resources:
perl.com, the canonical and exhaustive source
Jonathan de Boyne Pollard's Frequently Given Answer
Merriam-Webster's "Word for the Wise," January 20, 2000.
that 64 bit viruses are twice as powerful as 32-bit ones?
guns kill people like spoons make Rosie O'Donnell fat.
Argh.
To try to stall everyone's almost certain flamewars regarding the correct plural form of virus, let me propose a new word.
Virusesii.
There, now everyone can use it, okay?
IA64 Windows was the first. (Someone had to say it)
a hole in the "people write virii for it because it's the biggest target" argument for the proliferation of Windows virii?
That which does not kill her only prolongs my agony.
I wonder how long it will be before the FBI (or other law enforcement agency of choice) is breaking down his/her door and takes away his PC's before locking him/her up forever without a trial. Ahhh Freedom.
Whats the big deal? Now windows will get messed up in full 64 bin glory.And later you will see some 64 bit spyware and a tad of some 64 bit spam :P. Basicly
Fucked above the 4GB limit.
Yes! You're no longer limited to slowing your computer by simulating an architecture you don't have--you can run their viruses, too!
So what are the legal implications of writing viruses?
Could the DMCA be evoked in such a case?
Or is it only illegal when they are executed and allowed to spread to the wild?
Just some questions.
Feel free to respond, thanks.
zosxavius photography
Then that 64 bit OS might actually get out the door sometime this decade.
Free Mac Mini Yeah, it's
We should have him executed, and collect the $1million+ he's worth.
Hades, PoD: Official Advocate
Wow, in the time it took me to type that, four other people posted basically the same thing. I've never been this redundant before.
The plural of "radius" is "radii" only because an "i" follows the "d".
Indeed, I often tell people that you'd say "Look at the buses" instead of "Look at the bii".
I'm more surprised that after all these years someone would still call it virii.
Virus researchers have just announced that they developed a proof-of-concept virus that can spread on an 256-bit operating system that has as yet to be designed.
According to spokesperson who didn't wish to be identified, he claimed that this had been the most infectious virus that he had seen in the twenty years of his career and had also proved to be worst to remove. He also recommended that all users should immediately buy the latest version of Anti-Virus-Sponge-Sentinel which would mop up all traces of the virus before it reached the system.
Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
I apologize for my horrid use of the word 'virii', and accept the standard and proper word, 'viruses'.
Must not have had enough coffee when I submitted that...
SmashTech - No smashing of tech involved
This looks pretty oldschool... no stupid RPC nonsense or VBScript, it's a virus that infects other programs, and is spread by copying infected executables around. Just like the old days with MS-DOS viruses passed around on BBS's.
Incidentally, you could probably limit your vulnerability if the program was installed by an Administrator but only run by users without write permission, or if you removed write permission from programs that you run in your own folders.
The really cool thing is that it's written in IA64 assembly code. That sounds like quite an impressive feat. From what I hear that is far worse even than the PPC64 assembly code I usually write.
the plural of 'virus' was actually 'virus'. Whoa.
The plural of "viruses" is not "virii"!
Quoth Wikipedia:
The "ii" ending only occurs in the plural of words ending in "ius". For instance, take radius, plural radii: the root is radi-, with the singular ending -us and the plural -i. The ending -i is used only for masculine nouns, not neuter ones such as virus; moreover, viri is the plural of vir, and means "men"
It's viruses! </rant>
"Wow, you're like some kind of superhero able to ward off happiness and success at every turn."
-- Ryan Stiles
There's no such word as virii,
There's no such word as virii,
You don't win friends with salad.....
Not noteable, IMO a rubbish article.
Mod me down. I double-checked this again, apparently virii isn't accurate.
If only Wikipedia were right, and all such endings in Latin were so regular...
Read the details, there's nothing special to see here. This isn't a worm, it doesn't gain root/admin access and it doesn't exploit any vunerabilities of the platform. It requires "direct execution" (i.e. the user has to run it manually). It's just a good old fashioned virus that inserts code into an exe. The proof of concept is that Windows leaves exes writable by default. You can prevent it by not making your application folders writable from userland, which is what any good admin should be doing anyway.
"The file infection routine is standard. The last section of the executable is marked as executable, the virus body is inserted into the
last section and a random number of bytes are appended to the end of the virus body."
