Re: Phishing - Linux boxes are vulnerable

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, 2007-10-05 at 02:48 +0800, Hikaru Amano wrote:
> On 10/5/07, Claude Jones <cjones@xxxxxxxxxxxxxx> wrote:
> > "More interesting is that most of the compromised machines were not Windows
> > machines. "The vast majority of [the phishing sites] we saw were on
> > rootkit-ed Linux boxes, which was rather startling. We expected a
> > predominance of Microsoft boxes and that wasn't the case.""
> >
> > http://tinyurl.com/36nfsm
> >
> > The above comments were made at a MS sponsored conference. MicroSoft has a
> > history of sponsoring stuff like this. Even if it was an exaggeration - I've
> > never heard of a big problem with Linux boxes getting root-kitted - is it
> > something happenning under the radar? I've read over and over that Linux is
> > much more secure than it's big counterpart - what sorts of vulnerabilities
> > are people opening up to allow Linux machines to be root-kitted? I am aware
> > of the ssh problem, and have followed the discussions on locking down ssh for
> > years, including the other thread that's running currently. What other sorts
> > of things must people do to open themselves up to being rootkitted? This is
> > the first time I've seen such a claim, and it took me by surprise...so, I'm
> > asking.
> 
> When a Windows server is rooted, its the OS/apps that having problems
> ... when a *Nix server is rooted, its the admin's head that having
> problems ..
> 
> theres lots of vulnerable Linux servers out there, managed by poorly
> skilled admins   - mainly teenagers playing around - ... IMHO
> attacking a linux server is more convenient than a windows server ..
> bcause stuff can be easily ran without GUI and commands input/output
> can go through lots of medium like a simple listening port , to a nice
> javascript based web shell ... whereas on windows attacker are usually
> stuck with a limited telnet or a VNC .. but if the admin at least
> knows some of the security best practices .. Linux is _very_ secure ..
> 
> 
> > --
> > Claude Jones
> > Brunswick, MD, USA
> >
> > --
> > fedora-list mailing list
> > fedora-list@xxxxxxxxxx
> > To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
> >
> 
> 
> -- 
> Mohd Izhar Firdaus Bin Ismail
> Amano Hikaru
> 天野晃 「あまの ひかる」
> http://fedoraproject.org/wiki/MohdIzharFirdaus
> http://blog.kagesenshi.org
> 92C2 B295 B40B B3DC 6866  5011 5BD2 584A 8A5D 7331
> 


Totally not true

A good hacker don't need GUI, whether is on Windows or any other GUI
centric OS.



Moreover, a little bit outdated, but still valid


http://www.theregister.co.uk/2004/10/22/linux_v_windows_security/





Calin

=================================================
Math is like love -- a simple idea but it can get complicated. -- R.
Drabek

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux