Slashdot Mirror

← Back to Stories (view on slashdot.org)

Android Trojan Found, Spreading From Chinese App Stores

Posted by timothy on from the step-one-install-skype dept.

wiredmikey writes that researchers from Lookout Mobile have discovered a sophisticated Trojan targeting Android devices. "The company says the mobile malware is 'The most sophisticated Android malware we've seen to date. Geinimi is also the first Android malware in the wild that displays botnet-like capabilities. Once the malware is installed on a user's phone, it has the potential to receive commands from a remote server that allow the owner of that server to control the phone.' What makes the Trojan different from most 'standard' mobile malware is that Geinimi is being 'grafted' onto repackaged versions of legitimate applications, primarily games, and distributed in third-party Chinese Android app markets."

125 of 277 comments (clear)

  1. First post by GameboyRMH · · Score: 5, Funny

    Posting from my Androi^B^B BUY HERBAL VIAGRA

    --
    "When information is power, privacy is freedom" - Jah-Wren Ryel
  2. ummm... by snugge · · Score: 1

    ...no link?

    1. Re:ummm... by mcgrew · · Score: 2

      Here you go. And here's a better one.

      --
      Free Martian Whores!
  3. I guess RTFA went out the window entirely... by AltairDusk · · Score: 5, Informative

    Here's the story on the Lookout Blog.

    1. Re:I guess RTFA went out the window entirely... by frinkster · · Score: 1

      Thank you for the link... The blog post says that the Trojan can "control" the phone but nowhere does it say that "control" means anything other than prompting the user to install or delete other applications.

  4. Re:But it's Linux by tacarat · · Score: 2

    If it's not Linus, then we might assume it's Rerun or Lucy.

    --
    "Common sense will be the death of us all"
  5. And that's why children, by Anonymous Coward · · Score: 2, Interesting

    proper code signing (and not letting unsigned code run) is important.

    1. Re:And that's why children, by bigredradio · · Score: 1

      So do you always end your posts with "you're completely pathetic"? A little humility might suit you better. you're completely pathetic.

      --
      Flexible bare-metal recovery for Linux/UNIX
    2. Re:And that's why children, by MichaelKristopeit348 · · Score: 1
      ur mum's face forgot...

      cower some more, feeb.

      you're exactly what you've claimed to be: NOTHING

  6. The problem with buying from Chinese app stores by Anonymous Coward · · Score: 3, Funny

    An hour later and you're hungry for privacy again.

  7. Re:App names? by 1000101 · · Score: 2

    So beware of downloading things from Chinese websites? That's news?

    Um, what if you are Chinese?

  8. Easy to stop, & how to do so... apk by Anonymous Coward · · Score: 1, Insightful

    ANDROID OS allows for the usage of custom HOSTS files, & that's how you stop this botnet from communicating "back to mama" (it's C&C botnet servers):

    DO THE FOLLOWING (after obtaining a good reputable solid HOSTS file, like mvps' -> http://www.mvps.org/winhelp2002/hosts.htm )

    ---

    1.) Get ahold of the "Android Debugging Bridge" (ADB) & install it

    2.) Mount your system mountpoint as READ + WRITE (as powerful of priveleges as you need is this)

    3.) Using the PULL command, copy the file over from your PC (or even on your ANDROID if its there already) using PULL & overwrite the etc. folder's copy of HOSTS

    ---

    DONE! Yes, it's THAT simple... &, it works!

    APK

    P.S.=> Of course, your HOSTS file will need to have the domain/hosts name of the C&C servers, & that you have to obtain for this to work vs. this threat!

    (However - I don't think the article noted them, & articles of THAT "nature" are poor imo, not detailed enough - it's nice to say "hey, there's a botnet out there" but to not list its servers too? WTF! Thankfully though, the HOSTS file sources I use to populate my custom HOSTS file update every hour on some of them, & around once a day on most, & once a month for the "worst of them"!)

    Other /. articles have helped ME this way before (which is WHY I am sort of "disappointed" in the source article here, per my last paragraph in reply just above now):

    2 examples thereof in the past I have used, & noted it there, are/were:

    http://it.slashdot.org/comments.pl?sid=1898692&cid=34473398
    http://it.slashdot.org/comments.pl?sid=1896216&cid=34458500

    apk

    1. Re:Easy to stop, & how to do so... apk by mark72005 · · Score: 2

      Certainly, the average doofus who bought "one of those smartphones" will be able to follow all those directions.

    2. Re:Easy to stop, & how to do so... apk by icebike · · Score: 4, Insightful

      ANDROID OS allows for the usage of custom HOSTS files,

      None of that is necessary. Why even post this crap?

      Simply load your apps from the Android market instead of dodgy Chinese warz sites.

      --
      Sig Battery depleted. Reverting to safe mode.
    3. Re:Easy to stop, & how to do so... apk by CommunistHamster · · Score: 1

      What if someone makes malware to make the phone dial premium-rate telephone numbers? Is this the return of the autodialler-type-virus?

    4. Re:Easy to stop, & how to do so... apk by h4rr4r · · Score: 1

      It won't. What will is a simple wipe to factory settings. Then the user just logs back in and this time only installs apps from reputable apps stores.

    5. Re:Easy to stop, & how to do so... apk by catmistake · · Score: 1

      Ok, that's dynamite, Dino. Huh... HOSTS file. Yeah... just edit that on all you *nix devices and you're golden. Or you could run your own DNS... far less mucking about with adjusting HOSTS files like some square throwback admin from 1974. YMMV

      --
      The Admin and the Engineer
    6. Re:Easy to stop, & how to do so... apk by DrXym · · Score: 1

      Exactly. If you download apps from some dodgy warez site you will receive absolutely everything you expect and deserve.

    7. Re:Easy to stop, & how to do so... apk by natehoy · · Score: 1

      The average doofus who bought one of those smartphones might be dumb enough to use HOSTS files to try and protect from threats, if they could figure out how.

      The rest of us (a) don't have the time, and (b) know how the Internet works and why a HOSTS file is about the most useless line of defense you could possibly want to use. It's locally-administered DNS poisoning.

      Top tip: A lot of malware uses IP addresses directly, and are immune to DNS poisoning. No need to do DNS inquiries, harder to trace, and bypasses the hosts file for those people who still use them for the teeny modicum of protection they could possibly provide.

      For those bits of malware that do use DNS, each one will use between one and very many DNS entries that you have to block individually, and if the malware detects it cannot get a connection it probably has a fallback to IP to get a new list of DNS addresses to try. Any update to the base application (if you are unaware it is infected) will probably load a new list of DNS entries.

      Plus, of course, the malware may not have an outbound data connection using IP at all. It might instead use your phone to make calls to random 900 numbers, or send SMS texts, or use your email client to send your contacts list to the author, or any one of dozens of things that don't require a DNS lookup.