Showing that you can write viruses for 64-bit system?
Oh my god, I would never have thought that was possible! How can it be!? Mind boggling indeed! But it's great virus writers develop concept viruses to show us these amazing tasks that was previously thought impossible can actually be done!!
Beware: In C++, your friends can see your privates!
That's Muslimoid, as in Islamoidizationification.
I'm still waiting for the fabled Open Source Cross Platform Virus that can be deliever to all mail system. Sure it require the recipient to uncompress and compile the virus, but it can hit ALL platforms.
Haven't you read the "How to Troll" posts or something? That's the lamest attempt I've seen on slashdot yet.
So is this how virus writers get away with it, just call it a "proof of concept"? Gee, thanks, but I really don't think there was any question at all that it could be done...
"Who are in control, they are not in control of anything - they don't even control themselves!" - Glen Beck
"l33+5p34k" is not acceptable and should not carry over into the official language just because a bunch of basement dwelling morons think so.
So what? Boxen is not the plural of box and Unices is not the plural of Unix. But this is part of hacker culture. They are jokes. You don't have to laugh, but it's not incorrect to make jokes either.
Please correct me if I got my facts wrong.
The release is followed by a proof of concept jail sentence ;)
Of course I'm referring to total amount of Itanium users out there.
It could be worse. He could be an Idiotarian.
It looks like Gaelic or somesuch to me.
Please correct me if I got my facts wrong.
...'vir' in Latin is 'man'. The form of 'viri' mentioned above can be confused with some derivation/declention? of 'vir'. My lack of remembering much of Latin is also why I only took three years. =P
Take a nice long breathii.
Virii, Virii, Virii Yes, monkeydance time again.
W64.Rugrat is a fairly simple proof-of-concept virus. However, it is the first known virus to attack 64-bit Windows executables on IA64 systems intentionally, and it does so successfully. The virus uses a handful of Win64 API-s from 3 different libraries, NTDLL.DLL, SFC_OS.DLL and KERNEL32 respectively.
From NTDLL.DLL the viruses uses the following 3 functions LdrGetDllHandle(), RtlAddVectoredExceptionHandler() and RtlRemoveVectoredExceptionHandler(). The virus supports vectored exception handling to avoid crashing during infections.
Yes, the virus uses three DLLs. It also uses a routine to avoid crashing itself while infecting the machine... it does not look like the virus cares about crashing other applications.
The thing to pay attention to here is that this is a fault tolerant virus. I have seen more and more effort lately (Sasser for example avoids shutdowns to help it propagate) from authors trying to make their creation survive.
here.
"Chances are, you're behind a firewall or proxy, or clicked the Back button to accidentally reuse a form."
No, I just type really fast, particularly when most of my post is already in the clipboard.
--
E_NOSIG
And why is it a shock that a virus can be written for either?
When palladium comes out and someone writes a virus that can escape it's sandbox, infect executables (which I'd imagine would involve resigning them) and spread, I'll be impressed.
I don't need no instructions to know how to rock!!!!
The plural of penis ought to be penes, if you were sticking to Latin plurals. Fortunately we aren't, and it isn't.
roy g biv is the author of the worm, and is a member of the 29A VX group. The group has been responsible for Donut (first .NET virus), Winux (the first virus to infect both Linux ELF binaries and Windows executables), as well as a few others of notoriety.
29A is probably the most elite malware group out there.
Is PPC64 assembly that bad? I am just getting started on PPC, but it looks like decent ISA to me, much unlike crufty old x86, or new-cruft-on-old-cruft x86-64.
Please correct me if I got my facts wrong.
here
Apologies if this is a double post. The first attempt went into limbo. However, the Slow Cowboy filter appears to think I posted it.
--
E_NOSIG
Uh, no. Why would it? This was a proof of concept virus. Did you RTFA?
Not only that, but in the wild the virus would need to find a way to infect the machine in the first place. Again, this was a test.
Mainstream Windows viruses spread because of the idiocy of users. They open attachments, they download warez off Kazaa, and pretty much have no idea about security (no matter how many times you tell them). Yes, absolutely, 100%--people write viruses for the biggest target they can reach.
You don't think people write Linux virus tests?
