[Gllug] Virus on Linux/Mac

Chris Jones cmsj at tenshu.net
Fri Sep 21 13:31:04 UTC 2007


Hi

M.J. Smith wrote:
> few hours or less.  It's only their effect on other
> users on the system - if there are any - that is
> limited.

This is a constant assumption in these kinds of debates and it's *really
really really really* bad.
I hope my emphesis is clear there ;)

Once you have untrusted code running locally, it's pretty much game over
because there are bound to be local root exploits that have yet to be
disclosed (and even if there aren't, one should assume there are). And
of course if there are mechanisms for elevating privilege, you enter the
realm of tricking users into allowing it.

Cheers,
-- 
Chris Jones
  cmsj at tenshu.net
   www.tenshu.net
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug




More information about the GLLUG mailing list