      If you want to avoid this one very specific threat, you could:

      1. Only use reliable app stores for downloading (since this specific threat only appeared on Chinese "warez" app stores, "where all apps are free! Free virus with almost every copyright violation!"

      2. Edit your hosts file.

      If you want to avoid most possible future threats, you could.

      1. Continue to only use reliable app stores.

      2. Spend hours each day researching every possible threat out there, determine what DNS entries they use, and manually enter a new entry for each possibly bad host, or subscribe to a hosts file subscription service and pray to FSM that your subscription service is honest. Start also praying to FSM that that all malware writers are kind enough to use DNS and not IP addresses!

      If you want to avoid ALL possible future threats, you could:

      1. Return the smartphone and get something with wires and a rotary dialler, then crawl under a rock somewhere, stick your fingers in your ear, and yell LA LA LA LA LA!!!

      2. Above, except you yell BOOGA BOOGA BOOGA instead. (it's good to have choices)

      The POTS analogy for host table protection is manually maintaining a block list on your local telephone for every telemarketer who could possibly call you on a phone that's not capable of blocking "anonymous" calls (analogous to using direct IP address).

      It's a lot of work, there will always be new telemarketers with new phone numbers, and if they use caller ID blocking, it's ineffective.

      HOSTS is, at best, a modest increase to security. But it takes a lot of work to maintain, and gives the people ignorant enough to use it a false sense of security that far outweighs any actual security benefits it could offer you.

      --
      "This post contains words, known to the State of California to cause thought. Wash brain thoroughly after reading."
    8. Re:Easy to stop, & how to do so... apk by gilesjuk · · Score: 1

      But that's the reason people buy Android phones, to have the freedom to do stupid things and install dodgy software?

    9. Re:Easy to stop, & how to do so... apk by RocketRabbit · · Score: 1

      A hosts file certainly does not require "a lot of work" to maintain, and it quite effectively kills a LOT of advertising and tracking schemes. In fact, I never would have considered trying to use it for ddefending against viruses or malware. But computer without "locally administered DNS poisoning" is ill equipped to be on the Internet these days unless you like herbal Viagra ads.

    10. Re:Easy to stop, & how to do so... apk by natehoy · · Score: 1

      Unless, of course, you jailbreak your iOS device. Or someone gets a virus inside the walled garden and you install it as an app. Or a vulnerability in its web browser allows a properly-crafted website to execute code.

      iOS is not invulnerable. It just doesn't allow you, by default, to be stupid enough to load cracked warez from Chinese websites. So it does offer you a level of protection against this specific vulnerability, that's very true. But that doesn't even come close to making you immune.

      But it's not exactly invulnerable to attack: http://www.f-secure.com/weblog/archives/iOS_Security_Updates_20100908.htm

      Note that, although many of the vulnerabilities listed above are pretty innocuous, some of them are pretty severe, and not a single one of them had anything to do with loading a specific application from an external site. These are all vulnerabilities in actual Apple-provided apps or the core iOS itself.

      The only device that is immune to viruses is called a rock. And even it can get moss and lichen and dirt and stuff on it.

      --
      "This post contains words, known to the State of California to cause thought. Wash brain thoroughly after reading."
    11. Re:Easy to stop, & how to do so... apk by RyuuzakiTetsuya · · Score: 1

      yes, but owning an iOS device also means I can bait APK.

      --
      Non impediti ratione cogitationus.
    12. Re:Easy to stop, & how to do so... apk by Pieroxy · · Score: 2

      But that's the reason people buy Android phones, to have the freedom to do stupid things and install dodgy software?

      Right on. Choose your store, choose your virus. Android is much more of a general computing platform than iOS will ever be. And that's not always a good thing.

      --
      Write boring code, not shiny code!
    13. Re:Easy to stop, & how to do so... apk by natehoy · · Score: 1

      Even if you want to take on the work to maintain it, it's usually a "blacklist" protection at best. In other words, unless you start spending a lot of time finding all the possible domains that could be a threat to you, you'll only know to use a HOSTS entry *after* you've already been exposed to the threat (or ad).

      It's vaguely useful enough for ads, in that having an ad sneak in is pretty harmless. AdBlock does a far better job, and take a lot less work to configure.

      But for malware protection? No. Not a chance. There's no way in hell you're going to keep up with all of the possible malware vectors, and HOSTS only protects you outbound. If you're concerned about that, get yourself a free firewall that offers per-program outbound filtering, not per-DNS entry.

      HOSTS was useful back in the days before we had the horsepower to run actual stateful firewalls with filtering and intelligence. I remember them fondly, but they stopped being honestly useful sometime last century.

      --
      "This post contains words, known to the State of California to cause thought. Wash brain thoroughly after reading."
    14. Re:Easy to stop, & how to do so... apk by cmdr_tofu · · Score: 2

      So your solution to malware is to have users jailbreak/root their phones, and put in a bogus hosts file so that the malware cannot resolve its "control server"? And you think that's solved the problem?

      Ok so what if the botnet uses IP addresses? Or the user does not have root access on their phone. Last and most important, your solution requires the user to know something about the malicious software they are installing specifically what hostnames it would try to resolve, before installing it. If the user already knows the software is malicious, why would they install it?

    15. Re:Easy to stop, & how to do so... apk by node+3 · · Score: 1

      iOS is not invulnerable.

      Nobody said it was. In your reply, you make the points that absolutely nothing is invulnerable, and that iOS is less vulnerable than Android, which supports, not refutes, the OP.

      It's strange that whenever there are Android malware stories, or jailbroken iOS malware stories, that there are always posts saying that "iOS has vulnerabilities too, and all systems are insecure". Yet somehow, every single time it's not unhacked-iOS that gets the malware.

      Inherently, Android is less secure than iOS. This is due to deliberate choices by both Apple and Google. It's time for the geeks to be honest about it and admit this fact. iOS is more locked down, more secure, easier to use, simpler to develop for and has a greater variety of apps. Android is more open, easier to hack (in the good way), less secure, and more kludgey.

    16. Re:Easy to stop, & how to do so... apk by natehoy · · Score: 1

      I disagree, but I see your point and I think it's a fine line we disagree over.

      iOS makes it slightly harder (not impossible) to do stupid things like loading apps from Chinese "warez" sites. The risk of those apps and sites exists for iOS users, but there's just a little extra effort (jailbreaking) involved.

      If you buy an Android and want to take security seriously, you stick to known websites to get your apps from, preferably just the Android Store. You simply don't go to warez.r.us.cn and load pirated/cracked apps. Stick to known good sites, and you're as secure as iOS.

      If you buy an iOS device and want to load cracked apps, jailbreak it. Jailbreak it, and you're as insecure as everyone else.

      The most dangerous insecurity is the illusion of security, which is why one-liners like "or you can buy an iOS device" are dangerously misleading, because it implies that iOS is somehow invulnerable.

      --
      "This post contains words, known to the State of California to cause thought. Wash brain thoroughly after reading."
    17. Re:Easy to stop, & how to do so... apk by node+3 · · Score: 1

      If you buy an Android and want to take security seriously, you stick to known websites to get your apps from, preferably just the Android Store. You simply don't go to warez.r.us.cn and load pirated/cracked apps. Stick to known good sites, and you're as secure as iOS.

      If you buy an iOS device and want to load cracked apps, jailbreak it. Jailbreak it, and you're as insecure as everyone else.

      Sure, if you go out of your way to make iOS insecure, and go out of your way to be secure on Android, you can be safer on Android.

      But in their default states, and their intended usage patterns, iOS is more secure than Android.

      The most dangerous insecurity is the illusion of security,

      It is not an illusion. There have been no trojans/viruses/worms for non-jailbroken iOS devices. There have been some for jailbroken iOS devices and for Android phones.

      People have been making the same claim about Mac OS X for a decade now, yet the deluge of OS X malware has failed to materialize. And iOS is in a better position than Mac OS X security-wise.

      which is why one-liners like "or you can buy an iOS device" are dangerously misleading, because it implies that iOS is somehow invulnerable.

      It does no such thing, because as you noted, no system is invulnerable. Nobody claims malware is impossible on iOS. What is claimed is that this is a problem that exists for Android and does not exist for iOS. Not that it's impossible, just that it doesn't exist.

      It's like if someone mentions how dangerous it is in Mexico right now, with all the killings. A reply of "move to X" doesn't imply murder is impossible in X, just that the situation is better in X than in Mexico.

    18. Re:Easy to stop, & how to do so... apk by cmdr_tofu · · Score: 1

      http://mobile.slashdot.org/comments.pl?sid=1930156&cid=34715272

      Read that, it covers your points on this quote from you:

      "Ok so what if the botnet uses IP addresses?" - by cmdr_tofu (826352) on Thursday December 30, @05:44PM (#34715798)

      Sorry saying that malware writers "generally" don't use IP addresses, does not mean you can trust that they never will as a form of security.

      "Or the user does not have root access on their phone" - by cmdr_tofu (826352) on Thursday December 30, @05:44PM (#34715798)

      That's WHY I had to use ADB for Android (dev tools are the 'secret' here & they're free, afaik @ least, for phones!)

      ---

      ADB does not give you a rootshell. It's not a secret. The dev tools are easily available from http://developer.android.com./ If you get a shell with adb on a non rooted device, I think you will have a tough time writing to /etc/hosts

      People:

      1.) Make mistakes

      2.) Folks get "lured" into clicking on URL's that MIGHT be "bad ones" (tiny URL for example? It "backfires" here, imo @ least)... especially from folks you "trust"

      3.) You might "let your guard down"?

      There's others, those are just some "possibles"... offhand, on "short-notice" etc.! apk

      Clicking a url, is not the same as installing an application, unless there are some serious software vulnerabilities I don't know about. If that is the case, I'd rather use a more secure web browser that doesn't allow installing .apk's without my control than rewrite my /etc/hosts file, as an attempt to cripple malware.

      I think icebike said it best above where he said, just don't install malware-ridden Android apps from dodgy warez sites. Use the Android Market.

    19. Re:Easy to stop, & how to do so... apk by Anonymous Coward · · Score: 1

      And this protects you from basically nothing except some advertising.
      A 'well written' trojan would always bypass this and do direct dns-resolution against one or more DNS servers or just connect to specific ip-numbers... Or maybe just join one of the larger IRC network and take commands from some channel there....

      So.. blocking via /etc/hosts is just impossible... At least for the stuff that's not written by script-kiddies...

    20. Re:Easy to stop, & how to do so... apk by shutdown+-p+now · · Score: 1

      The average doofus wouldn't be downloading APKs from Chinese warez sites in the first place. He'd just be using Android Market.

    21. Re:Easy to stop, & how to do so... apk by bonch · · Score: 1

      I thought the point of Android was that it was totally open and free?

  9. Re:App names? by Joce640k · · Score: 1

    The summary suggests that the list probably changed while you were writing that...

    --
    No sig today...
  10. Not "malware" by Anonymous Coward · · Score: 5, Informative

    Lookout Mobile appears to be in the process of trying to redefine "malware" to mean "software that sends more data about a phone to a remote server than Lookout think it should". This is not the standard definition of malware that we all know and love.

    This Android "trojan" is not like regular viruses from the PC world in many ways. It cannot resist uninstallation. It cannot infect other applications. It cannot lie about what it will do - the permission screen states quite clearly what the apps in question have access to. It cannot steal your passwords or bank details.

    There are legitimate questions to ask about apps that send phone IDs surreptitiously to some remote people, but calling these apps "trojans" or "malware" is dangerous, it makes people think they need a virus scanner for their phone when in reality they don't. That's exactly what "Lookout" want of course but it's no reason to believe them.

    1. Re:Not "malware" by owlstead · · Score: 1

      If the software tries to send information without explicit consent from the user in one way or another, it's malware. Some of that information may be implicit (e.g. pointing out updates, retrieving news for a news application, sharing high-scores for games). Sending out personal information while the application is not meant for that information to be send is clearly malicious. If a program is designed to send information maliciously, isn't it malware (== malicious software) by definition?

    2. Re:Not "malware" by Riceballsan · · Score: 3, Informative

      I believe the point is, it does have to get explicit permission when it is installed, the android prompts you when installing it asking Do you want to give this application access to Storage, Contact list, GPS cordinates, Internet access etc etc...
      It is like a robber that has to knock on your door and ask you to give him your wallet, keys and laptop.

    3. Re:Not "malware" by owlstead · · Score: 1

      It does so while giving you false information. Believe me, those kind of robbers are as common as the one that are breaking down your door, and can actually do way more damage. Or are you claiming that everybody that knocks on your door (or better, some unsuspecting elderly person) is to be trusted?

    4. Re:Not "malware" by abhi_beckert · · Score: 1

      This *is* malware. From TFA:

      "Once the malware is installed on a user's phone, it has the potential to receive commands from a remote server that allow the owner of that server to control the phone."

      From wikipedia:

      "A Trojan horse, or Trojan, is malware that appears to perform a desirable function for the user prior to run or install but instead facilitates unauthorized access to the user's computer system."

      This a textbook example of real malware.

  11. Stuxnet Redux by Troll-Under-D'Bridge · · Score: 1

    The last time "sophisticated" was attached to the word malware, a certain Middle East country had problems with its uranium-enrichment program. So what are the chances of this being the mobile version of the Stuxnet worm?

    1. Re:Stuxnet Redux by ColdWetDog · · Score: 2

      The last time "sophisticated" was attached to the word malware, a certain Middle East country had problems with its uranium-enrichment program. So what are the chances of this being the mobile version of the Stuxnet worm?

      About the same as the chances of anyone using an Android phone to concentrate uranium.

      Zero.

      --
      Faster! Faster! Faster would be better!
  12. Re:App names? by swanzilla · · Score: 2
    From TFA (linked above)

    There are a number of applications—typically games—we have seen repackaged with the Geinimi Trojan and posted in Chinese app stores, including Monkey Jump 2, Sex Positions, President vs. Aliens, City Defense and Baseball Superstars 2010.

    --
    0 = 1 + e^(Alt something)
  13. Going to spread like wildfire by adosch · · Score: 1

    I could almost put money this causing a big problem in the mobile community. Originating from a Chinese mobile app store is one thing from some very tailored application is one thing, but if it's repackaged apps out in the wild for popular (a la pirated, full-version) apps, then it's most definitely going to cripple Android-equipped phone users. Let's be honest, if you can get the app for free, who wouldn't install it? Especially half-wit phone users who have enough technical savvy to go look elsewhere for apps or got that latest 1000-app pack off of Usenet/P2P/Torrent from their buddy.

    1. Re:Going to spread like wildfire by Anonymous Coward · · Score: 1

      Then that's their own problem.

      Any platform can have viruses or malware written for them if you download them through unofficial channels (even people's precious i devices... there's already been malware out for jailbroken users a while ago). Any retard who does so without due diligence deserves to have his information stolen, plain and simple.

      To be perfectly honest, I would trust Android to protect my privacy over any other platform, mobile or desktop *BEACUSE* of it's permission system. *I* am in control of what the app can access, and I can choose to say F*** YOU to the app if it requests things I don't want it to.

    2. Re:Going to spread like wildfire by owlstead · · Score: 1

      Mweh, I haven't had much need to go outside the Google Market to be honest. If I did, it was for some demo code or specialized geeky application which I don't think they will ever target. I don't think most people will visit such sites or share apps with friends (I get loads of tips on apps, but they are by name only, and I look them up / check them out in the Google Market myself). I cannot see anybody visiting Chinese app stores unless they are linked up with them by a Chinese provider.

  14. "Android Trojan Found"? by RevWaldo · · Score: 4, Funny

    EWWWW!! It was in the back of the machine shop? And it was covered in WD40? EWWWWW!!1!

    .

    --
    Prisencolinensinainciusol. Ol Rait!
    1. Re:"Android Trojan Found"? by localman57 · · Score: 4, Funny

      Really? I just saw a very distressed electric sheep running out the back door...

    2. Re:"Android Trojan Found"? by marqs · · Score: 1

      For some reason that sentence makes me think of Joey from "Beneath a steel sky"
      I know he was no android, but he changed his appearance to a welderbot, and I clearly remember that he helped steal some WD40 from a store room.

      Ahh those where the days, now time to download ScummVm and relive them

    3. Re:"Android Trojan Found"? by DoomHamster · · Score: 2

      Really? I just saw a very distressed electric sheep running out the back door...

      Ewe......

  15. Re:A lot like Windows after all by MrHanky · · Score: 3, Informative

    Yeah, except this is not a virus and Android doesn't seem to be very susceptible to viruses.

  16. Re:App names? by Tenant129 · · Score: 1

    Ah cool. I googled it and didn't find any links with a list of apps. Thanks for quoting the text from the link above. I'll check it out in full. Would have been nice to have in the /. story.

  17. Re:A lot like Windows after all by 0123456 · · Score: 2

    Shame that Android is based on Linux then isn't it?..

    Linux can't stop Joe Sixpack from downloading malware from the Internet and installing it on his computer. At least, not without becoming another iThing that only allows installation of Jobs-approved software.

  18. Re:A lot like Windows after all by 0123456 · · Score: 4, Informative

    Whenever anything bad happens on the android platform related to malware, trojans, etc this distinction is heavily downplayed.

    Again, if I download and install malware on one of my Linux boxes, how is this a Linux problem?

    Linux protects much better than Windows against remote attacks, it can't protect against stupid users.

  19. Re:Thanks to another poster here? We have them! by Pharmboy · · Score: 1

    In a hosts file, don't you normally assign 127.0.0.1 (localhost) instead of 0.0.0.0 (default router/every ip)? Or is it different for phones for some reason?

    --
    Tequila: It's not just for breakfast anymore!
  20. Re:A lot like Windows after all by KublaiKhan · · Score: 2

    You're right, it isn't fair to blame Windows for user-supplied malware.

    However, that does not mean Windows is any more secure; not all windows malware is user-supplied.

    --
    In Xanadu did Kubla Khan
    A stately pleasure dome decree
  21. Re:A lot like Windows after all by 0123456 · · Score: 2, Insightful

    And neither can Windows, yet it is always blamed for someone installing malware on their systems

    What's the percentage of Windows users who install malware on their system rather than being hit by a remote exploit?

    Pretty much every major Windows security story I've read in the last couple of years is due to some hole being exploited either in Windows or commonly used Windows software which lacks the sandboxing that's common on Linux (Apparmor, SELinux, etc), not users downloading trojans.

  22. Re:App names? by Anonymous Coward · · Score: 2, Funny

    I've checked, and it turns out I'm not Chinese.

  23. Link to Post by wiredmikey · · Score: 1

    http://blog.mylookout.com/2010/12/geinimi_trojan/ -- From the myLookout Blog who made the discovery

  24. Sorry, Android still rocks by nicholas22 · · Score: 2

    Even if fanbois from various camps jump with joy/sorrow with the news, I still think that the open model that Android brought to the mobile world will be much more beneficial for everyone (end users, developers, companies, etc.) in the long run, all things considered. People saying that the Apple model is better than Android's are not realizing this.

    1. Re:Sorry, Android still rocks by RocketRabbit · · Score: 1

      Speaking of "fanbois" I don't believe anybody really claimed anything about Apple's phones yet. We won't let that ruin your day, though, so go ahead and troll on sister.

    2. Re:Sorry, Android still rocks by thestudio_bob · · Score: 1

      I still think that the open model that Android brought to the mobile world will be much more beneficial for everyone...

      Beneficial in what sense? Not trying to be a troll, just curious. Personally, I think there should be both open/closed systems, it spurs innovation. But perhaps you have another take.

      --
      The real Sig captains the Northwestern. This one captains /.
  25. Re:A lot like Windows after all by 99BottlesOfBeerInMyF · · Score: 1, Insightful

    Whenever anything bad happens on the android platform related to malware, trojans, etc this distinction is heavily downplayed.

    Again, if I download and install malware on one of my Linux boxes, how is this a Linux problem? Linux protects much better than Windows against remote attacks, it can't protect against stupid users.

    Sure it can, at least a lot more than it does now. It can sandbox all apps by default, automatically check a malware blacklist and elevate permissions for trojans to ones that are useful to malware only when explicitly told to do so by the user, i.e. he goes in and checks the (allow to send mass e-mails) checkbox for that app.

    There is a lot that can be done to more tightly secure Linux distros, applying SELinux style permissions universally is good start. The difference is, for normal home use users don't need these improvements yet because the risks are still so small. Linux does a great job of adapting and improving security as it becomes needed because the developers are the users as well so they are very motivated.

  26. Re:App names? by Pharmboy · · Score: 1

    Um, what if you are Chinese?

    Sucks to be you.

    --
    Tequila: It's not just for breakfast anymore!
  27. Anti-malware? by kungfugleek · · Score: 1

    So is anti-virus/anti-malware worth installing on an Android phone? Because, yeah, I don't like installing apps that ask for permissions, but it seems like almost every app asks for "Full Internet Access," at least. I can't always tell the good ones from the bad. Would a free anti-malware app help or is it just a waste of time?

    1. Re:Anti-malware? by moeluv · · Score: 1

      honestly i haven't had any issues with malware on my android phone. I did install the Lookout app that has anti-virus but I installed it more for the data back up and ability to locate the phone via website if it is stolen. IMO Anti-malware software is generally a good idea on any web enabled device for the simple fact that if there is a security hole to exploit in a device someone will write an exploit for it eventually.

    2. Re:Anti-malware? by Kenja · · Score: 1

      If your installing apps from a suspicious third party store operating out of China odds are that anti-virus software wont do you any good.

      --

      "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    3. Re:Anti-malware? by RevWaldo · · Score: 1

      It's the ad-supported free versions of apps that ask for Full Internet Access. Or you can crowbar a dollar out of your wallet and get the "standalone" version.

      .

      --
      Prisencolinensinainciusol. Ol Rait!
  28. Re:A lot like Windows after all by Riceballsan · · Score: 1

    Well there's a big difference between the 2. The windows security holes people complain about are generally not "Joe sixpack opened an EXE and clicked OK to the run as admin prompt", that is a user problem not a security hole. The security holes that are newsworthy are "Joe sixpack was browsing CNN.com and a banner add was able to jump from his browser and take over his system" or "Joe Sixpack was reading a PDF file and his system was taken over" Same as on the android, in this case "Joe sixpack chose to use an unknown provider to download an app, then didn't question why a calculator/screensaver/word processor/game wanted permission to get to his contacts, phone numbers GPS data and internet access etc..., then a week later got a prompt asking to install another program with similarly ludicrious requests". The darn phone tells you point blank exactly what the program can access, it dosn't even have the ability to sneak in more then it tells you it can. If you want to call that a security flaw, then complain to your telephone company that if someone calls you and asks for your credit card number, they might be able to get it if you tell it to them.

  29. Re:A lot like Windows after all by Desler · · Score: 1

    Oh and many Linux distros do not come with either SELinux installed or even enabled by default so to try to act like that is common or even remotely universal is a lie.

  30. Re:App names? by h4rr4r · · Score: 1

    No, I am Michael Kristopeit!

  31. Re:A lot like Windows after all by Desler · · Score: 1

    The windows security holes people complain about are generally not "Joe sixpack opened an EXE and clicked OK to the run as admin prompt",

    That's funny because there are still constantly stories about people doing exactly that from files in their emails that install worms, trojans, viruses on their computer. Hell, I know someone from a local State Farm branch in Houston that had their entire office infected that way. To claim that this isn't a general case of malware infection is to be completely dishonest.

  32. Re:App names? by h4rr4r · · Score: 1

    This is the only possible explanation.

  33. Re:A lot like Windows after all by Desler · · Score: 1

    The ... Android Market ... only legitimate places to get software that I know of.

    So then what is your excuse for this?

  34. Re:A lot like Windows after all by Riceballsan · · Score: 1

    Never said it wasn't a malware infection, it just isn't an operating system flaw that anyone can fairly bash microsoft for. Now in the case of a company in this case, for clicking allow to administrative privilages, that is a flaw of their IT staff for letting non-technical users have administrative rights. I never said that wasn't a general infection, I said it wasn't a windows security hole, short downgrading all systems to an ipad-esque system (which even that has holes in it as anyone who is going to go out of their way to download from an untrusted source would probably be just as willing to follow instructions to jailbreak)

  35. Re:Hopefully, folks are interested enough to learn by FredFredrickson · · Score: 1

    I think you missed mark's point... the fix for this won't be easily deployed for anybody except slashdotters.

    --
    Belief? Hope? Preference?The Existential Vortex
  36. Re:A lot like Windows after all by Anonymous Coward · · Score: 1

    That is because the Linux security yack-yack is based mostly ON dishonesty. The truth is that story after story comes out about how some server was hacked, or android gets a trojan, or what have you and the whole issue is downplayed. Android isn't REALLY Linux, or server X got hacked because it was using something older (but Linux is inherently secure... so goes the arguement). Lets be honest though. Why does Linux offer stuff like APPArmor if it is so bleeding secure? Because someone, at sometime got pwned, and realized they needed better security and made it happen. Get over trying to point fingers at Windows every time some security problem crops up and then sticking your fingers in your ears and go NO NO NO every time some Linux security problem crops up. Start being fair, and maybe Linux will stop being regarded as the OS of loons and your average Joe Blow might wanna give it a spin. Oh, and Android is either Linux, or it isn't, and that goes for stories good OR bad. So which is it?

  37. Re:A lot like Windows after all by vistapwns · · Score: 1

    Good post. Another thing the OP is wrong about is that Windows does do sandboxing, and it does it by default. IE runs in a sandbox, so does office (to what extent, I'm not sure though), chrome does, and so does the new Adobe Reader X.

    --
    "...I think the Microsoft hatred is a disease." - Linus Torvalds
  38. Re:A lot like Windows after all by owlstead · · Score: 1

    Android is not Windows. App stores / package stores are much less susceptible to malware than each application having its own download/install/update mechanism. Beside that, Android apps play in a sandbox, and if you want to break out of that, you will have to inform the user. Of course, if you install apps using unsigned code from an unverifiable location and ignore all the permissions you have to grant...

  39. Sounds like an INSIDE job... by Frosty+Piss · · Score: 1

    This "well crafted" and "sophisticated" thing is attached to pirated games? Who's to say the game companies themselves didn't build and plant these to discourage pirated game use?

    --
    If you want news from today, you have to come back tomorrow.
  40. Re:A lot like Windows after all by Anonymous Coward · · Score: 1

    Sure if you ignore things like DEP, ASLR, etc.

    And they all do because they don't know what they are or that they even exist. All they really have is "It's UNIX!" a system with ideology in the 60s whose only security concern is not allowing one user to overwrite another's files in an academic setting. I'll give AT&T credit for hardening it somewhat for commercial use, but it was still assumed that a human operator would actively handle security concerns, an obsolete viewpoint clearly alive with the Slashdot crowd.

    Oh and many Linux distros do not come with either SELinux installed or even enabled by default so to try to act like that is common or even remotely universal is a lie.

    The reason is that it is absurdly obtuse and unworkable. Just type in "fedora d" into Google and the third autocomplete will be "fedora disable selinux". SELinux was designed for security pros protecting classified information. It's like trying to market an armored vehicle, along with certifications in guns and self-defense, to someone who just wants to make sure their car door doesn't casually open on its own on the way to the grocery store.

  41. Re:AltairDusk, thanks... apk by Arivia · · Score: 1

    You need a new grammar file.

    --
    The role of the writer is not to say what we can all say, but what we are unable to say. -Anais Nin
  42. Re:A lot like Windows after all by 4phun · · Score: 2

    Again, if I download and install malware on one of my Linux boxes, how is this a Linux problem?

    Linux protects much better than Windows against remote attacks, it can't protect against stupid users.

    IMHO a strong case could be made that any non geek buying an Android product is by definition a 'stupid user' as there a better user experience out there for the same price that they would have selected if they were smart.

  43. Re:App names? by edumacator · · Score: 1

    You're funny.

    --
    An important change for education.
  44. WTFA? by Suzuran · · Score: 1

    Where's The Fucking Article?

    What The Fuck,Aye?

  45. Re:0.0.0.0 will work (no "loopback" occurs even) by Pharmboy · · Score: 1

    Speaking on behalf of everyone here, you are an idiot.

    --
    Tequila: It's not just for breakfast anymore!
  46. Punch Yourself in The Genitals ?: by bl8n8r · · Score: 5, Insightful

    FTFA under "How it works":
    * Download and prompt the user to install an app
    * Prompt the user to uninstall an app

    Question: If you were asked to punch yourself in the genitals, would you still click "Ok" ?

    FTFA under "How to stay safe":
    * Only download applications from trusted sources
    * Always check the permissions an app requests

    I think it's pretty obvious the malware writers were not able to circumvent the normal Android security measures to get the software installed.  The problem is that people who don't take responsibility to keep crap off their phones are going to get pwn3d.  Big surprise.

    --
    boycott slashdot February 10th - 17th check out: altSlashdot.org
  47. Re:Uhm, I'm just telling you a way to stop it by Tanktalus · · Score: 1

    Side note: if the malware authors want a way around this, they can do one of a number of things:

    • Query a specific nameserver (e.g., 8.8.8.8) instead of relying on the OS to resolve. Will be slower, but will bypass the hosts file.
    • Just embed the destination IP address (obvious con: harder to move once caught/dismantled).

    At least, that's off the top of my head.

    It's always best, no matter the OS, to only install software from reputable sources. Admittedly, that's easier said than done as a general rule. In the case of a warez site, not so hard.

  48. Re:Punch Yourself in The Genitals ?: by moeluv · · Score: 1
    THIS, several time over.

    But be careful you are advocating for personal responsibility there are some on slashdot who would think you elitist for spouting such things :)

  49. Re:App names? by natehoy · · Score: 1

    Use the Party's official applications only? Isn't that the only way not to be killed as a dissident anyway?

    --
    "This post contains words, known to the State of California to cause thought. Wash brain thoroughly after reading."
  50. Re:App names? by ArcherB · · Score: 1

    my name is michael kristopeit.

    You killed my father.

    Prepare to die.

    --
    There is no "I disagree" mod for a reason. Flamebait, Troll, and Overrated are not substitutes.
  51. Re:App names? by Riceballsan · · Score: 1

    still get their apps from trusted sites? I haven't heard anything about china blocking the andoid marketplace, and I am sure that the chinese have more experience knowing what chinese sites are safe and not.

  52. Re:App names? by RocketRabbit · · Score: 1

    Fucking President versus Aliens sounds like the best game ever. Brilliant move on the malware author's part to hide his warez in such a kick ass sounding game. If this was 1988 and I was down at the local arcade, and saw a game called President versus Aliens I would have put all my quarters into it by now.

  53. Re:A lot like Windows after all by _Sprocket_ · · Score: 1

    So then what is your excuse for this?

    Fair point. Although it should be noted, on further digging, I don't think anyone actually uncovered any malicious behavior for these apps. The banks were rightfully concerned as they didn't produce the apps and they couldn't verify that they weren't malicious. Considering the nature of the service involved, it's judicious to assume that they were. But for all we know, they could have been simply charging $.99 to people who didn't know how to set a bookmark.

  54. This is why.... by WindBourne · · Score: 1

    I am not downloading ANY apps from CHina. You have to be an idiot to grab them.

    --
    I prefer the "u" in honour as it seems to be missing these days.
  55. Re:App names? by WindBourne · · Score: 1

    Then your gov. already has your money and knows everything about you already.

    --
    I prefer the "u" in honour as it seems to be missing these days.
  56. can you feel the FUD coming? by Zarf · · Score: 1

    I can feel the FUD storm building...

    --
    [signature]
  57. Re:A lot like Windows after all by _Sprocket_ · · Score: 1

    What's the percentage of Windows users who install malware on their system rather than being hit by a remote exploit?

    I don't know and I certainly doubt you do either. But considering how much anecdotal evidence there is to show that people are in large numbers willingly clicking on malware in emails and installing malware from pops to websites, it's not nearly as small as you try to make it out.

    Not exactly a clear answer, but it looks like drive-by attacks are far higher up the threat list than attacks requiring user interaction.

    http://news.softpedia.com/news/Drive-By-Download-Attacks-Were-the-Biggest-Online-Threat-Last-Month-170525.shtml

  58. Pardon My Cough by ryan.onsrc · · Score: 1

    **cough** This would never **cough** happen **cough** **cough** on an iPhone **cough**

    1. Re:Pardon My Cough by roc97007 · · Score: 1

      **cough**widgets**cough**flash**cough**sd slot**cough**customizable interface**cough**fanboi**cough

      And of course you mean "on a non-rooted iPhone".

      --
      Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
    2. Re:Pardon My Cough by ryan.onsrc · · Score: 1

      **cough** **cough**

      Yes, I was genuinely coughing that time.

  59. Parent is known troll and spammer by hairyfeet · · Score: 1

    Parent is known troll APK, also known as KingsJester or the HOSTS file troll, which spams several sites trying to show off his supposed programming skillz by writing badly designed VB6 "apps" and loves to spam threads with his rantings on 16MB HOSTS files, which after repeated requests to show how a 16Mb static HOSTS file can scale against a threat of over 1.3 MILLION infected sites with more than 200,000 being added or removed PER DAY has refused to show proof and instead throws insults.

    So anyone who listens to APK, Kingsjerker, or whatever he wishes to call himself this week, and thinks a HOSTS file will do anything but stop static ad servers, really needs to do the math. Not to mention on any machine before Vista it will seriously slow down the machine as it is read line by line per access, and frankly isn't much better on Vista/Win 7. About the most inefficient way to block a static site as one can get IMHO, and anyone actually pushing it as an effective solution to the ever revolving malware out there frankly needs their head examined. But then again we know trolls aren't the brightest creatures, now don't we?