M$ Trustworthy computing point: non compatibility between 2 architectures is more "Secure"
Striving to be common....
Striving to be common...
aha! So that's what delayed the release of windows for amd64: it was not compatible with old viruses. Now that this obstacle has been overcome, how long until the release?
___
If you think big enough, you'll never have to do it.
This is Slashdot, where 2/3rds of the discussion will break out into redundant corrections of a single word. The whole point of the article will be lost, because geeks and nerds who have no social skills had only their anal retentive thirst for knowledge to rely on growing up, and so they are used to pointing out and determining facts as a way to impress people socially. Which doesn't work, of course, and only causes flamewars amongst other geeks.
Some people need to get out more.
"Train employees not to open attachments unless they are expecting them. Also, do not execute software that is downloaded from the Internet unless it has been scanned for viruses. Simply visiting a compromised Web site can cause infection if certain browser vulnerabilities are not patched."
someone must have mistyped that from this...
"Train employees not to open attachments unless they are expecting them. Also, do not execute software that is downloaded from the Internet unless it has been scanned for viruses. Simply visiting a compromised Web site can cause infection if a certain browser's vulnerabilities are not patched.
Not sure why that poster tried to act like PPC64 is a difficult variant. It's easier than many others. Very straightforward.
I think he was just showing off his Intarweb c0ck.
IA64 is a nightmare. Instruction bundles, etc.
I would like to protest that although this is technically a 64-bit virus, it does not run on the more common and widely accepted Powermac G5, instead choosing to support only a badly cludged extended win32 API.
Does anyone know of a 64-bit version of Bochs or VirtualPC which ould let me run this new and interesting piece of code in emulation?
I have been a user for about 10 years. This ends Feb 2014. The site's been ruined. I'm off. Dice, FU
Okay, just to collect all of the Microsoft trolls in one thread:
How can Windows ever be secure when exploits are released before the OS is available?!
It seems to me that Microsoft can't design a secure OS. After talking about security for more than 2 years, their latest incarnation is even less secure on its release date than Windows 95!
Microsoft: the Day Zero Exploit(tm) company
The society for a thought-free internet welcomes you.
Roy g biv is a member of 29A.
Wait a minute - I thought MS wasn't going to release a version for IA64? Is this some kind of joke or have I been making love too much to hear the news?
Please correct me if I got my facts wrong.
Perhaps we _should_ use the term virii for these do-nothing, 'i just wrote it cause I'm l33t' brainless viruses that have been popping up all over the place - the multitude of click 'n send email crap that are Outlook's forte.
When actual, destructive programs come about, called them viruses. These weenie, all they basically do is self-replicate, things can be called virii to serve as a distiction between a trye virus and a wannabe virus.
...Rob
The American Dream isn't an SUV and a house in the suburbs; it's Don't Tread On Me.
"[It] uses APIs from 3 native DLLs to avoid crashing applications."
Viruses are sure getting considerate!
Who cares about the dictionary, in and of itself? When we speak or write language you made up, especially when it's redundant, our listeners/readers will be confused bu, and/or disrespectful of, your meaning. Do you prefer your message to be the subject at hand, or your identification with a subgroup? Sometimes you must choose.
--
make install -not war
To all those saying that a proof-of-concept virus is still a virus and that this guy is doing a disservice to the world by writing one, I'd like to give an alternate way of viewing it. Writing proof of concepts that aren't spread in the wild (like the other viruses mentioned in the second link) help anti-virus groups in advancing knowledge on current/new techniques that may not have been known about or considered in the past.
IANAVWOAVG, though (I Am Not A Virus Writer Or Anti-Virus Guy)
Redundant, yes, but of all the anti-virii comments, this one's the best. It should get at least a 2.
It's right here
Join the TWIT army now!
I wrote one years ago, how do I submit my claim to dispute this asshat.
Right over here!
Join the TWIT army now!
Shouldn't that be
(Thank you, Slashdot, for complaining that my comment has too few characters per line. Hopefully this will make you happy.)
People seem to be missing a major point here. This file doesn't do anything fancy, it just reads files and 'infects them'. There are no indications that this 'virus' is bypassing any kind of system security.
From the article:
"The SfcIsFileProtected() function of SFC_OS.DLL is used to avoid infecting executables that are protected by SFC (the System File Checker)."
