Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Nothings bulletproof.


  • Please log in to reply
17 replies to this topic

#1 SuperSapien64

SuperSapien64

  •  Avatar image
  • Members
  • 2,479 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:45 AM

Posted 06 June 2024 - 01:32 PM

Like they say nothings bulletproof. Linux vs Windows: Malware: https://m.youtube.com/watch?v=c-ftuiRDqO0

 

Instead of KVRT I wish Malwarebytes would make either a free tool or a very affordable one for Linux desktop users. Also another reason to stick with the software center and be very careful what you install install outside the software center, heck even the software center isn't guaranteed to be safe that's if your taking about Snaps or FlatPaks at least.



BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 35,304 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:45 AM

Posted 06 June 2024 - 02:54 PM

You are right nothing is bullet proof, but with Linux and Unix malware can exist in any path on the system and in any file. So, an anti-malware scanner would need to go through each file and line to determine malicious activity to be successful.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#3 Dominique1

Dominique1

    Bleepin Funny


  •  Avatar image
  • Members
  • 1,036 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:45 AM

Posted 06 June 2024 - 03:35 PM

So, an anti-malware scanner would need to go through each file and line to determine malicious activity to be successful.


So, does that mean that Windows is better designed than Linux in the ability to determine malicious activity?

Just a little controversial question. No need to answer it.
 
:hysterical:



#4 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 35,304 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:45 AM

Posted 06 June 2024 - 03:46 PM

So, an anti-malware scanner would need to go through each file and line to determine malicious activity to be successful.


So, does that mean that Windows is better designed than Linux in the ability to determine malicious activity?

Just a little controversial question. No need to answer it.
 
:hysterical:


No it means that Linux is easier to keep malware off due to its nature and its implementations of ACL.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#5 SuperSapien64

SuperSapien64
  • Topic Starter

  •  Avatar image
  • Members
  • 2,479 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:45 AM

Posted 06 June 2024 - 04:24 PM

@ cryptodan

 

:thumbsup2:



#6 SuperSapien64

SuperSapien64
  • Topic Starter

  •  Avatar image
  • Members
  • 2,479 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:45 AM

Posted 07 June 2024 - 03:04 PM

How to Use Filesystem ACLs (Access Control Lists) on Linux: https://www.howtogeek.com/how-to-use-filesystem-acl-on-linux/



#7 The-Toolman

The-Toolman

  •  Avatar image
  • Members
  • 3,599 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:02:45 AM

Posted 11 June 2024 - 11:20 PM

Also another reason to stick with the software center and be very careful what you install install outside the software center, heck even the software center isn't guaranteed to be safe that's if your taking about Snaps or FlatPaks at least.

I've never had any problems installing outside of the distros repository.

 

Make certain to use the manufactures site for software that is installed outside of the distros repository.

 

As for Snaps you need to only use the Snaps that are certified and tested and signed.

 

If you are going to use Snap than you need to learn about them and than you would know that the signed Snaps are the trusted ones to use.

 

Not all Snaps are signed.


Last year we said, "Things can't go on like this", and they didn't, they got worse.

[Will Rogers]

 

There are two theories to arguing with a woman. Neither works.

[Will Rogers]

 

 


#8 FreeBooter

FreeBooter

  •  Avatar image
  • Members
  • 5,055 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:11:45 AM

Posted 12 June 2024 - 02:07 AM

Learn how to boost your Linux system security with these proven methods. Keep your data safe and secure with these essential tips and tricks! https://youtu.be/ohAR8oojKS8

Helping public with their PC problems as have been doing for years.

Please subscribe to my YouTube channel: https://www.youtube.com/c/Freebooter


#9 Dominique1

Dominique1

    Bleepin Funny


  •  Avatar image
  • Members
  • 1,036 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:45 AM

Posted 12 June 2024 - 10:46 AM

FreeBooter, care to speak your mind instead of referring us to a video that you made? Sounds like click-bate to me if not.



#10 FreeBooter

FreeBooter

  •  Avatar image
  • Members
  • 5,055 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:11:45 AM

Posted 12 June 2024 - 11:41 AM

I just showed you how to secure Linux system, are you telling me all the time making the video waste of time will you like me to waste my time typing all i suggested in my video.

