Slashdot Mirror


Linux Is Not As Safe As You Think (betanews.com)

BrianFagioli writes via BetaNews: Would you be surprised if I told you that threat methods for Linux increased an astonishing 300 percent in 2016, while Microsoft's operating systems saw a decrease? Well, according to a new report, that is true. Does this mean Linux is unsafe? No way, Jose! There are some important takeaways here. Microsoft's Windows operating systems are still the most targeted platforms despite the year over year decline -- far beyond Linux. Also, just because there is an increase in malware attack methods doesn't necessarily mean that more systems will be infected. Let us not forget that it is easier to find a vulnerability with open source too; Microsoft largely uses closed source code. "At the end of November, criminals with other variants of the same Linux malware unleashed devastating attacks against DSL routers of Telekom customers. 900,000 devices were taken down. In October, the Mirai code appeared freely available on the Internet. Since then, the AV-TEST systems have been investigating an increasing number of samples with spikes at the end of October, November and beginning of December," says AV Test of the Mirai malware. "Other Linux malware, such as the Tsunami backdoor, has been causing trouble for several years now and can be easily modified for attacks against IoT devices. The detection systems of AV-TEST first detected the Tsunami malicious code in the year 2003. Although, at that time, practically no IoT devices existed, the Linux backdoor already offered attack functions which even today would be suitable for virtually unprotected attacks on routers: In this manner, Tsunami can download additional malicious code onto infected devices and thus make devices remote controllable for criminals. But the old malware can also be used for DDoS attacks. The Darlloz worm, known since 2013, as well as many other Linux and Unix malware programs, have similar attack patterns which AV-TEST has been detecting and analyzing for years."

237 comments

  1. Ponderosa Puff by Spy+Handler · · Score: 5, Funny

    didn't take no guff
    water ought to be clean and free
    so he fought the fight and he set things right
    with his openBSD

    1. Re:Ponderosa Puff by BeauHD+(4450103) · · Score: 0

      I dont get it

    2. Re:Ponderosa Puff by Negatif · · Score: 2
    3. Re: Ponderosa Puff by dougdonovan · · Score: 3, Informative

      linux is only as safe as you make it. besides, it beats the hell out of windows.

    4. Re: Ponderosa Puff by Anonymous Coward · · Score: 0

      It really depends on the use case. For desktop, you pretty much can't go wrong with Windows. However in the example cited in TFA, Windows can't even perform the functions needed by a DSL router. In fact when it comes to most networking functions in general beyond ethernet and basic IP routing, Windows simply doesn't work at all, which is precisely why Microsoft made its own Linux distribution that it uses in Azure.

      Anyways, can we get a better source than betanews?

    5. Re:Ponderosa Puff by ProzacPatient · · Score: 1

      Burma Shave!

    6. Re:Ponderosa Puff by ma1wrbu5tr · · Score: 1

      Am I the only one that thought this was a Primus song?

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    7. Re: Ponderosa Puff by Anonymous Coward · · Score: 0

      Also, Systemd exists now which is giving Linux a bad name.

    8. Re: Ponderosa Puff by Anonymous Coward · · Score: 0

      Let me just say I despise Poettering and his ill-conceived aspie lump of shit - but don't you need to already have root to write/edit that 'unit file' ? Shouldn't you? /etc is usually guarded with write privilege. Or does systemd just arbitrarily execute whatever any local user throws at it?

    9. Re: Ponderosa Puff by Anonymous Coward · · Score: 0

      Troll. To enable/start such service one still needs root privileges. While defaulting to root is stupid and it should indeed fail when misconfigured it really is a minor issue. I dare you to make privilege escalation POC exploit using this bug. Hint: not possible.

    10. Re: Ponderosa Puff by fisted · · Score: 1

      You keep assuming that the author of the unit file has to be the administrator of the server that is to be owned.

      Hint: You're mistaken.

    11. Re:Ponderosa Puff by Big+Hairy+Ian · · Score: 1

      Linux has always been vulnerable. If Linux for desktop ever takes off it will get PAWNED left right and center. At the moment though very few people are targeting it.

      --

      Build a Man a Fire, and He'll Be Warm for a Day. Set a Man on Fire, and He'll Be Warm for the Rest of His Life.

    12. Re: Ponderosa Puff by gumbi+west · · Score: 1

      Windows fit for the desktop? What a joke.

      Every time I open my windows laptop at home it has a panic attack about the missing network drives. it's like, seriously Windows, VPN isn't new, just calm down and help me setup the connection and toss some ice in your underwear until then. Because of this foobar it also thinks I haven't saved any of my open documents.

      Also, after a reboot, Mac OS has been recovering to having all of the applications in the same state I was in for over a decade. Why can't Windows do this yet? At first it was just a classic case of Apple inventing it and Windows lagging. At this point the OS is just pathetic.

    13. Re:Ponderosa Puff by tlhIngan · · Score: 1

      Linux has always been vulnerable. If Linux for desktop ever takes off it will get PAWNED left right and center. At the moment though very few people are targeting it.

      Linux right now is getting pwned. Or rather, Linux servers running vulnerable applications.

      You don't hear much about them because they're Linux servers, and the vulnerable application is usually named instead of Linux, like WordPress, for example.

      Of course, the goal is not to infect other Linux servers, but to infect websites hosted by Linux so people visiting those websites, invariably running Windows, will get infected. In other words, Linux is helping spread Windows malware.

      (Snarky conclusion - get rid of Linux servers to get rid of Windows malware)

    14. Re: Ponderosa Puff by Brockmire · · Score: 1

      If a popup is a panic attack, that makes you a whiny bitch.

    15. Re: Ponderosa Puff by KGIII · · Score: 1

      Invariably?

      --
      "So long and thanks for all the fish."
    16. Re: Ponderosa Puff by gumbi+west · · Score: 1

      I know I'm feeding the trolls here but it's not a popup. It's a long freeze, a popup, and every MS program starts flashing in the dock and needs me to click on it an agree that it lost it's connection to every open document.

  2. BREAKING!! by FrankHaynes · · Score: 0

    slashdot is not as safe as you think!!

    --
    slashdot: A failed experiment.
  3. With Android, no. by Anonymous Coward · · Score: 0

    Android made linux market share skyrocket. With tablets and phones, Windows marketshare is simply down from a decade down.

  4. Tsunami backdoor by Dunbal · · Score: 1

    Of course is it really the fault of the operating system when the PUBLISHER'S WEBSITE is hacked and contaminated distros have to be downloaded for it to work?

    --
    Seven puppies were harmed during the making of this post.
    1. Re:Tsunami backdoor by Anonymous Coward · · Score: 2, Funny

      Well yeah, of course it's that open sores stolen software's fault. If you bought it on a CD like any God-fearing capitalist, you'd have been safe, but no, you went and downloaded it without paying for it like some sort of Satan-loving communist.

    2. Re: Tsunami backdoor by Anonymous Coward · · Score: 0

      I'm glad you brought up stolen. With open source you can see if it's stolen. With closed source you can see a middle finger.

    3. Re: Tsunami backdoor by unixisc · · Score: 1

      How does Open Source reveal to you whether something is stolen? The thief could well have changed the attributions & credits in the code

    4. Re: Tsunami backdoor by jimtheowl · · Score: 1

      It does not magically reveal itself. Nothing does. But readable text is easy to compare, even to the human eye.
      If I were to read code I wrote or supported, I would likely recognize it.

      You could even consider using a computer.

      https://en.wikipedia.org/wiki/...

      http://www.drdobbs.com/archite...

      https://academia.stackexchange...

      ...

  5. Percentage change by DavidJSimpson · · Score: 5, Insightful

    Baby Timmy grew 300% but Uncle Bob shrunk 5%. Who is bigger?

    1. Re:Percentage change by Swave+An+deBwoner · · Score: 1

      And Bob's your uncle?

    2. Re:Percentage change by hagnat · · Score: 2

      this is why i hate statistics comparison. When you say "this country grew 50% while this other only grew 1%" can mean a lot of difference. If the first country is Sealand, that means a baby was born, while if it was china, that would mean 14 million

      --
      "life is a joke, and someone is laughing at me"
    3. Re:Percentage change by Anonymous Coward · · Score: 1

      https://xkcd.com/1102/

    4. Re:Percentage change by Anonymous Coward · · Score: 1

      Liberia's GDP increased 30% last year. They've built a shopping mall.

  6. Linux is safe by Anonymous Coward · · Score: 0, Troll

    because nobody uses it.

    1. Re: Linux is safe by Anonymous Coward · · Score: 0

      This is nobody, I use Linux and I am not sure how that helps... but You Welcome!

    2. Re:Linux is safe by jimtheowl · · Score: 1

      In itself, that is a good reason to start using it.

    3. Re:Linux is safe by MerlTurkin · · Score: 1

      I can disprove that.

  7. Fuchs ache! by Epsillon · · Score: 5, Insightful

    This isn't a "Linux problem," it's a "proprietary vendors using Linux and not passing on patches in a timely manner because money problem."
    Linux is exactly as safe as I think it is, though. That's why I'm careful to lock it down just as I would any other system.

    --
    Resistance is futile. Reactance buggers it up.
    1. Re:Fuchs ache! by chromaexcursion · · Score: 1

      Amen

    2. Re:Fuchs ache! by MightyMartian · · Score: 4, Informative

      It's why I roll my own routers with a long term support version of the distro I'm using, and why I run updates on a strict schedule. If you're buying some low-end shitty D-Link router, well you got what you paid for; a Linux box that's virtually never updated, that probably is running old versions of the kernel and other userland tools right out of the box. It's literally like booting a three year old version of unupdated Ubuntu and decrying the vulnerabilities of Linux.

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    3. Re:Fuchs ache! by onyxruby · · Score: 1

      Unfortunately the 'it's good if people just use pure Linux" defense ignores how Linux is used by the vast majority of people. When it comes to security you have to compensate for how end users use the product - not purists. Jane the accountant doesn't give a damn about ideology, she just wants her stuff to work.

      Same goes for windows, and it's something Microsoft struggled with for a long time before finally understanding that they had to accept users as they are. You can lock down Windows fairly tightly as well - especially if you avoid third party software. However this is moot because that isn't how people use it.