Any sensible XP64 installation would not allow system files to be write accessible to anyone but the Administrator.
It's as if I wrote a c program that used fopen() and write() to destroy files, then declared I wrote a virus for linux. Whoo hoo.
...To future occurances of this comment being modded "Troll" on sight.
Slashdot will only display 100 comments to a page. And responses to this comment tend to take a bunch out of that quota every time.
tasks(723) drafts(105) languages(484) examples(29106)
:)
A goal is a dream with a deadline
There's no such word as virii
It proves he is an asshole... how does it help that he wrote a virus? ./virusWritters
---
You mean to tell me that Windows is *INSECURE*?! NO WAY!!!!!!!!!!!!111one
Redundant and unfunny.
And besides, Beowulf kicked Grendel's ass - you Old English epic poem ignorant mutha.
I apologize for my horrid use of the word 'virii', and accept the standard and proper word, 'viruses'.
... feel free to use whatever slang you like.
:-)
As others have pointed out, the language, and slang in particular, is constantly evolving. You were using common slang in an informal forum, pendants seeking to impose their notion of linguistic orthodoxy notwithstanding.
Had you been an anchor on the television, or submitting a serious scientific article for peer review, it might have been an issue. This is slashdot
Must not have had enough coffee when I submitted that...
Well, I for one have had plentii of coffeeii, enough to consider writing some antiibodiies for the virii others feel the need to wriite.
The Future of Human Evolution: Autonomy
If the OS can't be released on time, at least the virus that exploits the OS can be released on time!
I for one welcome our new [insert main topic] overlords.
is it also backwards compatible? :)
Hee hee :)
A goal is a dream with a deadline
... i can't find the "virouses X virii" thread.
Something *VERY* weird must be going on!
http://developers.slashdot.org/comments.pl?sid=52
--rhad
Slashdot needs to interview Natalie Portman.
The person who uses a word because it sounds cooler and everybody still knows what he means, or the person who judges somebody as a "retard" for use of a single word?
I use virii, because I like that word better. And nobody has a problem understanding what I mean, therefore the point of language, namely communication, is accomplished just as well. Viruses looks and sounds fucking stupid. You retard.
- Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
> For the purists, in Latin, there is a rarely-used plural form:
> virus, viri (neuter)
Where did you get this? Where is this attested?
Are you sure that you're not mistaking "a nowhere and never attested form" for a "rarely-used form" ?
That is, I have always understood that the question of a plural for "virus" is entirely hypothetical, as there is no attestation for such at all. So people hypothesize, about it, and also about -- um, pelagus and I can't recall the other right now.
If you want to be pedagogical, you should get it right.
Technology? You had TECHNOLOGY? Why you kids got it easy, WE didn't have technology, no sir! Why, first we had to walk UP-hill, 83 miles, to the sacred valley, then we had to get naked, smear ourselves with cowdung and ashes, eat magic mushrooms and DREAM about technology! That's all WE Had, and we LIKED IT!
Actually, 64-bit Windows XP is already out there and available for purchase, but only for the IA64 architecture (itanium) - support for AMD's 64 bit chips is still in beta (although relatively stable, from what I hear).
must have been caused by one of those viroxen I've been hearing about.....
A goal is a dream with a deadline
So this virus can infect the whole 3 people on this planet who actually run 64bit intel procs and win64...
So much for MS's claim that the number of viruses a platform has is proportional to its popularity... that is, so they claim, why Linux has so few (no?) viruses and why Win32 has so many.
Somehow I think the number of people running Linux outnumber the people running Win64 by about 1,000,000:1 (maybe more).
- Preferences: Solaris 10 (servers), Ubuntu (desktops), Solaris 11 (personal servers) -
Not this elitist, hoary old Chestnut again.
I am so tired of Windows apologists making this totally unfounded claim, over and over again, hoping the public will continue to buy it.
Let's get this straight:
Windows viruses exist because Microsoft decided long ago that they were going to co-mingle EXECUTABLE CODE with DATA!
Windows users have been trained for years to double click on DATA to launch the EXECUTABLE application which reads the DATA.
In a sane world, a user would have been taught to launch the APPLICATION first, and, afterword, used that APPLICATION to open a DATA file.
