<html><head></head><body><div class="ydp761b1af0yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div></div>
<div dir="ltr" data-setdir="false"><div><div>Part way through it says:</div><div><br></div><div> we have to somehow convinced the user to download and install our awesome new game</div><div><br></div><div>Which translates to "installing random software". </div><div>In the Windoz world getting software online means going to all sorts of places. Even "legitimate" websites play games, like have a box pre-checked to download some other thing, like McAfee, at the same time.</div><div><br></div><div>In Linux, virtually every thing most people need is available as a package from a standard repository for Debian, Ubuntu or other. And using the package manager takes care of dependencies on other libraries so it is more likely that the newly downloaded program will run without manual fussing. </div><div><br></div><div>Of course this is not totally cyber-proof. I recall a few years back that a major Linux repository was hacked.</div></div><br></div><div><br></div>
</div><div id="ydp583cc2bcyahoo_quoted_6028508940" class="ydp583cc2bcyahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Sunday, March 7, 2021, 12:11:50 PM PST, Rick Moen <rick@linuxmafia.com> wrote:
</div>
<div><br></div>
<div><br></div>
<div>Quoting Ivan Sergio Borgonovo (<a href="mailto:mail@webthatworks.it" rel="nofollow" target="_blank">mail@webthatworks.it</a>):<br>> On 3/6/21 23:22, Rick Moen wrote:<br><br>> >The sort of unfocussed paranoia McAfee is quoted as voicing is the mark<br>> >of a rank amateur. It's been my experience that the anti-virus /<br>> >computer security industry has more than its share of such people,<br>> >that it has a large bushwah quotient.<br>> <br>> I recently stumbled into this:<br>> <br>> <a href="https://www.offensive-security.com/metasploit-unleashed/binary-linux-trojan/" rel="nofollow" target="_blank">https://www.offensive-security.com/metasploit-unleashed/binary-linux-trojan/</a><br>> <br>> OH REALLY!<br>> If you start installing random software...<br><br>...especially with root-user authority...<br><br>> ...you risk to get a trojan. And that proves that "client side<br>> attacks and trojans are not exclusive to the Windows world".<br>> <br>> And I bet... that's why even if you're running Linux, you need our<br>> training.<br><br>They really didn't even _try_ very hard, on that one.<br><br>But, the depressing thing is, this kind of broken thinking is _routine_<br>in tech reporting about computer/network security and "malware". (Of<br>course, that's largely because most tech reporting is cribbed from<br>industry press releases, and the press releases from<br>antimalware/security companies consist mostly of self-serving drivel.)<br><br><br>_______________________________________________<br>conspire mailing list<br><a href="mailto:conspire@linuxmafia.com" rel="nofollow" target="_blank">conspire@linuxmafia.com</a><br><a href="http://linuxmafia.com/mailman/listinfo/conspire" rel="nofollow" target="_blank">http://linuxmafia.com/mailman/listinfo/conspire</a><br></div>
</div>
</div></body></html>