Helping public with their PC problems as have been doing for years.

Please subscribe to my YouTube channel: https://www.youtube.com/c/Freebooter


#11 pSYCHOtRAIL

pSYCHOtRAIL

  •  Avatar image
  • Members
  • 3 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West-Central Pennsylvania, USA
  • Local time:03:45 AM

Posted 12 June 2024 - 03:04 PM

My wife and I have used Linux, several different distros, since 2007 when we permanently ditched MS. Combined, that's over 30 years of use. My wife, early on, wanted a word game provided by a well known news site as a browser extension. It was nice except for it being a persistent hijacker that stole her browser home page and couldn't be uninstalled. Scared the sheet right out of her - "I thought you couldn't get nasties with Linux." We learned from that. The fix was easy, I purged the browser package, then to be sure there wasn't a stubborn memory element I rebooted and then reinstalled the browser. The extension was gone. Yeah, we learned then that crap can happen on Linux. That was our one and only brush with nasties.

Since then I've used ClamAV. It won't help with conventional adware type malware, but with the urlhaus script addition from https://github.com/abusech/urlhaus/blob/master/clamav.sh I get more AV signatures. We've got a couple added repos beyond the authorized Linux repos, Spotify, Brave and Speedcheck so I run my own custom script to update and scan my system maybe once a month, probably more like every couple months. We don't use a server so the urlhaus script doesn't run as often as urlhaus recommends, just when I run my AV script. Linux keeps a very tight hold on their repo security but I'm not so sure about the three additional and independent ones we use. Now, the only nasties we find are in email attachments that are in our junk folders.

There are now more desktop users of Linux than ever before and I agree, there needs to be some serious attention paid to preventing or eliminating adware and such, specially since most new Linux users are MS users and used to the way MS (mis)manages things. It probably wouldn't be a bad idea to have a live service AV for Linux either if only to check downloads.

I'm lucky that WAY back in the early days of DOS and MS I learned fairly in-depth BATCH file scripting and it wasn't much of a learning curve to switch to BASH. So many say there's a learning curve switching from MS to Linux, but for both of us, it was more like a little slope, even 15 years ago before desktop Linux became well polished. My wife, retired from full time for many years, was a medical secretary for 40+ years.

BTW, we both use Debian and I think that's where we'll stay.



#12 SuperSapien64

SuperSapien64
  • Topic Starter

  •  Avatar image
  • Members
  • 2,479 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:45 AM

Posted 14 June 2024 - 01:43 PM

Heck I would be willing too pay for a version of ClamAV if it had more signatures and a heuristics engine as well.



#13 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 35,304 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:45 AM

Posted 14 June 2024 - 01:47 PM

Heck I would be willing too pay for a version of ClamAV if it had more signatures and a heuristics engine as well.


Why though, could you imagine the false positives it would generate? The files on Linux can be changed by anyone doing coding and fixing open-source bugs and issues. ClamAV was created to scan drives and other media from Windows Machines to transfer to other windows machines to help mitigate malicious transfers from one windows machine to another. ClamAV was never intended to be an anti-viral for Linux.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#14 SuperSapien64

SuperSapien64
  • Topic Starter

  •  Avatar image
  • Members
  • 2,479 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:45 AM

Posted 14 June 2024 - 01:50 PM

 

Heck I would be willing too pay for a version of ClamAV if it had more signatures and a heuristics engine as well.


Why though, could you imagine the false positives it would generate? The files on Linux can be changed by anyone doing coding and fixing open-source bugs and issues. ClamAV was created to scan drives and other media from Windows Machines to transfer to other windows machines to help mitigate malicious transfers from one windows machine to another. ClamAV was never intended to be an anti-viral for Linux.

 

Oh I see thanks. :) Then I wish there were more Linux specific AVs as it becomes more popular there will be more malware made for it.



#15 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 35,304 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:45 AM

Posted 14 June 2024 - 01:58 PM

The only malware that is made on Linux is to attack services like Apache(web), Email Servers(Postfix, Sendmail, Dovecot, Qmail, and other software), Databases(MySQL, PostreSQL, NoSQL SQLLite), SSH, and others that maybe runnig to gain access to systems and to spread it.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users