The God Damned DATA file would not "EXECUTE", it would just be read by the APPLICATION!!!!!
In addition, of course, automatic macros and scripts, if they existed in their current form at all, would have limited abilities which would prevent them from corrupting your DATA.
Why is this so hard to understand???
I mean, they do everything for you! I want to start a new line of viri that make you configure them through dialog boxes. You know, a "time between infections" slider, maybe a "target folder" dialog, "actions to take" list of checkboxes (format drives? delete random files? change random bytes?) with scheduling, a place to type in email addresses of other people to try to infect (probably by sending them a link to an FTP site they have to download the virus from, then run it).
Maybe a nice splash screen too -- "WELCOME to Atario Virus 1.0 beta. If you like this virus, please consider sending a donation of $10 to..."
"A great democracy must be progressive or it will soon cease to be a great democracy." --Theodore Roosevelt
I saw this modded insightful then when i clicked reply it became funny which seems more fitting but look THIS GUYS NAME IS KING OF THE TROLLS don't give him asny credit.
Unless you read The Truth"
MSBPodcast.com The opinions expressed here are my own. If you don't like 'em... Think up your own stuff.
Windows viruses exist because Microsoft decided long ago that they were going to co-mingle EXECUTABLE CODE with DATA!
.COM/.EXE/.BAT files.
Windows users have been trained for years to double click on DATA to launch the EXECUTABLE application which reads the DATA.
In a sane world, a user would have been taught to launch the APPLICATION first, and, afterword, used that APPLICATION to open a DATA file.
The problem is not with the double-clicking to open up documents (which is a reasonable action, much like the Mac, and makes the system easier to use for novices).
The problems are:
1) Microsoft chose to hide file extensions from the user, which makes it difficult for the user to tell what is a document and what is an executable file. Prior to Win95, users were fairly easily trainable to not run
2) Documents that contain executable code. While not a sin in and of itself, these scraps of script were given complete and unfettered access to the box (rather then running in a limited sandbox). Which is actually the fault of the application, and not the operating system. (Except that Microsoft is responsible for both, since most problems are with VBA macros in MSWord or MSExcel.)
3) Lack of an execute flag on files that has to be manually set (this isn't perfect protection either as anything the user can do by hand, can be automated).
4) Poor security model where the user has to pretty much run as Administrator. Which is a leftover from the Win9x days when there was no such thing as file system security. (And rather then break compatibility with old programs... we have the mess that we have now.)
Wolde you bothe eate your cake, and have your cake?
Actually, "boxen" is a play with words that theoretically could be semi-correct. It stems from the plural of "ox"; "oxen".
If "virii" was indeed a real word, or something playfully assembled á la "boxen", then the singular for would be "virius" instead of "virus".
"Virii" should not be used under any circumstance other than when poking fun at goddamn illiterate morons who think it "looks like latin". Those who use it don't do so as slang, half-jokingly or jargon, as in the "boxen" example, but they really think they're right, and furthermore they think it makes them look sophisticated.
Virus is an uncountable in Latin, like sheep, fish, et c. in English. The correct plural in English is viruses.
If you want to speak of several virus particles you say "virions". One virus particle (one complete virus, the individual "organism", not a whole species or genus) is a virion.
Whatever. All you need to remeber is "VIRUSES", and that THERE IS NO SUCH WORD AS "VIRII" IN ANY LANGUAGE ON EARTH! Slashduh Moronese doesn't count.
the viriis
Amazing. Not only do you use the idiotic and impossible "virii" concotion, but you even fail to realise that the morons who use that word think it's a plural form for "virus" - so you throw in a redundant plural S!
Please die.
That viruses are the plural of virus
A pendant is jewelry. You meant pedant, which is what I am being by responding. Like virii, your use of pendant is wrong. Not slang, just wrong.
If I referred to your sentence as "high-falutin'," that is slang. If I referred to it as "retartid," that is simply an incorrect spelling.
The English language isn't evolving new Latin-esque plurals. It's not slang. It's just ignorant pretension, which is the worst kind of pretension.
This *always* happens on slashdot when 'virii' is mentionned.
A whole bunch of "It's latin", "no, it's not", "it's slang", "no it's not" posts will pop-up like mushrooms.