      Whether it's Android, an OpenWRT wi-fi router or otherwise is really moot. You have to design user behavior resistance in from the beginning. It's like Windows with bad drivers, the fact that it crashed from proprietary third party drivers didn't stop anyone from blaming Microsoft when their system goes tit's up.

    4. Re: Fuchs ache! by Anonymous Coward · · Score: 0

      A 'real' OS shouldn't crash from a poorly written driver.. that means it's badly designed..

    5. Re:Fuchs ache! by Anonymous Coward · · Score: 0

      Ayup, the problem is the same as with Windows for that matter. However, the enormous variety of embedded systems limits the scope of any attack.

      Anyhoo, people who worry about Linux security or BSD security and then choose Windows instead, have a much bigger problem in their heads.

    6. Re:Fuchs ache! by Anonymous Coward · · Score: 0

      "Let us not forget that it is easier to find a vulnerability with open source too"
      This is one of the most flawed arguments for using open source. There is only a tiny minority of developers who can even understand the intricacies of OS code which is a pretty big prerequisite if you want to find exploits and vulnerabilities. Application development and OS development require almost two entirely different skillsets.

      When PC's first hit the market nobody was thinking about security issues. The industry was focused almost entirely on getting your hardware and software products released. When people finally realized that security was important all they could do was tack on security band aids commonly referred to as security patches. I see the same attitude taking place in the Android mobile platforms. People are using their phones to do things they used to do their PC's. People download any apps that catch their attention and usually give those apps access to everything on the phone during installation. People are walking around with tracking devices with cameras, microphones, speakers, and non-stop data streams. General Security concerns are being over looked. Just like the early PC's the mobile platforms are trading security for functionality all in a bid to get their software and hardware into the market space first.

    7. Re: Fuchs ache! by Anonymous Coward · · Score: 0

      I don't know OS code but I have found and reported faults in Linux code. I did it with a help of a software. Mind you that kernel had the same amount of faults as best closed source software I tried. Other closed source had at least 3 times more faults per line of code, some 5 times as much.

    8. Re:Fuchs ache! by Anonymous Coward · · Score: 0

      So the insinuation in parent is that people relying on Linux with proprietary drivers should change hardware platforms, or move to a software platform that supports the proprietary drivers, like Windows.

      This is against the spirit of open source software. Maybe the underlying motive is that sharing source code is just a flawed approach, but this also seems wrong.

    9. Re:Fuchs ache! by Anonymous Coward · · Score: 0

      Android is open source, this means you can do your own version and give a shitty support or not support at all and modify it as you wish.

      Windows Phone isn't and, because of it, you can't prevent users to access updates or do anything against the user's benefit.

      That's the power of open source software: you can pick up a project and force your customers to deal with any kind of bullshit you want.

    10. Re:Fuchs ache! by munch117 · · Score: 1

      This is a "using a desktop operating system for an embedded product" problem.

      When you do that, you get millions of lines of code that are not strictly relevant to your application along for the ride. And every time there's an update, hundreds of thousands of lines may have changed, that you have to review, test, compile, and transmit the result to the device somehow, even if the actual security fix you care about is only a handful of lines.

    11. Re:Fuchs ache! by Anonymous Coward · · Score: 0

      You can't expect an OS to be safe if you don't install security updates in time. Unless the OS is Windows, then it should be safe without installing anything and if something fails it's Windows fault because reasons.

    12. Re: Fuchs ache! by fisted · · Score: 1

      Blah.

    13. Re:Fuchs ache! by OolimPhon · · Score: 1

      Ayup, the problem is the same as with Windows for that matter. However, the enormous variety of embedded systems limits the scope of any attack.

      That's funny. I don't remember the vast number of IoT cameras limiting recent attacks... Be careful how you generalize.

    14. Re:Fuchs ache! by Anonymous Coward · · Score: 0

      its not a linux problem, its just ALL THE SHIT THAT RUNS ON LINUX

      its a fucking linux problem, its not company X's fault that a bunch of freeloaders want patches NOW and FOR FREE as in both beer and speech, I mean for fucks sake, its not that god damned hard, BOTH apple and MS do not have this problem, cause they are customers, not burdens

    15. Re:Fuchs ache! by Anonymous Coward · · Score: 0

      Isn't the linux kernel modular, meaning you can pick and choose the parts that you want in your product, so you really aren't burdened with millions of lines of code that aren't relevant. Which also frees you up from reviewing the code changes in the parts you don't include.

    16. Re: Fuchs ache! by Anonymous Coward · · Score: 0

      This means you have a monolithic kernel.

      For all patches there's 99% good and 1% bad. The 99% is the bug in the headlines from lunchtime. You fix that or your customers leave. The 1% will be in the headlines tomorrow.

      The fix is to have less code.

    17. Re: Fuchs ache! by Brockmire · · Score: 1

      You make it sound like code develops bugs and vulnerabilities automatically over time on their own. Code can be well tested and stable, there's not MUST switch to newer, bigger, exploitable code. Your full distro is likely to have way more vulnerabilities than an embedded router. And more resources to exploit.

  8. COMMERCIAL UNSECURED ROUTERS????? by Anonymous Coward · · Score: 0

    Thats not linux, thats a company using free code for their commercial products. Linux without systemd is very secure thanks.

  9. Not a level comparison by Anonymous Coward · · Score: 5, Insightful

    The DSL router issue was /that/ distro, not linux as a whole. That's like lumping Adobe Flash issues in with WinXP issues.

    1. Re:Not a level comparison by unixisc · · Score: 1

      Usually, the distros in question are either the vendor ones that come in the routers. Do the vendors add anything specific to the router software that makes it insecure? From what I understand, the reason is usually that most people are too tech-phobic to change the admin password of the router from 'admin' or 'password' to something else that they fear they'll forget.

    2. Re:Not a level comparison by aaarrrgggh · · Score: 0

      Having tried (futilely) to update my router on Monday, I would say it is a Linux problem to me. Knowing something in Linux is broken, but there is no way to address it (because it is a 2013 router). The proprietary bits make upgrading to Tomato or a maintained district unreliable. With a small distribution pool, you really have to trust the small group of people (or individual) maintaining it.

    3. Re:Not a level comparison by MightyMartian · · Score: 3, Insightful

      How is a distro's update problems Linux's problem. Linux is an operating system. If you bought a router or downloaded a router distro that can't do updates, well, that's your fault. I learned my lesson a long time ago. I spend a few extra bucks, by a small-form box with a cheap 32 bit or 64 bit CPU, a relatively small drive, usually an SSD, throw a mainline distro like Debian on it, and not only do I have a router, but I have a router that can do some pretty complex things since I have full control of iptables, not to mention being able to run anything else on it I please. I've got it to the point that I can get a router on a box in about an hour or so, from the point that I run the netinstall version of Debian.

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    4. Re:Not a level comparison by Anonymous Coward · · Score: 0

      We get it, you're a super nerd because you don't use a COTS router. Good for you

    5. Re:Not a level comparison by houghi · · Score: 1

      Nice blaming the victim there. I assume old people who call the Indian guy at "Microsoft" and pay in ITunes cards are to blame as well. And she was asking for it, because of the skirt she wore.

      To me it sounds as if the companies are at fault and those are the ones who should see that the device is as safe as possible and do recalls if it is not possible to do it in any other way.

      Bit like any other product on the market,. be it cars, food or anything else. It is thanks to you that legislation is lacking on the IT part of it as they are able to say "This smart IT guy tells it is the problem of the users. Probably they hold the device wrong." and nothing is done about it.

      So it is nice that you are able to make a secure router. It is also clear that you have no idea about security as you are running anything else you like on it, making it less secure by default. Debian is not a router OS and the fact that it takes an hour tells also a lot.

      What you made is a PC with a also some router software on it, not a router.

      --
      Don't fight for your country, if your country does not fight for you.
    6. Re:Not a level comparison by thegarbz · · Score: 1

      That's like lumping Adobe Flash issues in with WinXP issues.

      And yet this is exactly what happens, so keep those goalposts where they are.

    7. Re:Not a level comparison by Anonymous Coward · · Score: 0

      Well, no. To be precise, Linux is a kernel and then anyone can layer an OS around that, like GNU/Linux or Android. It is precisely because of this that boatloads of device manufacturers use the kernel and then wrap a set of tools around it to create their own little OS. Then they chuck it over the wall and if it sticks to the market, update it, maybe once or twice and then fugghedaboutit... Often these devices have working lifetimes years in excess of their warranty period and therin lies the problem.

    8. Re:Not a level comparison by Anonymous Coward · · Score: 0

      No, Linux is a kernel. Get your narrative straight. It goes something like this:

      Everyone should use Linux on the dekstop!
      >But my hardware isn't supported
      Buy better hardware!
      >But it won't run my applications
      Use different ones! Linux isn't Windows, it's a different operating system.
      >But these don't do what I need
      Why do you even want to do those things?
      >And this software issue occured and I can't fix it
      Get out your compiler, I'm not your mother
      >Who designed this kludge anyway? Why are there 25 different incompatible ways to do a small subset of things and no ways to do a larger subset of things?
      Yeah well, the user space is kind of a kuldge now, especially with systemd. Use a different distro?
      >This distro just has different problems, and some of the same ones. What the hell is wrong with this operating system? It sucks.
      Bullshit! Linux is great. I mean, the kernel is great, which is what Linux is, it's just a kernel. Everything else is just a collection of software on top of it.
      >Great. Fine. Tell me, how can I use a bare kernel to do things on my desktop again?
      Well Linux works for me and my needs on my hardware, therefore it is great! Enjoy your Windows SMB vulnerability!
      >Didn't Samba just have its own remote code execution vulnerability? ....

    9. Re: Not a level comparison by Brockmire · · Score: 1

      You're doing it wrong.

  10. Re:FINALLY!! by Anonymous Coward · · Score: 4, Insightful

    At least I can see the holes in swiss cheese. Unlike the MSFT "processed" cheese-like product.

  11. BeauHD by TheDarkener · · Score: 0

    isn't as Slashdot as you think.

    --
    It is pitch black. You are likely to be eaten by a grue.
    1. Re:BeauHD by unixisc · · Score: 1

      I prefer this story to the political or climate stories that he posts. Had some good moments in the Intel IoT thread earlier, but of late, too many /. stories are about politics or climate (which in itself is a route towards bashing Republicans)

  12. Thank you IoT by grilled-cheese · · Score: 4, Insightful

    Thank you IoT vendors who don't maintain their devices for creating a breeding ground of consumer-grade security holes. Let us all pray that these widgets aren't internet facing in some way and that the consumer grade routers are sufficient at keeping external attack vectors to a minimum. There isn't much we can do for consumers who like to click on internet candy to infect themselves.

