Slashdot Mirror


User: Monster_user

Monster_user's activity in the archive.

Stories
0
Comments
760
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 760

  1. Re: 1000% return is an amazing investment on More Millennials Would Give Up Voting Than Texting (nypost.com) · · Score: 1

    That should have been lucky to get an extra $300 a year. Being a mostly part time gig, A+ is only $16,000 to $20,000 annually.

  2. Re: 1000% return is an amazing investment on More Millennials Would Give Up Voting Than Texting (nypost.com) · · Score: 1

    Round here, the A+ would be lucky to net $300 a year. A+ is a part time job, if you get hired anywhere. Get better pay as a burger flipper, definitely better pay working full time in retail.

  3. Re: Average Joe? or Linux Admins? on 'Bashware' Attacks Exploit Windows 10's Subsystem for Linux (betanews.com) · · Score: 1

    Ones that require admin access have been offset by an antivirus.

    From a Google, it does appear that the Lxss/WSL file system can be scanned by a Windows antivirus scanner for signatures of known viruses.
    %localappdata%\Lxss\rootfs
    There appears to be risk when removing or quarantining files located within the WSL. So an antivirus may be able to detect, but not remove known virus signatures. Not sure that qualifies as remaining undetected as the OP suggests.

  4. Re: How Linux Can Defeat Micro$oft on Will Linux Innovation Be Driven By Microsoft? (infoworld.com) · · Score: 1

    The "troll" comment was indeed directed upstream. I was telling you to ignore the "troll" you responded to originally.

    Red Hat being $300+ annually isn't FUD. Its fact, despite sister distributions providing access to an equivalent repository. In fact that was the point I was making. CentOS and Fedora may be part of the Red Hat family, but they are not Red Hat. Just like Mint is not Ubuntu, and Ubuntu is not Debian.

  5. Re: Linux= inherently insecure on 'Bashware' Attacks Exploit Windows 10's Subsystem for Linux (betanews.com) · · Score: 1

    Its a security flaw because of Windows.

  6. Re: Average Joe? or Linux Admins? on 'Bashware' Attacks Exploit Windows 10's Subsystem for Linux (betanews.com) · · Score: 1

    This is an exploit waiting to be used. I could see botnets taking advantage of this exploit for quite some time. Windows 10 is already slow anyway,... And this is on a Surface Pro 4.

  7. Re: Easy to get administrator access? on 'Bashware' Attacks Exploit Windows 10's Subsystem for Linux (betanews.com) · · Score: 1

    The biggest threwat is probably from botnets. Any malware that needs access to anything outside the WSL risks its ability to evade detection.

  8. Re: Question ? on 'Bashware' Attacks Exploit Windows 10's Subsystem for Linux (betanews.com) · · Score: 1

    Because by attaching it to WSL, they can continue to avoid detection AFTER the infection. Even AFTER Antivirus definitions are updates.

  9. Re: Average Joe? or Linux Admins? on 'Bashware' Attacks Exploit Windows 10's Subsystem for Linux (betanews.com) · · Score: 1

    Point about definitions updates preventing the malware from infecting hosts after the definitions have been created and pushed out to clients. Which just means the spread will be limited, and old variants will not be a threat.

    I won't concede that it is much ado about nothing.

  10. Re: Average Joe? or Linux Admins? on 'Bashware' Attacks Exploit Windows 10's Subsystem for Linux (betanews.com) · · Score: 1

    I'm going off the OP, which references it being disquised from anti-malware applications.

    "that makes it possible for malware to use the Linux shell to bypass security software."

    So, neither definitions, nor AI, nor heuristics would detect something not running natively on the OS. May as well be running in a virtual machine.

  11. Re: How Linux Can Defeat Micro$oft on Will Linux Innovation Be Driven By Microsoft? (infoworld.com) · · Score: 1

    Eh, ignore the troll.

    RedHat is $365 a year for security updates and access to the package repository. Which on *nix is essential. Not sure what the difference is between the Workstation and server edition is, given the workstation edition is only $49 a year, it is comparable to Windows Pro.

    Still, when all of the competition is free, why pay a subscription?

  12. Re: Copyleft: hard to extend/extinguish on Will Linux Innovation Be Driven By Microsoft? (infoworld.com) · · Score: 1

    Entirely possible, if there are enough business guys, as opposed to *Nix/GPL religous types, in control of the Enterprise deployments.

    However, Linux was originally a hobbyist OS, which was shared for free. A community project. Should Microsoft dominate the OS, Linus would likely fork Linux and start an entirely different ecosystem. Then depending on Microsoft's licensing practices, Linus' Linux would end up back on top in a decade or two.

    Only possible alternative is for Microsoft to avoid licensing costs for "Xenix 2.0", until all the old guard have passed away. Let the world forget there ever was an original "Linux". Then pull an SCO.

  13. Re: Go on then. on Will Linux Innovation Be Driven By Microsoft? (infoworld.com) · · Score: 2

    Keeps removing all my non-Outlook.com email accounts fromthe built in email application also.

  14. Re: Go on then. on Will Linux Innovation Be Driven By Microsoft? (infoworld.com) · · Score: 1

    The US government also issued a notification to not use Internet Explorer due to security vulnerabilities. https://www.us-cert.gov/ncas/c...