While I agree that it's not correct latin, and I understand that some people have difficulties with the 'correctness' of it, it really doesn't matter one bit as to the validity of a word.
1)Language 'lives'; it changes with the passing of time.
2)Slang is not 'inferior' or 'wrong'; it are just words that are used in a subculture.
3)Words of a subculture can and have become 'mainstream'
4)In the past, english (as many other languages) has been 'corrupted' with equally 'wrong' words...yet we use them today as if they always have been correct, mostly not even being aware that once they were considered stupid, wrong, grammatically incorrect, foreign, nonsensical, inferior, ridiculous, the result of laziness, plain misspelled, etc.
Yet they are *all* considered mainstream english now! So, let's face it, there is *no* objective mechanism where you can say; this word has no place in our language or not.
If it's understood and used in this language, then ergo ipso, it *IS* part of that language.
Now, anyone understands what is meant by 'virii' and more and more people/posts use the term virii, with purpose, even beyond their 1337 roots.
So it really is silly to fulminate that virii is not a word; it is used as one, it is understood as one, and it even has left it's pure sub-culture 1337 roots behind so that now it's actually becoming slowly mainstream. So what, in a year or 5, it may end up in the dictionary, as so many 'non-existent' words before it...and what will be the the contra-argument then?
Why, in another 20 years most persons won't even know anymore that it was once considered as 'non-existent' or 'wrong'. They will use it, as we use all those other words where people fulminated against, just as with they will with new, totally wrong words that will pop-up. That's what it means when we say a language lives, after all.
--- "To pee or not to pee, that is the question." ---
Hmm, I can't wait for the first quantum computer to be released. It will be able to execute every virus at once.
Personally I'd like any identified virus writers to be publically, maybe they can let all us poor buggers who get on the receiving end of their "proof of concept" programs. Bet he has no friends and lives with his mum! :-)
Server 2003 also has an Itanic build available. You get both IA32 and IA64 CDs when you buy it through an Open Business agreement.
--
"Outlook not so good." That magic 8-ball knows everything! I'll ask about Exchange Server next.
slashdot has turned into a ms bashing troll site...
slashdot USED to be worth reading and discussing IT related matters, now, they can delete my account for all I care.
Little kiddies and ms-hater overlords that prefer to bash instead of being constructive, have ruined slashdot.
For those that have shown some maturity when posting to slashdot, I salute you. The rest are worthless troll posting brats, that I have no desire to tolerate any longer...
karma, hah...
1) Cheer on developer for releasing proof of concept virus 2) Turn him into Microsoft for some reward money... 3) Profit! I have exactly one point of karma, so I thought it would be worth it. ;)
This has kinda dumbs the theory of "Linux has no viruses because it's not popular enough".
Do your best, hope for the best, suspect the worst.
so...not only will we be treated to movies that come out before the release date, software and games that are leaked before the release date, we're given viruses that will hurt OSes before they're even released. it gives me so much faith in longhorn...
i think the ii's are a sign he is infected. with somethign.
Infected with "somethign"? Don't you mean GNU/infected with somethiGNU?
The Word.Concept and Nimda viruses also started out as a proof of concept. Word.Concept showed that macros could exploit a popular application's macro system, and Nimda showed that a single worm could spread through multiple vectors.
"This's CV, no Nimda." -- author of Nimda.E
The difference in number of exploits, viruses, bugs, etc... between Microsoft Windows and the next competitor (whether it be Apple, IBM, or Linux) is at least two orders of magnitude.
If I added all of the known exploits and viruses which targeted MVS, IRIX, HP-UX, Mac OS, Linux, Free BSD, etc... I'd still be hard pressed to find even 10% of the number that target Windows in a single year.
So, yes, you could say the subject is open to debate. But I challenge you to find any other OS vendor who:
Microsoft is the exception to the rule. No one else in the industry writes software as poorly as they do:
I could go on, but you get the point. Microsoft isn't just a little negligent - they're nowhere near the industry standard when it comes to professionalism. The quality of their code is so poor that simply can't be compared to any other vendor - no one else has released code which comes even remotely close to the number of bugs and security exploits that Windows has.
The society for a thought-free internet welcomes you.
Finding holes in Windows software...does that make you feel real good? Do you feel like a big man? Huh?
