One for linux, available from: http://frauder.us/linux/ssh.tgz It's a pretty stupid worm, doesnt exploit anything.. just looks for predefined usernames and passwords like guest/guest test/test etc
Yes, here you can download cedega from www.evil-black-hat.com/trojans/cedega.tgz. Don't worry about the modifications it makes to/etc/passwd, they're necessary for the game to run.
There is a worm floating around that tries to ssh in as root, guest, test and some other accounts.. Quite harmless unless you have these accounts unpassworded or with identical usernames/passwords. As for the one/week or other such things, it's possible this is just someone who mistyped the ip.
Re:It would be interesting to know if...
on
Linux vs. Windows
·
· Score: 3, Insightful
Well, as someone who started on unix systems and had to suffer windows at a later date, i imagine that people who started fresh with linux would keep it.. Why? for the same reason people stay with windows plus the reasons people are considering migrating to linux.. Many people will stick with what they know, and those who know linux are likely to get to like the security, stability and flexibility of the system.. Moving to windows from Linux will not only present an unfamiliar environment (as it does the other way round) but an environment that is far less flexible and less stable, plus linux users will have become comfortable browsing the web and reading email in relative safety, and will likely assume they can do the same under windows... thus taking little/no protections against malware.
But this cost will come down as linux use becomes more widespread. The more widespread linux is, the greater the availability of people who are already trained to use it, and the greater the likelihood that someone will seek out linux training on their own.
With unix, restricting the users to only accessing their own floppy drive is simple - chown the appropriate device to their userid at login, and mount it under their home directory to which only they have access. At logout, simply unmount it and chown the device back to root.
(the chown is so they can format disks etc, if necessary..)
As for preventing users from bogging the machine down too much, again unix caters for this with userlimits - you can restrict the amount of ram and other resources a single user can use, if you split the available ram in 4 and restrict each user to a quarter of the available resources.
The problem with this, is that VNC is insufferably slow compared to native X11.. Why the hell would anyone use VNC over X11 anyway? X11 supports remote displays natively, why would you need a slow dirty hack like VNC?
Well, since corporations are afforded the same, or often more, legal rights as people... Insecure computer(s) could quite easily kill a corporation, either by leaking secrets, by being used for denial of service etc... Surely, if corporations have the same rights as humans, this would be considered murder. It's also possible you could kill a human using an insecure computer, you could manipulate police computers to plant evidence and place someone on death row, or you could take control of a computer controlled device that has peoples lives in it's hands, such as an aircraft.
Actually, you can use IE5 on solaris, it just doesn't support activex.. Still, theres no reason why you would want to use it over mozilla.. Personally i use it about once every 6 months for some anal websites i'm forced to use at work, it's safer than the windows version due to it's obscurity.
The hardware has to meet certain standards, but the software does not... 99% of the problems with todays computers is caused by bad software.. theres rarely something wrong with the hardware.
That theyre using unpatched insecure/unstable software, or the fact they want to install untested patches? Patches would be just fine if it could be verified that they ONLY affect the one issue and don't mess with other things, you cant prove this with closed source microsoft patches and they have proven time and time again that they affect other subsystems in their patching. Any hardware which can endanger human life should be running very thoroughly tested embedded OS's supporting only the minimal set of features required for the task, communication with other hardware kept to the absoloute minimum required. I don't want a web browser on my life support machine, i dont want a fully features os, i just want a machine that keeps me alive and doesnt do anything else which might endanger my life. And doesn't have any entrance points where someone hostile may break in and kill me. This doesnt just apply to medical hardware, i would consider vehicle/aircraft control systems and guided missile systems etc, to be just as important.. The ECU on my car is in computing terms very simple, and only controls and monitors the engine.. I don't want it to run a full featured os, i like the fact it has a diagnostics port locked away under the hood and doesnt use wireless networking for instance... Think of a world where your car "convenience", people could walk around a car park with a laptop.. look for your car, break in and do all kinds of nasty things.. And if it were to crash at 150mph on the highway, well then your fucked.
The number of vulns found in IE are huge compared to the number found in netscape back when it was the dominant player... Similarly, IIS has a much worse track record than the dominant Apache.
Which is incompatible, and intentionally so, with every other browser out there, and isn't really png support, it's an additional filter applied by an html page, and requires additional html code in addition to the image data.
But in many cases it is microsoft's fault that the spyware got there in the first place. Not due to user stupidity, but due to security holes in the os and browser etc.
Yes, Afterall.. the publishers didn't want to be associated with girl.com - a porn site.. goatse would be even worse for them! Aside from that, she should place as many advertisement banners (for pornsites!) on her site as possible and try to generate revenue from the traffic caused by this book.