  13. Re:FINALLY!! by Rockoon · · Score: 1, Flamebait

    I don't know how much swiss cheese Linux is, but I do know that as things like routers get more and more powerful, the desire to attack them will grow and grow.

    Back before Win3.1+Winsock and Win95, there were almost weekly CERT advisories about unix-based exploits, but as Windows grew to dominate on the internet (at least by users) it switched to almost weekly CERT advisories about windows-based exploits.

    It isnt that any of these things is secure. My money would be on OpenBSD being the most secure, but thats based on data collected in a world where hardly anybody would waste their time attacking BSD (even Apples BSD derivative gets more attention.)

    I hope there is a return to ROM rather than FLASH/EEPROM for devices like home routers... but... I also hope the Democrat party disappears the way the Whigs did. Hope doesnt always translate into reality, but on both these issues there might be a chance.

    --
    "His name was James Damore."
  14. Compared to what? by Anonymous Coward · · Score: 1

    Stupidest story ever.

    1. Re:Compared to what? by Anonymous Coward · · Score: 0

      Exactly. Another ill-informed person who thinks every Linux distro/version is *Linux*.

  15. this is like saying by cas2000 · · Score: 5, Insightful

    that a particular brand of car can be stolen easily if you leave them parked on the street with the door open and the keys in the ignition.

    because that's what router and IoT etc manufacturers did with default passwords and backdoors and generally undermining security for the sake of convenience (mostly their own convenience, not their customers')

    1. Re:this is like saying by Anonymous Coward · · Score: 0

      that a particular brand of car can be stolen easily if you leave them parked on the street with the door open and the keys in the ignition.

      IMO we need a network of honeypot VMs that do exactly what you suggest, and then report back to ISPs to blacklist the offenders.

      p.s. Obligatory Guy Knows He's In A Bait Car

    2. Re:this is like saying by thegarbz · · Score: 1

      That depends. Is it the same as tricking a person to handing over their keys when you get them to install randsomware? I mean that's by far the vast majority of "windows" security issues.

  16. Re:FINALLY!! by Anonymous Coward · · Score: 0

    I also hope the Democrat party disappears the way the Whigs did

    So you'd rather have a one-party 'system', essentially an authoritarian dictatorship? Why not get rid of the Presidency and just have a Dictator? Get rid of all those pesky 'checks and balances' in our system, make the so-called 'judicial branch' suck the Dictators dick or get executed, and tear up those pesky old pieces of paper called the 'declaration of independence' and the 'constitution' and the 'amendments' and just turn this place into Russia or Syria or North Korea? Or how about we hunt your sorry ass down and SHOOT YOU IN THE HEAD, you faggot? STFU and GTFO.

  17. (insert OS) is not as safe as you think by WillAffleckUW · · Score: 2

    Nobody will ever hack CP/M
    Nobody will ever hack MS-DOS
    Nobody will ever hack Windows
    Nobody will ever hack Macintosh OS (iOS)
    Nobody will ever hack.

    Security is not the same as obscurity.

    --
    -- Tigger warning: This post may contain tiggers! --
    1. Re:(insert OS) is not as safe as you think by arth1 · · Score: 1

      Nobody will ever hack CP/M

      Can't say I've seen many CP/M hacks lately...

    2. Re:(insert OS) is not as safe as you think by AHuxley · · Score: 0

      If only an OS existed that had an unexpected file system, could not compile code in any expected way once accessed?
      Malware needing to download and install a programming language to try and create the networking services it needs?
      A really limited OS thats just a web browser, AV and a few apps thats unique to every install?

      --
      Domestic spying is now "Benign Information Gathering"
    3. Re:(insert OS) is not as safe as you think by phantomfive · · Score: 1

      Uh, I don't remember anyone saying any of that about any of those operating systems.

      --
      "First they came for the slanderers and i said nothing."
  18. systemd by roman_mir · · Score: 0, Interesting

    What is the percentage of security problems that systemd bugs (or are those 'features'?) are responsible for?

    1. Re:systemd by Anonymous Coward · · Score: 0

      The kernel should differentiate the systemd uid from root uid and maybe even compartmentalize the services with various permissions or ACLs. The old setuid() is getting a bit old when faced with such a power grab by a foreign software. There's not even any sort of accountability, just new flashy system-level software by some people to replace older stable ones for no real reason. SELinux helps but it's often turned off.

      I think the Linux kernel needs to care more than before about the existence of other software like systemd at a more fundamental level and start thinking about Linux as an OS in more global terms. Other OSs have the luxury of being made by a single vendor with a unified vision, but Linux is a bunch of stuff made by different people that got put together. I think it could be a nice project for Linus to get together with some people and think about the next level of security in Linux, seen as an OS.

    2. Re:systemd by MightyMartian · · Score: 0

      Thanks, but there's no way in hell I want systemd intruding on the kernel.

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    3. Re:systemd by Anonymous Coward · · Score: 0

      Fortunately, you only need to be a subgenius to run Slackware.

      All hail Bob.

  19. Potential by chill · · Score: 4, Interesting

    Linux, unlike Windows and Apple's iOS, *can* be made much more secure with a little bit of effort.

    How? By not using monolithic kernels that support every device in creation, and stripping the kernel down to what is installed on the system -- especially with things like IOT devices. If it isn't installed, it doesn't need patched, it can't break, and it can't be exploited.

    Ditto for added software and apps. Take a look at many of the Linux-based router firmwares out there, both sold by commercial vendors and FOSS projects, and you'll see attempts to compete with high-end Cisco feature sets for home or small business use.

    Having that available is great! However, turning all of that on by default, and user thinking they should get something not because it suits their needs but because it supports 10,000 features, gets you a complex, insecure mess.

    With Microsoft and Apple you can't remove many of those features. The company controls it and, Enterprise customer with a decade experience or not, you will damn well have Telemetry and like it! And dozens of other "features" that you'll never use, don't want, and just are waiting to get exploited.

    Linux gives you the ability to shape much of your own system, including making it much more secure than a run-of-the-mill device. Whether or not you take the time and effort to do that is up to you.

    I've seen way to many Linux-based routers and gadgets that are exposed to a network and still have default admin passwords to blame "Linux" for security headaches.

    --
    Learning HOW to think is more important than learning WHAT to think.
    1. Re:Potential by Anonymous Coward · · Score: 0

      None of this has anything to do with problems with device drivers built into the kernels. It all has to do with the userland setup, user authentication, etc.

    2. Re:Potential by Anonymous Coward · · Score: 0

      Somewhat true, but there are some issues. The "kernel bloat" argument is bullshit. Cisco uses a lot of FOSS in their firmware, so their "high-end" stuff isn't necessarily more secure (we're talking about security not features). A lot of their "features" are just making people (admin) lives easier. I really don't think their is a concerted effort to compete with these enterprise products, it just occurs naturally at certain times and areas. Your post is all over the place.

    3. Re:Potential by unixisc · · Score: 4, Insightful

      How? By not using monolithic kernels that support every device in creation, and stripping the kernel down to what is installed on the system -- especially with things like IOT devices. If it isn't installed, it doesn't need patched, it can't break, and it can't be exploited.

      Huh? Linux is a monolithic kernel, and Linus is emphatically opposed to it being anything else. If any IoT vendor wants to use a microkernel based OS, they should look at Minix instead.

      Router makers should use well known router distros of Linux or BSD, such as DD-WRT, OpenWRT or pFsense, instead of spinning their own. And let those organizations remote-manage them in exchange for a deal.

    4. Re:Potential by Anonymous Coward · · Score: 0

      How? By not using monolithic kernels that support every device in creation, and stripping the kernel down to what is installed on the system -- especially with things like IOT devices. If it isn't installed, it doesn't need patched, it can't break, and it can't be exploited.

      Over the years I've seen a number of similar claims with no explanation of underlying basis why this should make any difference.

      If the device is not present the associated kernel module is not loaded and neither is the associated code so who cares if it exists or not? Nothing prevents monolithic kernels from being modular.

      Take a look at many of the Linux-based router firmwares out there, both sold by commercial vendors and FOSS projects, and you'll see attempts to compete with high-end Cisco feature sets for home or small business use.

      Having that available is great! However, turning all of that on by default, and user thinking they should get something not because it suits their needs but because it supports 10,000 features, gets you a complex, insecure mess.

      Could you name something that turns 10,000 features on by default? This is far from my experience with Linux based networking gear. Most subsystems require configuration before they will even work at all.

      I've seen way to many Linux-based routers and gadgets that are exposed to a network and still have default admin passwords to blame "Linux" for security headaches.

      Most "router gadgets" disallow configuration from their "wan" interface by default even if there is a default or insecure password. The point of configuration vulnerability is generally CSRF based attack from unwitting internal users.

      Linux gives you the ability to shape much of your own system, including making it much more secure than a run-of-the-mill device. Whether or not you take the time and effort to do that is up to you.

      What does this even mean? Are you stating any objectively useful information? Given you don't know the threats, you don't know the system, you don't even know what "run-of-the-mill" device is supposed to represent yet somehow you are able to draw strong "e.g. much more secure" conclusions.

    5. Re:Potential by Anonymous Coward · · Score: 0

      Huh? Linux is a monolithic kernel

      It's not "monolithic" when it dynamically loads in more of itself at runtime, in the form of modules, as Linux is often configured.

      But you can also build a "monolithic" statically-linked kernel, specifically for your hardware, that does not load modules at runtime.

      The latter is clearly much more secure.

    6. Re:Potential by Tony+Isaac · · Score: 1

      Actually, with Windows 10 you can remove these features, by downgrading to Windows 10 s.

      So yes, if you take away all the functionality people want, you certainly do end up with a more secure system!

    7. Re:Potential by Anonymous Coward · · Score: 0

      Why downgrade when you can upgrade, permanently. To Linux - I have in mind a decent distro like Mint of course. :)
      No system is perfect. I've done things on a C2 certified *nix system that the book said you cannot achieve. If its made by people, it can be broken or bypassed.
      What IS missing out there is a good, trustworthy resource on hardening your system - whwther Windows, Mac or Linux. It also needs to be kept up to date. Google searches nowadays just spew up pages decade-old garbage.

