Re:How is this a Linux problem?
on
New Linux Worm
·
· Score: 2
1.) The scripting language used in Outlook, VBS(Virus Builder Script), can take advantage of the fact that *every* process in 95/98/ME runs as the "administrator" and can modify any file it wants to. This would be a windows problem.
Most NT/2000 admins add the end user of a workstation to the administrator group because most PC users are not used to dealing with file perms or a multiuser OS. This would be an expectation problem. (managing expectations is a bitch).
The problems with Outlook have been solved by adding a warning box.
In either case mentioned above a hostile program , ran by an end user can change *any* system file it wants to. This would not be possible on a OS based on Unix.
2.) This is a BIND problem that only effects x86 linux platforms because that is what the binaries of the rootkit were compiled for. This problem could potentially effect every *nix AND win32 based systems that run BIND. The main problem here is that BIND runs as root. This situation can be fixed by: upgrading to a newer version of BIND, by running djbdns, by running a chrooted BIND, etc.
But you still haven't answered the question about finding out what package a particular file belongs to.
Is there a command to tell me if the package files are intact or not? Something like a pkg_verify?
I used FreeBSD 4.0 for a while (1 month on a laptop) and while I like some things about the ports collection better, it also has its problems, they are just different. (Wow how is that for a run on sentence!).
What I am trying to say is that every package system has its negatives and positives. I am sick of people saying the ports collection is the *best*, what they really should be saying is that the ports/packages collection is best for *them*.
Note: If you want to rant about how I wasn't specific in the above paragraphs complain and I'll post some specifics.
Outdated? Maybe these have been your experiences, I must add that you have been most fortunate. We have had a major Exchange outage every year (1998,1999,2000). I am talking about not being able to use these machines for a *day* or two. Two of these outages required a complete reinstall of the OS! (1998 reinstall recommended by Microsoft after trying a pre-beta version of Exchange that corrected a known problem) Now our 2 NT admins are *very* skilled. 1 has his MCSE and has 4 years of NT experience and is very bright. The other has been adminning NT since 3.1. We also have a large staff of IT people at our headquarters that are very seasoned. These outages have been affectionately refered to as the "Great Exchange outage of (insert year here)". While I don't use Exchange personally, I don't look forward to a 2001 failure.
http://www.dailyedeals.com/ look halfway down the page in the middle and you will see a discount code for $50US off a $200US purchase from Amazon. I got my girlfriend a Nomad II for $187+shipping!
Umm, yeah. Have you tried playing Diablo 2 on Win2K? My box hangs all the time (yeah the num lock key doesn't work). My friend (an NT admin of 6 years) can't get his DDS4 SCSI tape drive to work under Win2K (this includes upgrading *everything* you can think of including firmware and yes his termination is set correctly). My other MCSE friend's(who has three years of field experience) Win2k box hangs regularly while stoping or playing DVDs. I could go on, but I think you get the picture. Your experience is not indicative of my experience. All of my boxes, with the exception of my girlfriend's box, have RH 6.2 installed on them. I have awesome stability in these boxes with uptimes ranging from 4-6 months. Mandrake distros are based on bleeding edge software and their distros aren't tested all that well (don't flame me people I am just basing this on my experience).
Umm, yeah have you ever tried to use USB on Win95? NT doesn't support USB. There are three MS OSes that *really* support USB, they are Win98se, Win2K professional, and Me. These are all relatively new.
Slashdot Mirror
1.) The scripting language used in Outlook, VBS(Virus Builder Script), can take advantage of the fact that *every* process in 95/98/ME runs as the "administrator" and can modify any file it wants to. This would be a windows problem.
Most NT/2000 admins add the end user of a workstation to the administrator group because most PC users are not used to dealing with file perms or a multiuser OS. This would be an expectation problem. (managing expectations is a bitch).
The problems with Outlook have been solved by adding a warning box.
In either case mentioned above a hostile program , ran by an end user can change *any* system file it wants to. This would not be possible on a OS based on Unix.