XP also comes configured by default to automatically reboot instead of displaying the bluescreen, this doesnt make it any more stable, it just gives the illusion of stability because people associate bluescreens = crashes
But the user did not follow the instructions, The computer crashed during the flashing process... Where the instructions stated it should continue running until the flashing is complete... If the vendor-supplied firmware update program crashed then yes it is their fault, if the crash had nothing to do with the firmware then it's the end user who is at fault.
kde and gnome are just massively bloated and sluggish.. they try to do too much and be too fancy.. Windowmaker is very snappy here, and there are many other lightweight window managers.. Infact this machine is noticeably more responsive with windowmaker than xp.
What's interesting to note however... The kernel that you talk about, was mostly stolen from DEC.. The UI and application layers were microsoft's own code bolted on top... The original kernel was a microkernel architecture where device drivers shouldn't have been able to drop the whole system, microsoft screwed that up by allowing drivers to be loaded into kernel space. The stable parts of windows were stolen, the unstable parts were their own code.. Tells you something about the quality of their development process. The same thing applies to a lot of their other products, the more stable ones were bought/stolen from elsewhere.
But on modern hardware bzip2 is comparable in speed to gzip a few years ago, and in a few years from now bzip2 will be considered fast and we'l have some slower and more powerfull compression scheme to replace it.
But web developers shouldn't have to waste time applying ugly kludges to their sites to make them render in broken browsers, they should be able to make a standard page, following defined specifications, that displays properly in all browsers... Broken browsers should be fixed or dumped, they just hold everyone else back and cause endless hassle for developers... Aside from this, using a nonstandard ie-compatible method may not render properly in standards-compliant browsers anyway.
Well actually Commodore with the C64 and later the Amiga, and to a lesser extend Atari with the ST provided a reasonably priced reasonably powerfull computer that was easy enough for people to get to grips with, capable both of playing games and of doing serious work... In the case of the Amiga, it was far more powerfull than equivalent intel based machines and yet half the price, and came with a vastly superior os which was gui based and capable of multitasking in 1985, something which took microsoft 10 years and 10 times the hardware to catch up with. And for those who only wanted to play games, nintendo and sega made some good for the time games consoles which required minimal effort to play a game.
Slashdot Mirror
One for linux, available from:
http://frauder.us/linux/ssh.tgz
It's a pretty stupid worm, doesnt exploit anything.. just looks for predefined usernames and passwords like guest/guest test/test etc
Yes, here you can download cedega from www.evil-black-hat.com/trojans/cedega.tgz. /etc/passwd, they're necessary for the game to run.
Don't worry about the modifications it makes to
There is a worm floating around that tries to ssh in as root, guest, test and some other accounts.. Quite harmless unless you have these accounts unpassworded or with identical usernames/passwords.
As for the one/week or other such things, it's possible this is just someone who mistyped the ip.
Well, as someone who started on unix systems and had to suffer windows at a later date, i imagine that people who started fresh with linux would keep it..
Why? for the same reason people stay with windows plus the reasons people are considering migrating to linux.. Many people will stick with what they know, and those who know linux are likely to get to like the security, stability and flexibility of the system.. Moving to windows from Linux will not only present an unfamiliar environment (as it does the other way round) but an environment that is far less flexible and less stable, plus linux users will have become comfortable browsing the web and reading email in relative safety, and will likely assume they can do the same under windows... thus taking little/no protections against malware.
But this cost will come down as linux use becomes more widespread. The more widespread linux is, the greater the availability of people who are already trained to use it, and the greater the likelihood that someone will seek out linux training on their own.
With unix, restricting the users to only accessing their own floppy drive is simple - chown the appropriate device to their userid at login, and mount it under their home directory to which only they have access. At logout, simply unmount it and chown the device back to root.
(the chown is so they can format disks etc, if necessary..)
As for preventing users from bogging the machine down too much, again unix caters for this with userlimits - you can restrict the amount of ram and other resources a single user can use, if you split the available ram in 4 and restrict each user to a quarter of the available resources.
The problem with this, is that VNC is insufferably slow compared to native X11..
Why the hell would anyone use VNC over X11 anyway? X11 supports remote displays natively, why would you need a slow dirty hack like VNC?
Well, since corporations are afforded the same, or often more, legal rights as people... Insecure computer(s) could quite easily kill a corporation, either by leaking secrets, by being used for denial of service etc... Surely, if corporations have the same rights as humans, this would be considered murder.
It's also possible you could kill a human using an insecure computer, you could manipulate police computers to plant evidence and place someone on death row, or you could take control of a computer controlled device that has peoples lives in it's hands, such as an aircraft.
