Slashdot Mirror
Malware Found Hidden In Screensaver On Gnome-Look
AndGodSed writes "OMG! UBUNTU! Reports the following: 'Malware has been found hidden inside an innocuous 'waterfall' screensaver .deb file made available on popular artwork sharing site Gnome-Look.org. The .deb file installs a script with elevated privileges designed to perform a DDoS attack as well as keep itself updated via downloads. The dodgy screensaver in question has since been removed from gnome-look, and this incident was a very basic, if potentially successful, attempt.'" A similar report at Digitizor.com says that similar malware was also found in a theme called Ninja Black. For those affected, both sites also provide instruction on cleansing your system.
It's the YEAR OF THE LINUX desktop! It's official! /Happy Ubuntu User
Mod me down, my New Earth Global Warmingist friends!
He scurries in the darkness because he fears the light that is the Sun Source... Sinanju.
So Solaris users are unaffected?
The Gnome team is working with several university neurology departments to develop a patch for human nature that fixes this problem. It will be included in Gnome 4.
Computer Science is all about trying to find the right wrench to bang in the right screw. -T.Cumbo?
... which has nothing to do with how secure the operating system is, but the profile itself.
Every time I start to have faith in humanity, I ruin it by driving to work between 7 and 8 am.
There is an easier (read: more elegant) way to get rid of this Linux malware:
sudo rm -rf /
Pussies.
rm -rf /
works fine for me!
I always tell users to only download software from sites like Softpedia or Download.com. Plus you get the "choice" of what site you want. And we all know that choice is a good thing!
well, I'm not questioning sudo per say (it's useful) and yes you can manage it's use. What I call implicit (less explicit would more curate)is the way Ubuntu (may be other distros I don;t know, I'm a gentoo user)) uses it, yes you have to enter a password, But opening a terminal and typing "su" (or sudo for that matter) is more explicite. Meaning you won't do it just for pleasure, and therefore most likely you know what you're about to do. Any app that wants root priviledges can popup a window (gksu, gksudo). While it's convenient, it's more dangerous. most people don;t actually read carefully before clicking.
No I am not. You have assumed there is a false dichotomy because you imagine repository resources to be infinite.
The argument is that people want 3rd party software, ergo if the repository does not have it then people will go somewhere else for it.
The response to this point is that repositories strive to have as much 3rd party software as possible on them. This would be fine and dandy if there is no raised entry bar, because there could theoretically be enough resources to host every 3rd party program that exists (for instance, Google could.)
But you have imagined a world where there is also enough human resources in order to maintain that raised entry bar (humans looking over source code, accepting and rejecting programs based on what they are programmed to do) while also overcoming the need to download 3rd party programs from someplace else
If Linux had 95% market share, no software repository on the planet could keep up with the *submissions* to it while also maintaining that raised bar of yours, because they simply cannot allocate enough humans to the task.
"His name was James Damore."
Security is like sex. Once you're penetrated you're ****ed.
When you install software, you're having unsafe sex.
Don't do it lightly.
Gnome team is working [...]] to develop a patch for human nature that fixes this problem.
I suspect they've decided that a free will is unusable and will replace it with sane defaults ;)
I was going to comment on your post, but I've set my system to allow the browser to send only 100 cha
Finally, the year of Linux desktop is coming. Even malware authors are taking notice and creating trojans and sneakware, so indeed linux adoption is up, yay!
Yes, we need a new kind of package that only gives root-priveleges to packages that do Good Stuff(TM) ^^
If you quote this signature there'll be 72 copies of Windows ME waiting for you in Heaven.