    For examples of his trolling simply watch this thread or any I post to, as he has been following me for weeks spamming since I pointed out he doesn't have basic math on his side.

    --
    ACs don't waste your time replying, your posts are never seen by me.
  60. Re:A lot like Windows after all by _Sprocket_ · · Score: 1

    Yeah, except this is not a virus and Android doesn't seem to be very susceptible to viruses.

    Keep in mind that there HAS been Linux viruses ("virii" if you really want to annoy some folks) but they have a rather limited life span. The question is why. And does Android do anything to interfere with that? I suspect due to the nature of how Android and Android devices are handled (closer to the Windows environment than Linux), Android is a much more interesting target.

  61. You may not have a choice by roc97007 · · Score: 1

    Awhile back I was looking at cheap Android devices for something that would play movies for long trips. There are many cheap (sub-$200) Android tablets out there that (probably for licensing reasons) do not have access to the Android marketplace. The literature says "you can download thousands of apps from other sources".

    I'm thinking the great majority of the devices pwned by this virus will be of this cheap variety.

    --
    Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
    1. Re:You may not have a choice by AliasMarlowe · · Score: 1

      AFAIK, Google does not approve of Android use on tablets, and tries to limit "official" access to the Android marketplace to smartphones. Of course, even if a vendor cannot link directly to the Android marketplace, there is often an app available which does give such access. For example, most of the Archos tablets can use the Android marketplace if you sideload the gApps4Archos.apk application (google for it). The app was tested and approved by various reputable review sites http://www.engadget.com/2010/10/12/new-archos-tablets-get-android-marketplace-hack-works-as-promis http://liliputing.com/2010/10/google-marketplace-hack-for-the-new-archos-tablets.html http://androidcommunity.com/archos-tablets-get-android-market-thanks-to-new-apk-20101012/
      BTW, the Archos tablets are all GPL-compliant. http://linux.slashdot.org/story/10/12/31/0116250/Most-Android-Tablets-Fail-At-GPL-Compliance

      --
      Those who can make you believe absurdities can make you commit atrocities. - Voltaire
  62. Dead giveaway by sharkey · · Score: 1

    DON'T download apps from the "Andloid Malket". It's a fake.

    --

    --
    "Outlook not so good." That magic 8-ball knows everything! I'll ask about Exchange Server next.
  63. Re:App names? by gnarfel · · Score: 1

    No, I am Michael Kristopeit!

    No, I am spartacus.

    --
    Local music(to upstate NY). http://gnarfel.com/ radio.
  64. Re:A lot like Windows after all by abhi_beckert · · Score: 1

    Android could protect itself from nearly all stupid users if it's developers wanted that. Simply require all binary code to be cryptographically signed by someone reputable (like google, or verisign, or whoever), and give those who sign the apps the ability to revoke their signatures.

    It has been working great for websites ever since SSL came out, and has worked pretty well so far with iOS, why not do the same thing everywhere?

    If apps had to be signed, then it would be impossible to re-package a popular and reputable app with malware attached to it. And if signatures can be revoked, anything that does slip through can be dealt with quickly.

  65. Re:A lot like Windows after all by MrHanky · · Score: 1

    I'm not sure you can give an Android app permission to write to other application files, which a virus would need in order to spread. Then again, most Windows worms a couple of years back seemed to rely on user stupidity, and I don't think Android differs too much in that regard. An app that can read your address book and send SMS can also spam your contacts with "Hello friend, I just doanlowded this new Android game from http://spam-r-us.cn/andoird.apk and its great, thank you!" or similar, and at least some users would follow that kind of link.

  66. Re:A lot like Windows after all by ToasterMonkey · · Score: 1

    Again, if I download and install malware on one of my Linux boxes, how is this a Linux problem?

    Linux protects much better than Windows against remote attacks, it can't protect against stupid users.

    Ok I'll bite, what is 'Linux' doing to protect you from attacks that 'Windows' isn't?

  67. Re:A lot like Windows after all by ToasterMonkey · · Score: 1

    Pretty much every major Windows security story I've read in the last couple of years is due to some hole being exploited either in Windows or commonly used Windows software which lacks the sandboxing that's common on Linux (Apparmor, SELinux, etc), not users downloading trojans.

    Err, so we rip on UAC for a few years then pretend it doesn't exist when it's convenient?

  68. Re:A lot like Windows after all by mlts · · Score: 1

    My fear is that the other shoe will drop -- to "fix" the problem, each carrier will have its own app store and lock their devices to it.

    Why is this bad?

    Two reasons. First, developers will have to grease palms in order for their app to be usable by all. Second, carriers will want exclusivity agreements, so Goatse Tower Defense only appears on one cellular carrier, but no other. This will be used as a way to peddle phones, similar to how game titles are used to sell consoles (if you want Halo, you buy an XBox for example.)

  69. Re:Because, it simply WORKS... apk by cmdr_tofu · · Score: 1

    Yeah because as we know malware authors are unsophisticated and easy to predict. They would never do anything like incrementing a number in a hostname www255.frigd.com www256.frigd.com. Why do you post nonsense as Anonymous Coward and sign as APK?

  70. Re:hairyfeet explain this (time to SHOOT YOU DOWN) by BronsCon · · Score: 1

    I shouldn't reply to the troll, but...

    10 x .999 = 9.990

    Therefore:
    a = .999
    10a = 9.990
    10a - a = 9.990 - .999
    9a = 8.991
    a=.999

    --
    APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
  71. I saw several more, then fell asleep... by Brannon · · Score: 1

    take your time.

  72. Re:A lot like Windows after all by Walter+White · · Score: 2

    Ok I'll bite, what is 'Linux' doing to protect you from attacks that 'Windows' isn't?

    For starters, not trying to execute stuff that comes in from questionable routes like USB drives, CD and DVD ROMs, embedded in various files like jpegs, PDFs and so on.

    But you knew that because you're clearly not stupid.

  73. Too late for that I think by hairyfeet · · Score: 1

    Hell just count his ranting posts on this single thread. you are looking at about 3 dozen, each getting more and more crazy, all because I pointed out he is a known troll and his math doesn't work.

    Look at that huge amount of math he put that has NOTHING to do with anything and makes NO sense as supposed "proof" of his delusions. What ".99" (Is that a "magic number"? A number of protection? Who the fuck knows) has to do with fuck all is anybody's guess. It still doesn't explain how 1.3 million websites, 18,000 NEW pieces of malware released on average a week PLUS 180,000 new websites infected PER DAY is supposed to be stopped by a static file.

    Anybody with the slightest bit of logic will see it simply CAN NOT work. It is frankly as bugshit crazy as perpetual motion. Even if he typed at a rate of one IP address per second, and had a PERFECT list of constantly updated malware IP address handed to him (which of course is again impossible, as it isn't like malware writers hand out their infected IP lists like press releases) he would still be BEHIND by 100,000+ websites PER DAY. And that is giving him 24 hour days with no sleep and perfect typing of an IP address per second.