    8. Re:Potential by houghi · · Score: 1

      How? By not using monolithic kernels that support every device in creation, and stripping the kernel down to what is installed on the system -- especially with things like IOT devices. If it isn't installed, it doesn't need patched, it can't break, and it can't be exploited.

      I agree. I am not a router or IoT developer. I just do a home install and when I do the Install of Debian, I like to do the not so automated install. There I am asked if I want a minimal kernel or not. All nice, but it also advices to NOT do the minimal install, as that could mean that some things might not work.

      So people who have not that much knowledge are guided to use the less secure option.

      I agree that people who make their money with hardware should be able to do this. I also want to point out that distro's should change the default of 'everything and the kitchen sink' as a default.

      One of the things that I hate is all that is installed, even when I do not have a printer. Almost impossible not to suddenly get asked to install some HP-printer stuff, because it is needed for something else.

      --
      Don't fight for your country, if your country does not fight for you.
    9. Re:Potential by AmiMoJo · · Score: 1

      Buffalo make routers that run a version of DD-WRT, and you can easily (through the normal upgrade interface) load official DD-WRT builds.

      OnePlus tried to farm out OS updates to Cyanogen on their first phone. It didn't work very well, updates were delayed and eventually support was dropped anyway. Unfortunately this is the commercial reality we have to deal with, and even DD-WRT isn't guaranteed to be updated for your old hardware forever.

      I view routers are consumable. Eventually they get too old. Either too slow for my new, faster internet connection, or the software (usually DD-WRT or Tomato) isn't well supported any more.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    10. Re:Potential by chill · · Score: 1

      Mea culpa, I used the term incorrectly. I was not intending to reference microkernels, but rather the inclusion of LKMs and associated drivers and firmware for hardware that does not exist on the system.

      Another big frustration of mine is improper software dependencies. Several years ago I was trying to remove packages from a Debian system to see how slim I could get it. By attempting to remove one package at a time, I'd get warnings about what depended on various packages, and thus could determine their importance.

      I gave up in disgust when attempting to remove "aalib" -- the ASCII art library -- and the chain of dependencies would have rendered the system unusable by uninstalling almost 90% of the system.

      I operate on the idea that reducing attack surface is good. Misconfigurations are a big source of security problems. If it doesn't exist, it can't contain an error, can't be broken, can't be abused or exploited, and isn't ever going to cause you a problem.

      --
      Learning HOW to think is more important than learning WHAT to think.
    11. Re:Potential by unixisc · · Score: 1

      Router distros should have whitelists of the websites they wanna allow. When one configures them, one should have the capability of adding sites that ain't already there. That saves one from the default allow all, and allows one to drop all but whitelisted sites.

    12. Re:Potential by unixisc · · Score: 1

      What exactly is the scope of 'support' i.e. why would a router need to be updated forever? All it has to do is pass or drop packets, and follow routing algorithms while managing internet traffic. The former can be managed w/ Whitelists, which I suggested in the above post could be user configurable to include just the sites s/he visits. So for the latter, are there changes frequently happening to routing protocols like OSFP, or EIGRP or others that change from distro to distro? And if yes, what does that affect - their performance? Like if the routing protocol weren't updated, would it actually slow down a router?

  20. Bad Assumption by Zero__Kelvin · · Score: 1, Insightful

    They have no idea what I think.

    --
    Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    1. Re:Bad Assumption by Anonymous Coward · · Score: 0

      They don't care what I think.

      FTFY

  21. Yes, it is by Anonymous Coward · · Score: 0

    Between Drepper & Pottering, I didn't think it was safe in the first place.

  22. Re: FINALLY!! by Anonymous Coward · · Score: 1

    He said "like the whigs did". The Democratic-Republicans opposed the Whigs. If the Democrats fell apart like that, the two parties would be one based on the more popular parts of Republicans and Democrats combined, and another based on the core of the Republicans.

    Nothing about that makes a one party system. Our election system guarantees two parties, by game theory. Not one, not three.

  23. Linux is a kernel ... by Murdoch5 · · Score: 4, Interesting

    Almost all the major infections, back-doors and security problems are the result of the userland, improper implementation of the kernel, bad firmwares, lack of security knowledge, improper development, sloppy implementation and etc... etc... etc..

    To say Linux is more insecure then Windows, means that the kernel, as released by Linus, and nothing else, is insecure. Well some security issues are discovered residing in the kernel, almost all other attacks and vectors have nothing to do with the base release kernel.

    1. Re:Linux is a kernel ... by Bing+Tsher+E · · Score: 1

      And Windows 10 is a DVD-ROM.

      I mean, I can't see how anybody is going to penetrate my Windows 10 DVD-ROM disk, it's hard and plastic and pretty thin. Since that's the sum and whole of Windows 10, I am safe, just like the Linux kernel is safe, especially if it's kept safely housed in a tarball.

    2. Re:Linux is a kernel ... by Anonymous Coward · · Score: 1

      There's a hole in the middle :)

    3. Re:Linux is a kernel ... by Anonymous Coward · · Score: 1

      Why does MS call it Windows? Because it's like an actual window... it leaks like a $5 hooker and anyone can see what you're doing.

    4. Re:Linux is a kernel ... by cowwoc2001 · · Score: 2

      That is nonsense.

      No user runs a kernel on its own. This sounds like a double-standard. Linux should be held up to the same standards as all other operating systems.

    5. Re:Linux is a kernel ... by JasterBobaMereel · · Score: 1

      There are currently ~8 supported distributions of Windows, all of the are very similar and mostly have the same issues

      There are probably a near infinite Linux Distributions... DistroWatch lists the top 292 ...and each of these have variants ...Most IoT systems run a custom build ...

      --
      Puteulanus fenestra mortis
    6. Re:Linux is a kernel ... by Anonymous Coward · · Score: 0

      How many windows versions when you include the software usually installed? Nearly infinite? But probably less nearly infinite than Linux because there are fewer 800lb gorilla applications you must have in Linux, therefore more personal preference doing the choosing.

    7. Re:Linux is a kernel ... by Murdoch5 · · Score: 1

      If I build a software project/module that does job X, and you use it, expand it, modify it so it works in your application and your application gets hacked, unless you can point to the original fault in my X, you don't get to claim that my project/module was insecure.

    8. Re:Linux is a kernel ... by cowwoc2001 · · Score: 1

      Take a look at security-related articles. They rarely quote the underlying problem. More often they mention the customer-facing product that has a flaw. For example, when Windows Media Player has a bug Journalists headline with "Yet another Windows security hole". Linux is no different.

    9. Re:Linux is a kernel ... by Murdoch5 · · Score: 1

      Ignorance of reporting doesn't move the fault. If a report claims a bug exists in Linux, but the bug actually exists in the GNU userland, that doesn't all of a sudden mean the kernel is at fault. This is why it's important to read the CVE and follow reported flaws and bugs to find out what the exact issue actually is.

    10. Re:Linux is a kernel ... by Anonymous Coward · · Score: 0

      Likewise, to say that Windows is less secure than Linux is the same argument you pedantic little shithead. You are the reason the Linux community can't have nice things like any goddamned consistency or graphics drivers that don't require a compiler to install.

  24. Routers and IOT? by markdavis · · Score: 5, Insightful

    Please compare apples to apples...

    >"At the end of November, criminals with other variants of the same Linux malware unleashed devastating attacks against DSL routers of Telekom customers. 900,000 devices were "

    How many routers run MS-Windows?

    > "Other Linux malware, such as the Tsunami backdoor, has been causing trouble for several years now and can be easily modified for attacks against IoT devices."

    How many IOT devices run MS-Windows?

    Routers and IOT devices are notorious about having crappy firmware with Linuxes that are hacked up and rarely (or sometimes never) updated. Comparing those to desktops and servers is much less a function of the security of Linux and more about the lack of maintenance and updates with the unusual role of the devices.

    Sure, *ALL* operating systems have security risks and vulnerabilities. Anyone that thinks Linux (or any OS) is impervious to malware and safe needs to have their head examined. But the sensationalistic article title isn't really comparing machines of the same class, so it doesn't do the topic much justice.

    1. Re:Routers and IOT? by Skuld-Chan · · Score: 0

      > How many IOT devices run MS-Windows?

      Quite a lot actually:

      https://www.microsoft.com/en-u...

    2. Re:Routers and IOT? by unixisc · · Score: 1

      That may be something Microsoft wants, but it has about as much market presence as Windows NT on RISC did, back in the day. They have this stupid 'one size fits all' meme that has not gone away w/ Ballmer, and it shows. They tried it b/w their PCs & phones, and damaged both. Now they want IoT devices to run w/ their stuff, after they've discontinued their phone line (instead of leaving it w/ Nokia in the first place).

      One good platform for an IoT would have been Windows 8 RT w/ Metro, but w/o the desktop. That is something that ATMs, for instance, could have used. Strip out any backward compatibility code for software (not drivers), but leave everything else in.

    3. Re:Routers and IOT? by Anonymous Coward · · Score: 0

      Yeah, Tsunami is a Linux problem. It's an attack on a specific model of internet-enabled security camera which runs a webserver with an SQL injection flaw as root. But that's a linux problem, according to the article. Meh.

    4. Re:Routers and IOT? by thegarbz · · Score: 1

      The no true Linux fallacy.

  25. How safe did you think I thought Linux was? by Anonymous Coward · · Score: 0

    Unless I've already announced what I think, having a headline that ends with "as you think" is kind of presumptuous, don't you think?

  26. Flawed study, is flawed. by geekmux · · Score: 4, Insightful

    "...unleashed devastating attacks against DSL routers of Telekom customers. 900,000 devices were taken down."

    Linux. You keep using that word. I do not think it means what you think it means.

    It's a absolute joke to lump in devices that most people who who actually use Linux would define as one fucking step above the Internet of Shitty Things from a security perspective.

  27. And how much of that is due to... by IWantMoreSpamPlease · · Score: 4, Funny

    SystemD?

    --
    So rise up, all ye lost ones, as one, we'll claw the clouds.
    1. Re:And how much of that is due to... by MSG · · Score: 1

      None, of course.

    2. Re:And how much of that is due to... by hvidstue · · Score: 1

      Yay, SystemD is finally safe!