2.) This is a BIND problem that only effects x86 linux platforms because that is what the binaries of the rootkit were compiled for. This problem could potentially effect every *nix AND win32 based systems that run BIND. The main problem here is that BIND runs as root. This situation can be fixed by: upgrading to a newer version of BIND, by running djbdns, by running a chrooted BIND, etc.
Very good point. Moderators, please mod this up!
> Otherwise you may be in a situation where they own it due to the fact that you did do it on company time.
??? Yhcrana said he did this work in his *spare* time. (read: not while at work)
50 hours to completion? Take a weeks worth (5 days) of vacation and bang it out. Then sell your product to your company.
But you still haven't answered the question about finding out what package a particular file belongs to.
Is there a command to tell me if the package files are intact or not? Something like a pkg_verify?
I used FreeBSD 4.0 for a while (1 month on a laptop) and while I like some things about the ports collection better, it also has its problems, they are just different. (Wow how is that for a run on sentence!).
What I am trying to say is that every package system has its negatives and positives. I am sick of people saying the ports collection is the *best*, what they really should be saying is that the ports/packages collection is best for *them*.
Note: If you want to rant about how I wasn't specific in the above paragraphs complain and I'll post some specifics.
>However, Sun E450s can fit 14 CPUs in each box.
Correction: If these are indeed E450s then they can only hold 4 CPUs per box. The total would then be 400.
I think you mean E4500s, these can indeed scale to 14.
> Microsoft gave them free copies of 2000 to keep them from using Solaris, basically
??? Solaris x86 is free!
Hey, just let me know the next time you want the machine rebooted and I'll save you the trouble of walking down to the data center. :^)
Outdated? Maybe these have been your experiences, I must add that you have been most fortunate. We have had a major Exchange outage every year (1998,1999,2000). I am talking about not being able to use these machines for a *day* or two. Two of these outages required a complete reinstall of the OS! (1998 reinstall recommended by Microsoft after trying a pre-beta version of Exchange that corrected a known problem) Now our 2 NT admins are *very* skilled. 1 has his MCSE and has 4 years of NT experience and is very bright. The other has been adminning NT since 3.1. We also have a large staff of IT people at our headquarters that are very seasoned. These outages have been affectionately refered to as the "Great Exchange outage of (insert year here)". While I don't use Exchange personally, I don't look forward to a 2001 failure.
Nope, you don't have to route the keyboard wire from the chair to your computer. :^)
Ummm, yeah... did you think that maybe automotive companies rated the output of an engine at the crank back then? Can we say transmissional losses?
http://www.dailyedeals.com/ look halfway down the page in the middle and you will see a discount code for $50US off a $200US purchase from Amazon. I got my girlfriend a Nomad II for $187+shipping!
Umm, yeah. Have you tried playing Diablo 2 on Win2K? My box hangs all the time (yeah the num lock key doesn't work). My friend (an NT admin of 6 years) can't get his DDS4 SCSI tape drive to work under Win2K (this includes upgrading *everything* you can think of including firmware and yes his termination is set correctly). My other MCSE friend's(who has three years of field experience) Win2k box hangs regularly while stoping or playing DVDs. I could go on, but I think you get the picture. Your experience is not indicative of my experience. All of my boxes, with the exception of my girlfriend's box, have RH 6.2 installed on them. I have awesome stability in these boxes with uptimes ranging from 4-6 months. Mandrake distros are based on bleeding edge software and their distros aren't tested all that well (don't flame me people I am just basing this on my experience).
> What do you mean? Win98 supports USB just fine?
Right, this OS is mentioned in my response.
> As for Win95, my USB speakers aren't complaining > about it.
Big deal so the speakers pull power from the bus.
>> Lastly, Win95 had USB support a long time ago,
Umm, yeah have you ever tried to use USB on Win95? NT doesn't support USB. There are three MS OSes that *really* support USB, they are Win98se, Win2K professional, and Me. These are all relatively new.