    But that is the thing with those that suffer delusions, no matter how much you point out they can't fly they still want to jump off the building. Like you I hope he seeks professional help, but most likely judging by just the ranting he has posted in the past few weeks he'll probably be found wandering the streets muttering about how MSFT is watching him, and how all the execs at every security firm owe him millions for his "brilliant idea". Kinda sad really.

    --
    ACs don't waste your time replying, your posts are never seen by me.
  74. Thanks for proving me correct AGAIN by hairyfeet · · Score: 2

    You know, I shouldn't respond to crazy people, but it really does illustrate my point beautifully. What did I say? What were my words? That you could not produce a SINGLE SHRED of actual mathematical proof that your magical woobie would scale, and that instead you would copypasta and troll bomb the entire thread.

    And what did you do? You posted some complete rambling bullshit about 0.99 (Is that your "magical number of protection" Petey?) which had exactly fuck all to do with your magical HOPES file, because you just can't do it can you Petey? You see, it is simple. Math doesn't fall for anecdotes, math doesn't pick sides, and no matter how many times you try to change the subject you STILL cannot show us how 18,000+ pieces of malware released per week + 1.3 million currently infected websites + 180,000+ websites added PER DAY to that list, with another 20,000-35,000 taken off that list PER DAY, can all be stopped by a static text file.

    You can't do it, changing the subject won't change the fact you can't do it, and no matter how hard you trollbomb or wish upon a star printing your magical .99 protection symbol, nothing you can do or say can change the fact that after repeated requests you still can't show your work and do the math showing that a static file can magically scale to those kinds of numbers. So give it up Petey, you can't do it. Admit you're a failure, accept it, and move on. Otherwise you can prove us all wrong by putting your supposed "genius" where your mouth is and show us the REAL figures and not your crazy VB6 math.

    --
    ACs don't waste your time replying, your posts are never seen by me.
  75. Re:hairyfeet: What's the exact # of badsites? by hairyfeet · · Score: 2

    And this coming from poor wittle APK, also know as "the idiot HOPES file guy"? As in you HOPES that one of the 300,000+ constantly changing array of websites that are infected doesn't happen to be the one you visit today? Or that you HOPES that nobody notices after repeatedly being asked you have FAILED to show even the tiniest shred of mathematical proof that your magical woobie can scale? That you HOPES nobody notices your only "prrof" is anecdotes, often by your own sock puppets like Kingsjester?

    If there is ANYONE that should be LOLing it is me, for pointing out there are still morons that believe 16Mb HOPES files can do anything but block ads since ad servers are...what do you call it...oh yeah STATIC, just like your HOPES file, but really you are just kinda pathetic. You're like the idiot that just keeps hanging onto that three years out of date copy of Norton, because he is just so damned sure it still works, only the Norton guy is actually better protected than you are, since it did used to work in the past 5 years.

    So please, keep posting APK, I do so enjoy pointing out the total uber fail of your magical woobie so. I also personally consider it a public service to point people to solutions that actually work instead of relying on magical woobies and anecdotes. And of course bitch slapping your around is also quite fun!

    --
    ACs don't waste your time replying, your posts are never seen by me.
  76. Re:HOSTS work via blacklist principal, & DNS? by catmistake · · Score: 1

    LMAO - I didnt say run the DNS on Android haha! Just run it SOMEWHERE. If you have a single *nix machine, mucking with the hosts file is fine. After you get a few machines, it gets old... fast.

    --
    The Admin and the Engineer
  77. Re:Math review for HAIRYFEET (the ITT Tech Grad) by ZenDragon · · Score: 1

    Nobody cares man. Please go away.

  78. Re:Doesn't matter, & why (per hairyfeet no les by thej1nx · · Score: 1

    If the windows calculator tells you that 10 x .999 = 9.999, I think you'd better learn to use the calculator first.

  79. Re:Do you know how to use logon scripts? by catmistake · · Score: 1

    I can do that too. But you mislead... it's complicated... it's far more complex keeping track of many systems in an enterprise THAN A SINGLE DNS SERVER that you control. But you go ahead... party like it's 1974.

    --
    The Admin and the Engineer
  80. APK you ignorant slut! by hairyfeet · · Score: 1

    Hi trollie! Sorry to rip off some classic Dan Akroyd but you know it is usually considered good form to at least make a sock puppet, posting AC to plug your own AC posts? Kinda sad. And for the 400th time Correlation != Causation. I can build an XP Sp2 machine with NO patches, NO AV, and change the desktop to a LOLCat. Now if I only use this machine to check my email and go to my bank I will NEVER get a bug, but I don't think it was my magical LOLCat protecting it, do you?

    The simple fact is this: no matter how many times trollie says "1+1 = 3" the math simply proves you wrong and THAT is why all you can do is throw insults. You have 190,000 to 340,000 infected websites at this very moment and that list will change by the thousands per minute as sites are cleaned, new sites are infected, new vulnerabilities found, etc. Now for his HOPES file to actually be a REAL protection and not just a woobie? It will have to dynamically scale and keep up with that ever changing list of infections. Now even if he had twenty fingers and subscribed to every security list on the planet his HOPES file will ALWAYS BE OUT OF DATE and behind the curve. Always.

    Now if you have a mathematical proof that shows how a static .txt file dropped into system 32 can magically scale dynamically? Lets see it. Otherwise it is NOTHING more a magical LOLCat pic backed up by anecdotes. That is the nice thing about math, it doesn't lie or believe in anecdotes. And if there is ANYONE that should be LOLing it is me, for pointing out there are still morons that believe 16Mb HOPES files can do anything but block ads since ad servers are...what do you call it...oh yeah STATIC, just like your HOPES file, but really you are just kinda pathetic. You're like the idiot that just keeps hanging onto that three years out of date copy of Norton, because he is just so damned sure it still works, only the Norton guy is actually better protected than you are, since it did used to work in the past 5 years.

    So please, keep posting APK, I do so enjoy pointing out the total uber fail of your magical woobie so. I also personally consider it a public service to point people to solutions that actually work instead of relying on magical woobies and anecdotes. And of course bitch slapping your around is also quite fun!

    --
    ACs don't waste your time replying, your posts are never seen by me.
  81. Re:App names? by mark72005 · · Score: 1

    Much better!!

  82. Re:What's the matter? Shutting up now?? by catmistake · · Score: 1

    FYI just so you know, that ac was a troll... I think you prolly picked up on that. Anyhoo, sticking to my guns here... configuring a single DNS is far less complicated than making sure 1000 computers have a the correct HOSTS file. You're way is perfectly valid... and when dealing with a handful of machines, I defer often to that method. But you're not thinking clearly if you believe wrangling 1000 HOSTS files (by whatever method you believe is as easy as breathing) is superior to one single DNS.

    --
    The Admin and the Engineer