    3. Re:And how much of that is due to... by Anonymous Coward · · Score: 5, Funny

      0.0%, notabug, wontfix.

  28. BetaNews, that sounds pretty beta. by Anonymous Coward · · Score: 0

    Alpha coders modify the source code of their OS.

  29. No, thanks by Anonymous Coward · · Score: 0

    Linux is exactly as safe as I think it is.

  30. We're better than you. by Anonymous Coward · · Score: 0

    Let us not forget that it is easier to find a vulnerability with open source too; Microsoft largely uses closed source code.

    Code visibility is only a SMALL part of finding a problem and fixing it. Understanding the code base and coding in general, as well as domain knowledge is a much bigger part. That's why "more eyes" doesn't make something better.

    1. Re:We're better than you. by Anonymous Coward · · Score: 0

      Unix philosophy is at play here too. Lots of small utilities rather than huge complex code bases.

  31. Percentage is meaningless. by AJWM · · Score: 1

    Going from 1 threat to 3 is a 300% increase. Going from 1000 to 999 is a decrease. (Numbers arbitrary)

    Guess which one I'd prefer?

    --
    -- Alastair
  32. Microsoft shilling on my Slashdot? by Gravis+Zero · · Score: 0

    Did they forget to tag this "advertisement"? ;)

    --
    Anons need not reply. Questions end with a question mark.
  33. It's not Linux stupid by humankind · · Score: 1

    The "increases in security issues" are not related to Linux. They are related to third-party systems which run on top of Linux. This is in stark contrast to the never ending array of vulnerabilities that are essential parts of the Windows operating system.

    Apples and Oranges.

    1. Re: It's not Linux stupid by KGIII · · Score: 1

      That's rather disingenuous. Without the applications, the Linux kernel is also pretty much useless. There are surpringly few security flaws, known, in the Windows kernel. The Linux kernel is much the same. Like Linux, Windows is pretty useless without apps.

      --
      "So long and thanks for all the fish."
  34. three times by MSG · · Score: 4, Informative

    This is a silly write up. There are three times more malware programs targeting Linux systems. That tells us nothing about the number of Linux vulnerabilities, or the number of vulnerable systems, or the general security of the system.

    1. Re:three times by gumbi+west · · Score: 1

      Right? I concluded that Linux is exactly as safe as I thought it was.

    2. Re:three times by guruevi · · Score: 1

      I was about to comment the same thing, this is about the attack surface against primarily IoT devices that run minimal versions of older (think pre-XP era) kernels.

      It doesn't say anything about the overall success rate of these attacks. Given 90+% of devices is not Windows these days (the myth that Windows is more commonly used so it had more people trying to attack it is now thoroughly debunked) I would imagine the attempts to hack old Linux machines would increase. And even so, the most common hacks on these IoT devices is NOT Linux, the kernel, it's some shitty web app they put on top of it.

      --
      Custom electronics and digital signage for your business: www.evcircuits.com
  35. is Fagioli like Ravioli by Anonymous Coward · · Score: 0

    for homosexuals?

    (extra saucy)

  36. Re:Why Not Look at the Data? by arth1 · · Score: 2

    Linux[Redhat[1,537]/Debian[1,120]...2,657 total]

    You can't just add them up. Many, if not most, will be the same vulnerabilities.

    Red Hat gets a few more because of their long life cycles: 10 years, plus a few years more if paying for extended life cycle support, compared to Debian LTS being five years plus however many months to match the next LTS release.
    That means more risk of old software bugs being discovered and patched in Red Hat. Which is not a bad thing.

  37. When everything not called desktop PC uses it... by Z80a · · Score: 1

    Some ought to try to exploit the system.

  38. People who start the comment in the subject box ar by Anonymous Coward · · Score: 1

    e retards.

  39. The term is "secure", not "safe" by gweihir · · Score: 2

    So, first indicator for incompetence already present: Author does not even know basic terminology. Second thing is that Linux is not inherently more secure than, say, Windows, but the mind-set of application developers is better and it is far easier to secure. It is also easy to make completely insecure, but a competent person will find it far easier to have a secure Linux installation than with the competition, because Linux gives you access and allows you to do things, while with, say Windows or OSX you are pretty much at the mercy of the OS vendor.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    1. Re:The term is "secure", not "safe" by Anonymous Coward · · Score: 0

      The trick there is its not actually a either / OR situation. Its more like a Venn diagram.

      Linux giving you access and allowing you do do things only works from a security posture perspective if you are smarter than the commercial OS vendor at configuring an operating system securely, AND still being able to get your work done. That is is objectively true, but only for a vanishingly small fraction of the human population.

      The commercial operating system vendor being more secure only works when a) the commercial vendor's security team is smarter than you (true for most people), AND b) the commercial vendor's marketing team is smarter than you when it comes to security (more likely to be not true for a much larger number of customers).

      Basically you can end up with a situation that both alternative are more secure than the other, just in different contexts.

    2. Re:The term is "secure", not "safe" by phorm · · Score: 1

      My 2c on this.

      I use both Windows and Linux systems. First things first I say this: it doesn't matter how strong your OS is if you don't take care of your apps. Over the last several years, a consistent source of vulnerabilities has been either Flash or Java, with issues for either coming out pretty much monthly if not weekly. With that also comes a trickle-down to some other common applications such as jBoss, Tomcat, etc.
      *Thankfully* we're seeing a decline in flash-based UI's, but I still see some vendors using them even with more recent products.

      Not back to Windows VS Linux. There is of course the argument that Linux really is the kernel, but for sake of sanity I'll include the common userland stuff in there because, frankly, a kernel is not useful without something to run on it. So let's say your shit has a vulnerability, whether it be a kernel issue or a buffer overflow in Apache/Samba.
      In windows-land, you are unable to test this except for black-box style. You're also generally at the mercy of the OS vendor to provide a timely fix, and not to include something bad in their regular patches. Sometimes these patches are also pretty light on the details so as to not provide hackers info.

      So what does this mean in general: Windows systems are generally at the mercy of MS to keep secure, and frankly some of their recent shenanigans (win10 auto/nagging upgrade patch, telemetry patch) has people on edge about accepting patches. End result: unpatched, unaudited systems which are vulnerable

      BUT, to assume that this means Linux is Fort Knox is foolish. There's the regular stream of application patches, kernel vulnerabilities come out regularly, and baseline libs also run into issues. The part I like is that if my application has an issue, then I can either
      a) Wait for the distro vendor to supply a patched version
      b) Possibly replace the binary with a fixed version from a third party
      c) Patch and/or recompile myself

      There's also the issue of *what* you need to patch. While many people use the distro-supplied kernels, it is pretty easy to roll your own (start with the distro options, uncheck boxes, compile). That allows you to remove stuff you don't need, which tweaks performance *AND* remove stuff that might actually lead to a vulnerability.

      The end result is that while Windows and Linux both have security issues, a smart sysadmin has more tools at his/her disposal to secure a Linux distro. However, keep in mind that in windows-land one often also has more options to obtain professional/paid third-party advisement or support in securing systems.

      Newer windows are definitely better than their predecessors, at least in part due to the former versions have more of a local-privilege focussed security model. It's arguable that Linux is getting worse in some ways (systemD). I guess we'll see where we are a few years from now

    3. Re:The term is "secure", not "safe" by gweihir · · Score: 1

      Quite true. You can also use Linux distributions that are made to be extra secure (and have some downsides because of that, like worse functionality and missing software), because the "vendor" does not prevent anybody from creating and sharing such distributions. For Windows, you have to install first and then harden individually, making this an expensive process.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  40. Re:FINALLY!! by MightyMartian · · Score: 5, Insightful

    A router running an OS that probably hasn't been patched in years, thus containing multiple vulnerabilities long ago patched, is hardly the same thing as an OS full of holes. That's like condemning Windows because of unpatched vulnerabilities in Windows XP and Vista.

    Here's a tip. Don't buy shitty routers running years' old firmware, and expect that somehow the magic update faerie is going to make the vulnerabilities go away.

    --
    The world's burning. Moped Jesus spotted on I50. Details at 11.
  41. Re:Z840 ZC2.4 W7P64 by jimtheowl · · Score: 1

    "I never turn it off 30 July 2014 12:21:54 AM"

    Ever heard of a command called 'uptime' ?

  42. no suprise here by Anonymous Coward · · Score: 0

    The amount of people who have said Windows is insecure and fail to realize that only NOW that Linux is getting increased focus because of Cloud, suprise!.. Guess what it's got just as many bugs as Windows.

    Maybe they will eat some humble pie.

  43. I did a fresh install of Sabayon by Anonymous Coward · · Score: 0

    Within 2 mins my mouse too off by itself, F someones in my system.
    Pulled the network reformat install hmm whats the latest Mint.

  44. Re:FINALLY!! by skids · · Score: 2

    Not to mention many of the holes are in vendor add-on software, not in Linux itself.

    There's something to be said about year's old firmware, however. For a device like a router, turning off all unnecessary services, closing everything off and then opening things as needed, and only patching security vulnerabilities... never upgrading anything unless you have to to get the security fix... is actually a good strategy. On commercial routers what you do is stay current on an old release chain.

    This is because a very large proportion of bugs are introduced with new features, and you'll never be exposed to them if you never install that feature... meanwhile security on average do increase your security, believe it or not. So the most secure systems end up being the older codebases with up to date security backport patches.

    Lately Linux has been dinged a lot for privilege escalation bugs. These are mostly secondary vectors that rely on another vulnerability in a service or client to get on the system in the first place. As transit devices, routers have very low surface area in these categories, if you take care to turn off the crap.

  45. Yoe mean modular by Anonymous Coward · · Score: 2, Informative

    The term "monolithic kernel" doesn't mean modules are statically linked. It means that the kernel contains the full interface to hardware in kernel space. In a microkernel architecture kernel space is used for less, device drivers, file systems etc. operate in user space.

    The Linux kernel is modular and monolithic. The modular nature makes it possible to remove parts that aren't needed, but those parts still run in kernel space.

  46. Amazing what you can hide behind words by Anonymous Coward · · Score: 0

    Would you be surprised if I told you that threat methods for Linux increased an astonishing 300 percent in 2016, while Microsoft's operating systems saw a decrease?

    1 + 3 = 4. Gasp, that's 300% more!
    1,000,000 - 1 = 999,999. Gasp, a decrease!