God, you make me sick. You just have to go and rub salt in an open wound there.
I, for one, welcome our 64 bit virus overlords.
...or Execute Disable. Check out Table 4-6 for more details.
;).
As for the ("waekly" -is that Welsh or what?) IA-32e processors since they aren't shipping yet, you don't know whether they'll have it
I thought this was supposed to be a site frequented by technical people. I may be a troll but the discussion I've seen here so far proves that 3/4 of you are IDIOTS.
Exactly what are we talking about here? Oh yes, a virus on win64. Instead of mindlessly saying "ha, windows sucks. Microsoft security sucks. I don't get virii on linux!" let's think for a minute.
According to the article some guy wrote (in IA64 asm) an image that infects other EXEs in its own directory. So this is definitely a virus. But does it exploit any security hole in the host OS? No. All it does is hack in files that it has write access to. So all you need to do this is a programmer who is sufficiently familiar with the executable format on the platform. In this case it was PE/PE64. But the same "proof of concept" could easily be applied to ELF. (fyi, wannabes, that's the image format Linux uses).
Want to avoid this kind of thing? Don't run as root/Administrator and keep the permissions on your filesystem sane. Wow, rocket science.
Next, look at the site hosting the article. Surprise. It's an antivirus vendor. Someone wrote a "proof of concept" program and demonstrated "wow, I can write code that infects other images on the disk". Amazing. The OS and address size the hardware here are utterly irrelevant.
Finally, the sad truth is that 3/4 of you are too dumb to realize this (including the editor who posted this). You see "ah, Microsoft, Virus, Win64" and immediately start bashing. M$ sux! Linux rox! I'm cool. not.
They were ?
Users are prepared to open password protected zip files and deliberately run malicious code, and you think a file extension is going to slow them down ?
2) Documents that contain executable code. While not a sin in and of itself, these scraps of script were given complete and unfettered access to the box (rather then running in a limited sandbox). Which is actually the fault of the application, and not the operating system. (Except that Microsoft is responsible for both, since most problems are with VBA macros in MSWord or MSExcel.)
Can't argue with that one. Not running embedded document macros in a sandbox was a poor tradeoff between functionality and security.
3) Lack of an execute flag on files that has to be manually set (this isn't perfect protection either as anything the user can do by hand, can be automated).
NT (using NTFS) actually does have an execute permission that can be toggled.
4) Poor security model where the user has to pretty much run as Administrator. Which is a leftover from the Win9x days when there was no such thing as file system security. (And rather then break compatibility with old programs... we have the mess that we have now.)
This is not the fault of the security *model*, it's the fault of *poorly written applications*. The *security model* supports running as a regular user just fine - I've been doing since the days of NT4.
on why Windows is attacked more than other OSes.
Microsoft: "Security through obscurity"
Microsoft: "Security through obscurity"
Microsoft: "Security through obscurity"
Microsoft: "Security through obscurity"
Microsoft: "Security through obscurity"
Microsoft: "Oh damn!!"
Microsoft: "Security through being non-Windows"
Microsoft: "Security through being non-Windows"
gentlemen, we have the technology. We can re-rape you. Bigger, faster, stronger. Better than the rape we put on you before..
But how in the Hell do you debug a virus?
"Anyone who attempts to generate random numbers by deterministic means is living in a state of sin." -- John von Neumann
The August issue of IEEE Spectrum mentions a proposal by the International Electrotechnical Commission to introduce new prefixes for words that indicate powers-of-two (page 18 of the print issue). This would replace kilobytes (kB) with kibibytes (KiB), megabytes (MB) with mebibytes (MiB)
http://slashdot.org/article.pl?sid=99/08/10/025924 5&mode=thread&tid=99
What happens if he has that, and his u+s bit set?
I find it annoying when all of the Slashdotters suddenly start bitching about Latin spelling only to increase their karmata like it was proportional to their IQen or the length of their phallii.
Actually it is:
Et cetera.
Sincerely,
Pan Tarhei Hosé, PhD.
"Homo sum et cogito ergo odi profanum vulgus et libido."
If those who proposed those had their houses burn to the ground with them inside, I wouldnt shed a tear, thats for sure.
"...THERE IS NO SUCH WORD AS "VIRII" IN ANY LANGUAGE ON EARTH! Slashduh Moronese doesn't count."