Actually, you can use IE5 on solaris, it just doesn't support activex.. Still, theres no reason why you would want to use it over mozilla..
Personally i use it about once every 6 months for some anal websites i'm forced to use at work, it's safer than the windows version due to it's obscurity.
The hardware has to meet certain standards, but the software does not... 99% of the problems with todays computers is caused by bad software.. theres rarely something wrong with the hardware.
That theyre using unpatched insecure/unstable software, or the fact they want to install untested patches?
Patches would be just fine if it could be verified that they ONLY affect the one issue and don't mess with other things, you cant prove this with closed source microsoft patches and they have proven time and time again that they affect other subsystems in their patching.
Any hardware which can endanger human life should be running very thoroughly tested embedded OS's supporting only the minimal set of features required for the task, communication with other hardware kept to the absoloute minimum required. I don't want a web browser on my life support machine, i dont want a fully features os, i just want a machine that keeps me alive and doesnt do anything else which might endanger my life. And doesn't have any entrance points where someone hostile may break in and kill me.
This doesnt just apply to medical hardware, i would consider vehicle/aircraft control systems and guided missile systems etc, to be just as important.. The ECU on my car is in computing terms very simple, and only controls and monitors the engine.. I don't want it to run a full featured os, i like the fact it has a diagnostics port locked away under the hood and doesnt use wireless networking for instance...
Think of a world where your car "convenience", people could walk around a car park with a laptop.. look for your car, break in and do all kinds of nasty things.. And if it were to crash at 150mph on the highway, well then your fucked.
The number of vulns found in IE are huge compared to the number found in netscape back when it was the dominant player...
Similarly, IIS has a much worse track record than the dominant Apache.
Which is incompatible, and intentionally so, with every other browser out there, and isn't really png support, it's an additional filter applied by an html page, and requires additional html code in addition to the image data.
But in many cases it is microsoft's fault that the spyware got there in the first place. Not due to user stupidity, but due to security holes in the os and browser etc.
Yes, Afterall.. the publishers didn't want to be associated with girl.com - a porn site.. goatse would be even worse for them!
Aside from that, she should place as many advertisement banners (for pornsites!) on her site as possible and try to generate revenue from the traffic caused by this book.
XP also comes configured by default to automatically reboot instead of displaying the bluescreen, this doesnt make it any more stable, it just gives the illusion of stability because people associate bluescreens = crashes
But the user did not follow the instructions, The computer crashed during the flashing process... Where the instructions stated it should continue running until the flashing is complete... If the vendor-supplied firmware update program crashed then yes it is their fault, if the crash had nothing to do with the firmware then it's the end user who is at fault.
Actually, DEC did sue them, and won, the reason there was an Alpha port of NT atall was part of the settlement.
So NT4 was effectively beta software which they were ironing bugs out of... It's unacceptable to charge money for beta quality software
kde and gnome are just massively bloated and sluggish.. they try to do too much and be too fancy..
Windowmaker is very snappy here, and there are many other lightweight window managers.. Infact this machine is noticeably more responsive with windowmaker than xp.
What's interesting to note however...
The kernel that you talk about, was mostly stolen from DEC..
The UI and application layers were microsoft's own code bolted on top...
The original kernel was a microkernel architecture where device drivers shouldn't have been able to drop the whole system, microsoft screwed that up by allowing drivers to be loaded into kernel space.
The stable parts of windows were stolen, the unstable parts were their own code.. Tells you something about the quality of their development process. The same thing applies to a lot of their other products, the more stable ones were bought/stolen from elsewhere.
But on modern hardware bzip2 is comparable in speed to gzip a few years ago, and in a few years from now bzip2 will be considered fast and we'l have some slower and more powerfull compression scheme to replace it.
But web developers shouldn't have to waste time applying ugly kludges to their sites to make them render in broken browsers, they should be able to make a standard page, following defined specifications, that displays properly in all browsers...
Broken browsers should be fixed or dumped, they just hold everyone else back and cause endless hassle for developers...
Aside from this, using a nonstandard ie-compatible method may not render properly in standards-compliant browsers anyway.
I wouldnt say linux/unix were illogical, but perhaps some of the windows-emulating interfaces bolted on top are...
Well actually Commodore with the C64 and later the Amiga, and to a lesser extend Atari with the ST provided a reasonably priced reasonably powerfull computer that was easy enough for people to get to grips with, capable both of playing games and of doing serious work...
In the case of the Amiga, it was far more powerfull than equivalent intel based machines and yet half the price, and came with a vastly superior os which was gui based and capable of multitasking in 1985, something which took microsoft 10 years and 10 times the hardware to catch up with.
And for those who only wanted to play games, nintendo and sega made some good for the time games consoles which required minimal effort to play a game.