    Fuzzy wording doesn't change the fact that you're far, far more vulnerable if you're running Windows.

  47. Re:FINALLY!! by MrLint · · Score: 2

    You mean like this?
    ITwire still faults Microsoft for not planning ahead, since in February 150 million people were still using Windows XP.
    https://www.itwire.com/open-sa...

  48. Re: Ah, the PRICE of fame (always the same)... apk by Anonymous Coward · · Score: 0

    Time to talk to your doctor about increasing your meds again.

  49. Auditing by Anonymous Coward · · Score: 0

    Do you honestly believe that that hundreds of thousands of lines of code in a standard Linux distribution have been properly vetted with a second pair of eyes?

    Do you truly believe that custom packages, necessary for some business application are all coded with best practices?

    Linux and open source is a wonderful idea. We just need the community to be more active. Where is the incentive other that "to make a difference and learn"?

  50. Like systemd which is the future? by Anonymous Coward · · Score: 0

    Linux has jumped the shark with systemd.

  51. What, went from 1 threat to 3? by Anonymous Coward · · Score: 0

    Oh ... right.

  52. What is more secure? by Anonymous Coward · · Score: 0

    A Windows system run by a competent administrator?

    or

    A Linux system run by an incompetent administrator?

    Wait a minute, that's the same administrator!

  53. Re:Z840 ZC2.4 W7P64 by pigsycyberbully · · Score: 0

    "I never turn it off 30 July 2014 12:21:54 AM"

    Ever heard of a command called 'uptime' ?

    uptime -p

  54. Re:Ah, the PRICE of fame (always the same)... apk by Bert64 · · Score: 5, Interesting

    Linux has been attacked for years, there have been rootkits and exploits out there since the early days of slackware... Linux has had a significant presence on servers almost since its inception, and is now starting to make inroads in many other markets.

    On the other hand, what people think of as "linux" in this context is a multitude of different versions of the linux kernel with various modifications and all manner of different userlands running on top. Literally anyone can build a linux-based system and pile whatever garbage software they like on top of an ancient version of the kernel.
    Windows on the other hand comes from one place, in a small set of versions, and all of the vulnerabilities attributed to windows are present in this version and usually in a default configuration.

    Microsoft fully control the versions of windows being released, and if a third party produces a device that bundles a windows install but has some additional vulnerable software running on top of it or a stupid default configuration (eg default passwords) that vulnerability is blamed on the device vendor and not on windows.

    There are no shortage of such devices, and they routinely get compromised not only due to their own poor configuration but also because of vulnerabilities in windows itself (eg eternalblue).

    When it comes to embedded devices, Linux is massively more widespread than windows, most people are likely to have more linux devices than windows and usually don't even realise it, only a subset of these devices are getting compromised because the manufacturers of those devices make stupid mistakes when building them and then fail to either provide updates, or provide a user-friendly way to apply them.

    --
    http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  55. Linux is a kernel..... by Anonymous Coward · · Score: 1

    Could we please stop referring to it as an operating system? Of cause all the Linux/GNU/etc distributions that shove every beta/alpha software into their distributions are unsafe. There is no way to secure millions of lines of new code. Look at an seasoned distro (who does not use avahi/wayland/systemd/other crap code.) and you will se a much securer OS which has actually had a DECREASE in vulnerabilities.

  56. Technically speaking... by campuscodi · · Score: 1

    Technically speaking, the data is skewed by malware numbers for IoT devices. Actual Linux boxes may be quite secure if you don't strip them down to a few libraries like the OS versions that ship with IOT crap.

  57. "Let us not forget that it is easier to find... by Anonymous Coward · · Score: 0

    ...a vulnerability with open source too; Microsoft largely uses closed source code."
    You got a study to back this up? Because from what i can understand with many of the current methods it won't make a damn difference.

  58. Some kind of police state I am sure by Anonymous Coward · · Score: 0

    I hold the belief that most western countries (I live somewhere in Europe), the ones that want to show pride that they defend and laud democracy, are a modern variant of the police state. Perhaps most clearly when a norwegian military commander is added to some news article, and so gets to have his soap box to speak from, saying that they aren't interested in normal people, as if that made things ok, to say perform mass surveillance, and mass monitoring, which I am sure they do, as they please.

    So for computer security, what a shit show. Both governments and businesses, and technologists (my impression anyway), are content living in this world of what seems to be a world of mediocrity as far as computer security goes, and the privacy needs of individuals seem to be a non existent topic. It is like the world is so to speak feeding on the insecurity of things, for money and power.

    I don't trust my OS, not my browser, not my bios/uefi, not my hardware drivers, not my graphics driver, not my email software. Being driven from one terrible outlook, to the next. Terrible!

    1. Re: Some kind of police state I am sure by KGIII · · Score: 1

      > one terrible outlook, to the next.

      See? You should use Thunderbird.

      --
      "So long and thanks for all the fish."
  59. Re:FINALLY!! by The123king · · Score: 2

    So you'd like a potentially exploitable version of the router software burned into an unpatchable ROM.

    I'd agree with you if you wanted to go for user replaceable ROM. Still doesn't stop RAM resident malware. Sure, a restart would work, but that's usually only done when the wifi drops out.

    --
    If you gave me a choice between a printer and a giraffe with explosive diarrhoea, i'll get my ladder and my raincoat
  60. Re:FINALLY!! by The123king · · Score: 1

    Is it Microsoft's fault for making such a good product, people still want to use it 15 years after release and 2 years after support has ended? It's rare to see something so beloved come from Redmond. It's probably second only to 7 with Hotmail trailing in 3rd

    --
    If you gave me a choice between a printer and a giraffe with explosive diarrhoea, i'll get my ladder and my raincoat
  61. Linux is a kernel. by Anonymous Coward · · Score: 0

    Linux is an operating system.

    No, Linux is a kernel.

    1. Re:Linux is a kernel. by Anonymous Coward · · Score: 0

      >> Linux is an operating system.

      > No, Linux is a kernel.

      https://en.wikipedia.org/wiki/Synecdoche and https://en.wikipedia.org/wiki/Metonymy

      I would tell you to learn English, but then that figure of speech is present on many languages (as it is a semantic trait, I believe).

      For me, Linux is, among other things:

      a) a kernel;
      b) an OS;
      c) a kind of OS (a subtype of Unix, as I see), which encompasses things like Android.

      In your very limited definition, either Windows 98 or Windows 7 is not Windows -- and also not Windows CE.

      Nitpicking is one thing, this what you do is not even trolling: it just makes you look dumb. If you by any chance find such behavior has comedic value, then it's alright, I suppose.

    2. Re: Linux is a kernel. by Brockmire · · Score: 1

      No, you're flat out wrong. Just because you misunderstand something, doesn't mean it has dual meaning, it just means you're wrong. But go ahead and argue with Linus Torvalds, who has made this distinction specific to kernel, not OS.

  62. Re:FINALLY!! by SadOldTechie · · Score: 1

    "such a good product"? In usability terms yes, it was great and still is. As a measure of "good", however, usability is not the only one I pay my money for. I tend to include security alongside it with the same weighting. Oh, Linux is winning now by my scoring. Surprise.

    Couple this with the fact that the only reason the world is using is it in such volume is good marketing and grotesque hog-tie deals with manufacturers leaving the consumer no other choice.

    Let's be careful with "good" and not devalue it, please.

  63. Lennyboi to the rescue! by Anonymous Coward · · Score: 0

    Good thing that Lennyboi and his Shitstemd will unify the distros, removing the petty differences between them with one huge reinvented monolithic wheel, while at the same time refuse to fix privilege escalation bugs. 300%? Try 30000% in the next few years.

  64. two kinds of company by Reverend+Green · · Score: 2

    There are two kinds of company: those who know their servers have been compromised, and those who don't know.

    (We used to say this in the security group at a big company in New York that almost certainly has better security than your company.)

  65. No, I wouldn't be at all surprised. by Anonymous Coward · · Score: 0

    This sort of BS mathturbatory statistics has long been used to fake problems where there are none really there at all.

    Like there is zero risk you will have a trojan sitting on your computer leaking personal information. It's a certainty. It's a demanded part of the OS now. No risk there at all, only certainty.

    Sound correct? Yeah, not much. Because I've not placed the nuance and detail necessary to make the correct result call.

  66. Loonix is shit by Anonymous Coward · · Score: 0

    It's shit and it has always been shit. Just like it will always be shit. It's shitty shit, and if it would be any shittier, its shit would shit its own shit. Shit.

  67. Re:FINALLY!! by Anonymous Coward · · Score: 2, Interesting

    It's not that XP is a good product, it's that it was followed by Vista, and having learned from that fiasco, people avoided Windows 7 until it was proven that it wasn't simply another Vista.

    Unfortunately, just as people were starting to plan the switch to Windows 7, Microsoft started promising that Windows 9 would be much better, and people decided to wait.

    Then when people saw that Windows 10 was another fiasco, and started considering Windows 7 once more, Microsoft started forcing Windows 10 upon Windows 7 users, and decided that XP was the safer choice.

    Is Windows XP really less secure than any of it's successors, if you consider all the people who came home to find Windows 10 installed without their consent as malware attacks, along with all the spyware in Windows 10?

  68. Uh puhleeze by mdhoover · · Score: 2

    Anyone can easily reduce the attack surface of the linux instances you choose to deploy by simply
    a) only compiling in the drivers/kernel features required
    b) only installing just enough in userspace to do the job, and
    c) running shit with least privilege

    Not so easy with windows...

    The fact so much cheap crap out there was pushed out by manufacturers that give zero fucks towards basically securing their provided OS is not a reflection on the kernel/OS as a whole.

  69. Re:FINALLY!! by Anonymous Coward · · Score: 0

    Mine may be shit, but I see no reason to improve it, because at least it isn't the alternative.
    2016 U.S. Presidential Election.

  70. thats cause MS IS THE MALWARE by Anonymous Coward · · Score: 0

    good lord how do i stop coming to this retarded site

    and if an os gets more use , guess what.....more chances it will get exploited

  71. what? by Anonymous Coward · · Score: 0

    the OP poster did noit say removing functionality he said removing stuff that is not part of your system

    WHY do i need ever video driver locally , why every hardware why do i need all this other fluff ms gives me i never use ..lets take a gamer and you get the hint..and i'll say it there are probably about 30-40% of the ms users that would drop it in a heart beat if there favorite game was made in linux and worked great

  72. Ummm.... by MerlTurkin · · Score: 1

    It's much safer than Windows. 'Nuff said.