BWA HA HA HA!!! Comedy gold!!! =)
Past losers have coined the words 'boxen' and 'virii'. So people who desperately want to be cool imitate that.
That's modern culture. Trying to be unique through imitation. Buy mass-produced clothes, dress the same as all your classmates and be 'unique'. Learn to speak '3l33t' and you are unique on the Net, like those other million kiddies.
After all, Slashdot is nothing but a fansite, full of losers who want to be unique, and who do so by imitation. Haven't you once wanted to use the 'you insensitive clod' phrase or 'in communist russia...' just to show you're cool ?
hehehe he said VIRII. What a buttwipe !!! Beavis: Yeah, bongholioo !!!!
not jesus's;-)
Don't get me wrong, you'll find no sympathy for
M$ here but:
The first a-bomb was developed as a proof of concept. This guy should keep his virii to himself
The best are never heard about in public web sites...
Temper - temper!
I might not be such a perfect being like yourself, who is never tired and never made an error when writing or speaking, but I fail to see the relevance of your remark in respect to the actual content and arguments I gave.
Focusing on a minor detail instead of going into the real issues mentionned is, IMHO, making an ass of yourself.
It is, infact, very cheap. I could as well say 'Stop Making an..." is incorrect too, and sarcastically ask if you know how sentences are written and when to use capital letters, and if you are the right person to make comments on the mistakes that others have written, then.
But what would that prove? Other that such a person is a pedantic ninkenpoop?
You are correct in saying it was a wrong mixing of words, but you could do that without resorting to malvolent sarcasm or namecalling. And neither deals with the arguments I gave, nor do they make them unvalid.
--- "To pee or not to pee, that is the question." ---
New words are coined all the time and eventually end up in dictionaries. Things like "Internet", "Computer" and "SCUBA" come to mind. Hell, "Googled" is still officially not a "word" ... perhaps because Google is fighting tooth and nail to keep it out of dictionaries.
New words happen all the time. Just because this one is slang ("virii" is apprently the plural of "virus" when talking about computer viruses) and very similar to another one you use doesn't mean it's not a word. Get over yourself.
Actually, those prefixes were proposed by the IEEE Faggotry Spectrum, with the signing members being very far down the faggotry spectrum.
Yes, I suppose this might refer to the colors of the rainbow; but, in the old days of build-it-yourself electronics this was the resistor code.
Harpo Tunnel Syndrome--my wrist feels funny.
"Boxen" was an intelligent play on its similarity to the word "ox" and its Anglo-Saxon plural form, "oxen". So is Unices, putting the latin inflection to work on the acronym "UNIX". Which is even more hilarious because it only works on "Unix", not on "Multics", which doesn't look latin. It's just playing with language. I am very glad, not to say proud, that computer geeks can do it so well.
"Elvii", as in Peggy Bundy's "Look, Elvii" when coming to Las Vegas, was a great one-liner, though it's grammatically wrong (the plural of the -is declination would -es, but "Elvis" is not even latin).
"Virii", I think, isn't even used as a pun, is it? It's basically wrong, "viri" being the correct form and "viruses" the usual one. Doesn't it even sound a bit stuffy, like "Let's put in another '-i' so it sounds more latin".
how often do you use the plural form? actually, I don't want to know...
GrimRC
vir viri m. [a man , male person]; esp. [a grown man; a husband; a man of character or courage, 'he-man']; milit. [a soldier, esp. an infantryman; a single man, individual].
:) tend to infer that one might substitute "viri" for a set of slashbots with bad karma.
virus -i n. [slimy liquid , slime; poison, esp. of snakes, venom; any harsh taste or smell].
Latin Dictionary and Grammar Aid
sic !
CC.
post scriptum: We (pluralis majestatis
TaijiQuan (Huang, 5 loosenings)
I have been running an Itanium 2 box with various 64-bit versions of Microsoft Windows (sigh). My machine was affected at one time by the RPC virus, and at that time there was no patch for the particular evaluation version. The virus was a 32-bit virus, but still was capable in affecting the 64-bit Windows. I believe that Microsoft did not rewrite all the OS parts, but they run some parts in emulation. This is a shame for an OS.
-- Imperial units must die --