[Gllug] Virus on Linux/Mac
Chris Jones
cmsj at tenshu.net
Fri Sep 21 13:31:04 UTC 2007
Hi
M.J. Smith wrote:
> few hours or less. It's only their effect on other
> users on the system - if there are any - that is
> limited.
This is a constant assumption in these kinds of debates and it's *really
really really really* bad.
I hope my emphesis is clear there ;)
Once you have untrusted code running locally, it's pretty much game over
because there are bound to be local root exploits that have yet to be
disclosed (and even if there aren't, one should assume there are). And
of course if there are mechanisms for elevating privilege, you enter the
realm of tricking users into allowing it.
Cheers,
--
Chris Jones
cmsj at tenshu.net
www.tenshu.net
--
Gllug mailing list - Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug
More information about the GLLUG
mailing list