  73. Windows is an OS by thegarbz · · Score: 1

    We'll stop lumping userland issues with Linux when everyone else stops lumping idiot users executing randsomware and then clicking the yes box in the UAC prompt in with Windows.

    1. Re:Windows is an OS by Murdoch5 · · Score: 1

      An outstanding demonstration of ignorance :)

      Windows comes prebuilt with its own userland and application land management area, which means that Micrsoft, the creator of Windows, is responsible for it. They're responsible in the same manner that Linux kernel developers are responsible when an issue is found existing in base kernel code, which I pointed out in my post.

  74. Re:Time for you to take your own advice by Anonymous Coward · · Score: 0

    How about you go choke down some elephant cock, we all know you love it.

  75. When you cliick on mail links, they do not run by Anonymous Coward · · Score: 1

    When you cliick on mail links, they do not run.

    That by itself is why Linux has avoids the main entry point that Microsoft refuses to close.

  76. "many people" by Anonymous Coward · · Score: 0

    "There is a notion by many people that Linux-based operating systems are impervious to malware and are 100 percent safe."

    I'm sure many people stopped reading right there.

  77. Nothing new. by Anonymous Coward · · Score: 0

    This is been a trend for a wile now. Mac and Linux have ranked higher then Microsoft in vulnerabilities for a few years now. But Mac and Linux don't get...

  78. Breaking news !!!! by cjjjer · · Score: 1

    Life is not as safe as you think!! News at 11...

  79. Re:The PRICE of fame = $0 (keeps costs down) by Anonymous Coward · · Score: 0

    You really should stay off the internet when not lucid as you just make yourself look foolish. Also I thought you were off seeking treatment for your moose wang addiction.

  80. Re:FINALLY!! by Gr8Apes · · Score: 1

    I personally would love to see the Tea party split off, and then the moderate centrist Republicans and Democrats create a new party, and the liberal left fold into its own party. with 2 or 3 centrist parties, we might finally get to a point where we have reasonable politics again, and a big error like Trump would not happen again.

    --
    The cesspool just got a check and balance.
  81. I blame Systemd by JustNiz · · Score: 1

    Its a turd and I keep finding bugs in it and relatively obvious ways to break it. Apparently no one writing systemd actually tests their code before checking it in.

  82. Re:FINALLY!! by Gr8Apes · · Score: 1

    For a device like a router, turning off all unnecessary services, closing everything off and then opening things as needed, and only patching security vulnerabilities...

    Is actually the correct answer for any device. Services that you don't need, like about 80% of those on a windows box, are just additional vectors begging for an incursion. Even XP can be locked down pretty tight to about 8 services. In that mode, and not running any MS applications, you're actually relatively secure for a windows system. But MS is about everything and the kitchen sink, now enforced in Win10, along with a forced new feature acceptance schedule. That's the opposite of being able to secure your system.

    --
    The cesspool just got a check and balance.
  83. Re:Ah, the PRICE of fame (always the same)... apk by Anonymous Coward · · Score: 0

    Live distros with no saved sessions [or saved in my own cloud]. I dare you to compromise my machine.

  84. What will APK do next by Anonymous Coward · · Score: 0

    Look everyone APK is off on one of his nonsensical rants again. Now for one of the following responses from him:
    A. Pissing and moaning about AC posts while he posts as AC as well
    B. Fantasies about being in a movie
    C. Quoting people out of context
    D. Spouting off about how he was featured in a late 90s windows shovelware magazine
    E. Replying as other ACs to support himself
    F. Spamming the same drivel multiple times
    G. Reliving his "glory days" from 1995
    H. Making antisemitic posts
    I. Petty name calling
    J. Threats of harm
    K. Mindless swearing
    L. Linking to previous nonsense comments of his

    I believe that covers all of it, so what will APK choose this time?

  85. Major drawback of open source by Anonymous Coward · · Score: 0

    anyone can find flaws to exploit.

  86. GNU/Linux firewall by Anonymous Coward · · Score: 0

    GNU/Linux firewall

    GNU/Linux has the advantage of a flexible and solid firewall. If the firewall is properly used, there is no excuse for a breach to occur.

    However wifi modems and other network devices are not as user friendly as a GNU/Linux system. We realize that Linux drives many modem devices. A user controlled firewall in a modem is essential to keep bad actors from penetrating our networks.

    Manufacturers need to make network devices more accessible to the user over an ASCII console interface so we can implement Linux firewalls on them. Let's constrict the backdoors in our network devices through our user controlled firewalls.

    And by all means possible, let us prevent SystemD from taking over our network devices, and allowing the world in through SystemD's login.

  87. Not news but propaganda by strikethree · · Score: 1

    This is not a news article, it is a propaganda piece. It is written with the angle of getting certain sequences of word to be read by the largest number of people possible.

    The summary starts out using a term that I have never heard before and I work in that specific industry. In specific, what is the term "threat methods"? Each word is sensible and combined they are also deceptively sensible. They are measuring "threat methods" but do not give a definition for what they are measuring so we can determine the accuracy of the statement. They then go on to say that a Microsoft based operating system has seen a decline in these "threat methods" while Linux has seen an increase of them.

    The article writer has not even defined what is being measured here. How can such claims be of "seeing an increase" or "seeing a decrease" be validated if there is no definition of what "threat methods" are?

    Why are most "news" articles of the same nature? They seem like they are saying something but when investigation occurs, it all disappears like fog on a Sunday morning; however, some incredible claims are made based on this "fog".

    TL;DR This is a puff piece designed to make you fearful of using Linux and supporting your decision to use a Microsoft product instead. Nothing more.

    --
    "Someone needs to talk to the tree of liberty about its ghoulish drinking problem." by ohnocitizen
    1. Re: Not news but propaganda by KGIII · · Score: 1

      I used to be involved in computer security, but then I hired capable people. I still made an effort to learn more, and have gone to things like Defcon - multiple times.

      I would guess that I'm about as well versed as a layman would be, if they were tangentially tasked with understanding computer security. I am not a professional, in other words.

      That said, I have heard the 'threat method' used, more than once. I'd say it is probably quite common, given that I have heard its use and understand its meaning. I am not sure what that implies about you, however. It does seem strange that you are seemingly waving a proud flag of ignorance. You could also just use Google and read more about it...

      --
      "So long and thanks for all the fish."
  88. Re:Ponderosa Puff (Off Topic) by Anonymous Coward · · Score: 0

    >> Re:Ponderosa Puff (Score:-1)

    Mod question here - was this post modded down because he asked a question? You cannot have constructive conversations without clear understandings. Questions are how you get there...

    Or was it modded down because BeauHD didn't understand...?

  89. U wish U were so 'foolish'... apk by Anonymous Coward · · Score: 0

    I'm going to continue using the Host File Engine. Your software is well written, functional. The Host File Engine performs exactly as promised by mmell

    his hosts program is actually pretty good by xenotransplant

    his hosts tool is actually useful for those cases in which one does indeed want to locally block stuff outright while consuming minimum system resources by alexgieg

    I've never tried to belittle (APK's) work, I've flat out said it's good by BronsCon

    APK is kinda right. I've tried his hosts file generating software. It works by bmo

    I like your host file system by Karmashock

    I find your hosts file admirable by vel-ex-tech

    APK your posts on this and the hosts file posts, and more, have never been in error and/or bad advice by BlueStrat

    * My code's recommended & hosted by Malwarebytes' hpHosts...

    APK

    P.S.=> See subject: After the above it's YOU that look FOOLISH you UNIDENTIFIABLE trolling "ne'er-do-well" worm... apk

  90. The PRICE of fame = $0 (keeps costs down) by Anonymous Coward · · Score: 0

    See subject: It keeps cost down per device in phone handsets/routers:Big impetus for device makers to outcompete, say, Apple OR MS. The TRUE reason it is so widely used IS this. Money talks.

    APK

    P.S.=> Linux's attacked on Android MORE THAN IN ANY OTHER SINGLE DEVICE it's used on (routers would be next) & it's what makes truth in my statement you replied to possible - The MORE any OS is used, the more it will be attacked (& it's attacked on Android like MAD - makes sense - pickpockets don't hunt in abandoned cities. They work crowded throughfares (bus/train stations, crowded city streets etc.). The smartphone IS that throughfare now & for a decade++ easily... apk

  91. I identify myself: "your kind" hides, lol by Anonymous Coward · · Score: 0

    I id myself: "your kind" hides (BIG difference). Yes I was featured in many publications. You'll never manage it.

    I don't dislike jews (have jews in my bloodline + pals of mine = jews). I dislike Khazar Pharisee FAKE JEWS & talmudic law that's shits on others (goy/gentiles) whom St. John called "the synagogue of satan" (wallace rosenthal interviews exposed that in the 1970's).

    Mr. LOOPY Looper?

    "There a new 'holy terror' bossman in the future. He's closing all the loops" (per the film LOOPER) - the "LORD of Hosts" (so to speak, the RAINMaker).

    I've closed yours LOOPY boy - you won't use your 1 of MANY registered 'luser' FAKE ACCOUNTS (for your fake name fake life) sockpuppets to downmod me with (why? I've crushed you before, MANY times, lol).

    "How long since you've DROPPED? out of sight "ne'er-do-well" loopy LOSER trolling UNIDENTIFIABLY.

    APK

    P.S.=> "THE PRICE OF FAME = BEING ATTACKED" - I must be 'famous' (last thing I want - media builds 'famous folks' up to DESTROY 'em)... apk

  92. Time for you to take your own advice by Anonymous Coward · · Score: 0

    Time for you to take your own advice & your meds. After all, you're clearly projecting your issues onto me as always...

    * Not only do you "hide" behind UNIDENTIFIABLE "ne'er-do-well" trolling posts (vs. using your "registered 'luser'" name in multiple fake account sockpuppets you use to downmod my posts), you have to HIDE MY POSTS that trash you easily, lol... you've blown what? 9 modpoints already to try it?? I just repost & run you DRY of those abused modpoints, easily, lmao!