    Might also have influenced a break in the Microsoft Internet Explorer monopoly.

  15. Re: WSL is optionnal on 'Bashware' Attacks Exploit Windows 10's Subsystem for Linux (betanews.com) · · Score: 1

    Just because the standard method of installing an optional service is through a control panel, doesn't mean that is the only way.

    .NET 2, & 3 are optional on Windows 10. They are typically installed via control panel. The last time I installed a legacy application, the .NET frameworks were downloaded and installed automatically.

    So we are back to Antivirus vendors providing ELFs, and providing a means of automatically installing and registering them, after installation. A means of automatically detecting the install of the WSL, and installing the appropriate ELF.

  16. Re: WSL vs Win32 API on 'Bashware' Attacks Exploit Windows 10's Subsystem for Linux (betanews.com) · · Score: 1

    Nothing prevents it, except for two things.

    1. The user doesn't know the Linux subsystem is installed.
    2. The user doesn't know anything about Linux, and expects their Windows anti-virus to protect them.

  17. Re: Question ? on 'Bashware' Attacks Exploit Windows 10's Subsystem for Linux (betanews.com) · · Score: 1

    The malware they installed to get emoticons installed WSL. So their Avast or AVG or Kasperky isn't picking up the WSL botnet infection running on Wine.

  18. Re: Poor thought process on More Millennials Would Give Up Voting Than Texting (nypost.com) · · Score: 1

    Nope. I know plenty of women more successful than me. Hillary is just stupid, as shown by most of her comments and outbursts following Trump's nomination. Wouldn't vote for her now if somebody paid me billions.

  19. Re: Question ? on 'Bashware' Attacks Exploit Windows 10's Subsystem for Linux (betanews.com) · · Score: 1

    Linux users are expected to be more knowledgeable. You grant root access to malware or a rootkit, and its your problem. Microsoft Windows is marketed towards masses of naive idiots. They have no clue, and unleash botnets on the rest of the world. So if we can't protect them from themselves, we have a problem. If an antivirus can't remove an infection, nor even detect it, we have a problem.

  20. Re: Average Joe? or Linux Admins? on 'Bashware' Attacks Exploit Windows 10's Subsystem for Linux (betanews.com) · · Score: 1

    The issue isn't in the install vector (typical user clicking "yes" to every UAC prompt). It is that no existing anti-malware utilities will automatically catch and remove the malware. This is a serious risk.

  21. Re: Easy to get administrator access? on 'Bashware' Attacks Exploit Windows 10's Subsystem for Linux (betanews.com) · · Score: 1

    Not entirely meaningless.

    Can drive-by-downloads install the WSL, and then install something to apt-get WINE, or complile WINE on the WSL, resulting in a virus running undetected by the Windows antivirus?

    The issue here is that once it happens, there will be no way to catch it down the road. Once an id10t user gets infected, nothing will detect the infection. Only knowledgeable techs who know to remove the WSL to remove the virus.

    Can an antivirus or anti-malware system detect malware installed into the WSL? Can it detect Windows viruses running in Wine?

    It is only a non-issue of the installation can't be automated to only require a consenting id10t user.

  22. Average Joe? or Linux Admins? on 'Bashware' Attacks Exploit Windows 10's Subsystem for Linux (betanews.com) · · Score: 1

    So Windows has a Linux subsystem.

    Does that mean all copies of the Windows 10 operating system are vulnerable? Meaning grandma or bubba and their propensity to give everything and its kid brother root access?

    Or are we just talking about systems being administered by Linux admins, where root access by an untrusted application carries this risk implicitly.

  23. Re: Cisco certs absolutely do get recruiters calli on More Millennials Would Give Up Voting Than Texting (nypost.com) · · Score: 1

    You sound like a marketing guy for a college.

    CompTIA, really? Are you actually suggesting spending money on an A+ cert? That draws between $16,000 to $20,000 around here, and like the Cisco cert, had to be renewed regularly.

    That is another problem with the Cisco certs. They gave them expirations after I failed mine. So it makes it that much harder to stack them.

    At $30,000 annually, budgetting for whatever it takes to get my foot in the door is a challenge. I'm looking at needing $30,000 in savings to afford to be able to leave the job I have, first months rent or a down payment, car's about to fall apart and won't last for a job outside of town, etc. Its going to take more than three years, so I'll shoot for those cisco certs at the end of three years.

  24. Re: I always wonder why on Is Online Advertising Worthless? (zerohedge.com) · · Score: 1

    ^This.

    Though, doesn't Google have a minimal level of screening to ensure the ad isn't just clickbait or malvertising but actually one of the top three search results?

    Still don't trust ads.

  25. Re: It's sensible to advertise the Surface here. on Is Online Advertising Worthless? (zerohedge.com) · · Score: 1

    Base model is 128GB. So much less than the Trimble Nomad 900 series.

    Top tier models are comparable. I'd be more specific but the Trimble website is giving me 503 errors now.

    The Surface is a Windows 10 device, whereas the Nomad does not appear to be. The Surface is a primarily luxury indoor office use device. The Nomad appears to be a rugged/outdoor use device, the added price comes in durability. So the comparison is apples to oranges despite being in the same price range.