    APK

    P.S.=> Grow up UNIDENTIFIABLE anonymous trolling worm... apk

  93. You're PROJECTING again, lol... apk by Anonymous Coward · · Score: 0

    See subject: Please - Keep projecting YOUR ISSUES! You provide us all an insight into the weak mind of "your kind", lol!

    APK

    P.S.=> You just don't learn, do you? apk

  94. Re:Ponderosa Puff (Off Topic) by Anonymous Coward · · Score: 0

    He didn't ask a question.

  95. Anyone get a sense of percentages? by martinfb · · Score: 1

    MS targets declined by 13%, yet total threats still went up.
    Implications are that MS targets did, in fact, go up, too, yet, not as much.

    10% of 20,000,000 is a much larger number than 10% of 200,000!

    Does anyone get a sense of the real affect of targeted percentages?

    I know my android phone suddenly gets very sluggish lately. And I do not use it for secure personal stuff.

    --


    Self-importance and self-indulgence is the root of ALL evil.
  96. Re:Ponderosa Puff (Off Topic) by computererds · · Score: 1

    There may not be a question mark at the end, but it's an obviously implied question. "I don't get it, would someone please explain it to me?"

  97. on a lighter note. by Anonymous Coward · · Score: 0

    "DSL routers of Telekom customers"
    if these routers would have been running windows instead of linux there wouldn't exist the opportunity to comment about it because we would all be radioactive ash.

  98. I missed an option: Full Retard Mode by Anonymous Coward · · Score: 0

    Looks like I missed an option:
    M. Go full retard in the thread

    Which looks to be what you chose.

  99. Nothing is Secure by EndlessNameless · · Score: 1

    There is no application, OS, interface, etc that is immune to tampering.

    This is why we have defense in depth strategies on the enterprise side. You put layers between a potential attacker and the data he may want, and you pray that one of those layers is something he can't crack yet.

    If modern Linux distros have greater known vulnerability, it only means one thing: Microsoft is finally delivering on their promise to make Windows more secure. It's certainly taken long enough.

    The increase in attacks on Linux is partly the result of its adoption as the platform-of-choice for IoT devices, which makes Linux exploits more valuable due to the increased number of devices and the longevity of those devices.

    Worms and botnets target mismanaged devices because they intend to use them as resources. Well-managed and audited devices will get wiped, or else the malware will be turned over to security experts and AV companies---both cases are bad for the malware operator.

    Now that Linux is running on this "unmanaged" hardware, it is low-hanging fruit too---and therefore a valuable target.

    --

    ---
    According to the latest ruleset, this post should be modded as Vorpal Flamebait +5.
  100. -9999999 Troll by Anonymous Coward · · Score: 0

    nt

  101. Re:U wish U were so 'foolish'... apk by Anonymous Coward · · Score: 0

    Go back and play with your VB6 for drunken lesser primates book.

    You made an overly complicated overly complex program that could be implemented by anyone with basic bash or Perl abilities in a couple of hours. Many have done this and they have done better than you as they didn't make some overly complicated executable. You don't even do the hard work of creating the lists your little high school programming class level toy program aggregates and slightly transforms. You are dependent on the actual original work of others because your work is unoriginal unthinking shit. It must take a lot of effort to convince your self that this was a meaningful contribution to the world.

    Are you next going to tell me about your shitty defrag program? Again something that any student who has taken an operating systems course and has knowledge of programming could also trivially do.

  102. What? No more unjustifiable downmods?? LOL! by Anonymous Coward · · Score: 0

    See subject: As always I ran you dry of your downmodpoints loopy loser - I closed your loop hahahaha, as I said I would.

    * :)

    (You're SO predictable & I play you like a fiddle every single time to your dismay & my satisfaction making good on my words...)

    APK

    P.S.=> "There's a new "holy terror' bossman in the future & he's closing ALL the loops" just like I closed yours seeing as you won't post using your registered 'lusername' (as you used it to issue, oh 10++ downmods of my posts, lol, you FAIL) - I closed the loop of your MANY fake names for your FAKE LIFE sockpuppets, lol - HOW LONG SINCE YOU DROPPED? Dropped RIGHT out of sight (like Bruce Willis near the film LOOPER's termination)... apk

  103. Re:FINALLY!! by Anonymous Coward · · Score: 0

    How long did it take to see that Samba RCE vulnerability? Or the Bash RCE before it?

  104. Big talk - you've done better? by Anonymous Coward · · Score: 0

    See subject: I didn't use anyone's interpreted script crap (people want GUI mostly) & answer my subject's question loopy loser.

    * This further CLOSES YOUR LOOP, lol, as always...

    (You sure "talk big" but when the chips are down & you can't back up your bs & I can easily, even in the opinions of our /. peers, & you CAN'T? LMAO @ U!)

    APK

    P.S.=> "There's a new "holy terror' bossman in the future & he's closing ALL the loops" just like I closed yours seeing as you won't post using your registered 'lusername' (as you used it to issue, oh 10++ downmods of my posts, lol, you FAIL) - I closed the loop of your MANY fake names for your FAKE LIFE sockpuppets, lol - HOW LONG SINCE YOU DROPPED? Dropped RIGHT out of sight (like Bruce Willis near the film LOOPER's termination)... apk

  105. Re:Time for you to take your own advice by Anonymous Coward · · Score: 0

    You and your mincy little faggot balls should go bugger off you tosser.
    You bore me.
    You whine like a mule about anon posts yet you can't even be stuffed to get an actual account to claim your glory.
    Now piss off.

  106. Re: The PRICE of fame = $0 (keeps costs down) by Brockmire · · Score: 1

    Please, just fucking stop. "See subject". Jesus fucking Christ. WE know how to read and write, you don't. "P.S=>" again, WE know how to read and write, you don't. Stop, stop, stop fucking spamming us with your nonsensical drivel. Learn what the rest of us learned in grade 2 about basic writing. I pity any of your family members. I wouldn't be able to deal with your issues.

  107. Overly complex bloatware by Anonymous Coward · · Score: 0

    Like I said overly complex bloatware. You don't need a GUI, it should be a fire and forget program that runs in the background at regularly scheduled times. But that it too hard for you and your little toy programs to accomplish. Be sure to include those DoEvents() calls in your VB6 code so the system still remains responsive. Even if I had an account I wouldn't waste any mods on you as I want people to see your stupidity in its full glory. Now go beat off to your VB6 for Drunken Lesser Primates book ass hole.

  108. "Hello, u fool - I love u", Forrest... apk by Anonymous Coward · · Score: 0

    See subject: That's NOT what most want (gui is & HAS been for decades) but I built it in tty/dos window/charmode initially (circa 1997-2012) 1st. It IS faster since it has NO GUI overheads (messagepassing mostly).

    * YOU AVOID MY QUESTION ("gosh I wonder why?" not...) - No, I know why: You truly ARE "Forrest" ala "Run, Forrest: RUN!!!"

    WHAT HAVE YOU PERSONALLY DONE BETTER (that /.ers like as I have)? NOTHING apparently - & when u do what I have shown already? Then talk (I have dozens of times).

    APK

    P.S.=> "Ride, Captain - RIDE" https://www.youtube.com/watch?v=vOKaSr3B_II/ & be a JOYRIDER per my subject above ("I get no '$' talk @ ALL" in ads/threats etc. - IF this program had a "theme song"? THIS would be it...) https://www.youtube.com/watch?v=xCorJG9mubk/ via APK Hosts File Engine 9.0++ SR-7 32/64-bit https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=%22APK+Hosts+File+Engine%22+and+%22start64%22&btnG=Google+Search&gbv=1/

  109. Economically sound per mgt.'s POV by Anonymous Coward · · Score: 0

    Face facts: Internal to a corp.? Linux = sense Using Linux for FREE (no license fee) = Android's success. They run the show there...for the 'grain' YOU consume (lmao)...

    * Their "raison d' etre" = profit.

    (Lessening cost overheads per unit does so)

    THIS IS THE SOLE TRUE REASON FOR LINUX SUCCESS. Works + cheap.

    APK

    P.S.=> It also MORE importantly makes sense for folks who consume that "plastic koolaid" of 'smartphones' too - DOLLARS & CENTS! Hence it's success (but also its woes in being attacked - more used = more attacked)... apk

  110. Re: FINALLY!! by KGIII · · Score: 1

    Meh... With some work, you can secure XP well enough. Depending on your security needs, there are a variety of products, methods, and services. I've been using Linux exclusively, for years, and I still have some fond memories of XP.

    --
    "So long and thanks for all the fish."
  111. RoTfLmAo @ U... apk by Anonymous Coward · · Score: 0

    I don't want to be a FAKE NAME for a FAKE LIFE like you (or reduced to stalking me by UNIDENTIFIABLE "ne'er-do-well" anonymous as you are now).

    APK

    P.S.=> That "registered 'luser'" stuff? It's not for me. It IS RIGHT for "those of 'your kind'" though, lol... apk

  112. Linux isn't the real problem by Anonymous Coward · · Score: 0

    Routers and IoT devices run Linux.
    Routers and IoT devices are created with intentional backdoors, security holes galore, and ancient outdated versions of Linux.

    How it this a problem with Linux?

    This is a problem with the (deliberately?) insecure design of routers and IoT devices.

    Why?

    People don't understand security and refuse to pay for it because they want everything cheap.
    Companies can only create these device cheaply if development is minimized to exclude useless "features", such as security.

    Companies won't create these devices with Windows because the hardware target does not support it, but moreso because of the licensing costs.
    If they did create these devices with Windows, would it be Window's fault that they are designed with intentional backdoors, security holes galore, and ancient outdated versions of Windows?
    No.

    You asked for cheap.
    Cheap means insecure.
    You got what you asked for.

  113. Re:FINALLY!! by Anonymous Coward · · Score: 0

    Here's a tip. Don't buy shitty routers running years' old firmware, and expect that somehow the magic update faerie is going to make the vulnerabilities go away.

    Okay. Please list me routers on the market that get regular firmware updates [1]. So I know which ones to buy.

    [1] Preferably for ten more years.

  114. Re: Z840 ZC2.4 W7P64 by Brockmire · · Score: 1

    Microsoft sells PC'S and laptops without bloat ware (Signature line) and have these images available to OEM'S. It's HP who bundles the trial software in that case. Other Linux distributions have default browsers and search pages, not sure your point.

  115. I'm just sitting here, feeling grateful because by Anonymous Coward · · Score: 0

    ...my name isn't Fag-ioli.