Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. Code Red Worm

Code Red Worm

Scheduled Pinned Locked Moved The Lounge
sysadminlinuxsecurityquestion
24 Posts 15 Posters 4 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • C Chris Losinger

    because *nix doesn't have a pretty, friendly interface, no matter what the Gnome and KDE people say, less-sophisticated users tend to stay away, or are kept away, from the *nixes. and, since only maniacs like myself run their *nix boxes as root, even a malicious program is usually kept within the bounds of a non-privileged user account. it can only mess with so much. on the other hand, Winders has a nice, pretty, friendly user interface and lots of dumbed-down, soft-cornered applications that make it easy for almost anyone, experienced or not, to double-click a file to "open" it. and, of course Winders encourages people to run in a fully-privileged account, thus increasing the possibilities for malicious code. -c ------------------------------ Smaller Animals Software, Inc. http://www.smalleranimals.com

    T Offline
    T Offline
    Tim Smith
    wrote on last edited by
    #12

    I have to agree, *nix is more sophisticated: Sophisticate: 1) To cause to become less natural, especially to make less naive and more worldly. 2) To make impure; adulterate. 3) To make more complex or inclusive; refine. Adulterate: 1) To make impure by adding extraneous, improper, or inferior ingredients. Hold it, we talking about *nix or Windows? (Sorry, I couldn't resist.) Tim Smith Descartes Systems Sciences, Inc.

    C 1 Reply Last reply
    0
    • T Tim Smith

      I have to agree, *nix is more sophisticated: Sophisticate: 1) To cause to become less natural, especially to make less naive and more worldly. 2) To make impure; adulterate. 3) To make more complex or inclusive; refine. Adulterate: 1) To make impure by adding extraneous, improper, or inferior ingredients. Hold it, we talking about *nix or Windows? (Sorry, I couldn't resist.) Tim Smith Descartes Systems Sciences, Inc.

      C Offline
      C Offline
      Chris Losinger
      wrote on last edited by
      #13

      *nix - Tools for the impure. -c ------------------------------ Smaller Animals Software, Inc. http://www.smalleranimals.com

      1 Reply Last reply
      0
      • C Chris Losinger

        because *nix doesn't have a pretty, friendly interface, no matter what the Gnome and KDE people say, less-sophisticated users tend to stay away, or are kept away, from the *nixes. and, since only maniacs like myself run their *nix boxes as root, even a malicious program is usually kept within the bounds of a non-privileged user account. it can only mess with so much. on the other hand, Winders has a nice, pretty, friendly user interface and lots of dumbed-down, soft-cornered applications that make it easy for almost anyone, experienced or not, to double-click a file to "open" it. and, of course Winders encourages people to run in a fully-privileged account, thus increasing the possibilities for malicious code. -c ------------------------------ Smaller Animals Software, Inc. http://www.smalleranimals.com

        J Offline
        J Offline
        James Millson
        wrote on last edited by
        #14

        on the other hand, Winders has a nice, pretty, friendly user interface and lots of dumbed-down, soft-cornered applications that make it easy for almost anyone, experienced or not, to double-click a file to "open" it. Er... Your point is? That would have to relate to *nix to before it could ever challenge Windows in the consumer and corporate PC market. Employers don't want to spend their entire IT budget training employees to use their machines. And can you imagine teaching your five year old to use it? (Although I will admit that in today’s world, most five year olds know more about computers than we adults do). Winders encourages people to run in a fully-privileged account, thus increasing the possibilities for malicious code. I would strongly argue against that. All official documentation I’ve ever read from Microsoft on the subject of user privileges explains that you should never use a full administrator account unless performing some administrator only action, and then you should immediately log off. All too often I will walk past our SysAdmin’s workstation to find him playing FreeCell whilst logged on as an administrator. It's hardly Microsoft's fault if a SysAdmin ignores this advice - and it's not as if Microsoft doesn't warn them of the dangers. And anybody, *nix, Windows, or otherwise, can run an attachment called "FreeXXXMovie.exe" - with or without a degree in idiocy. Christ, if all the SlashDot members virus writers (*) out there agreed to name all the new viruses with a “.virus” or “.don’t_run_this_virus” extension, AOL users people would still execute them. * I apologise - that was flagrant, uncalled for, discrimination ;). Cheers, James

        C 1 Reply Last reply
        0
        • J James Millson

          on the other hand, Winders has a nice, pretty, friendly user interface and lots of dumbed-down, soft-cornered applications that make it easy for almost anyone, experienced or not, to double-click a file to "open" it. Er... Your point is? That would have to relate to *nix to before it could ever challenge Windows in the consumer and corporate PC market. Employers don't want to spend their entire IT budget training employees to use their machines. And can you imagine teaching your five year old to use it? (Although I will admit that in today’s world, most five year olds know more about computers than we adults do). Winders encourages people to run in a fully-privileged account, thus increasing the possibilities for malicious code. I would strongly argue against that. All official documentation I’ve ever read from Microsoft on the subject of user privileges explains that you should never use a full administrator account unless performing some administrator only action, and then you should immediately log off. All too often I will walk past our SysAdmin’s workstation to find him playing FreeCell whilst logged on as an administrator. It's hardly Microsoft's fault if a SysAdmin ignores this advice - and it's not as if Microsoft doesn't warn them of the dangers. And anybody, *nix, Windows, or otherwise, can run an attachment called "FreeXXXMovie.exe" - with or without a degree in idiocy. Christ, if all the SlashDot members virus writers (*) out there agreed to name all the new viruses with a “.virus” or “.don’t_run_this_virus” extension, AOL users people would still execute them. * I apologise - that was flagrant, uncalled for, discrimination ;). Cheers, James

          C Offline
          C Offline
          Chris Losinger
          wrote on last edited by
          #15

          Er... Your point is? i think you got my point perfectly. windows is simple when compared to unix and almost everyone who needs to be is familiar enough with it to do what they need to do - but not enough to know what they shouldn't do. maybe they'll learn. All official documentation I’ve ever read from Microsoft... and on my win95, 98 and NT4 boxes, i've never seen a warning or message that tells me not to run as Admin. contrast that to Gnome, where starting X as root results in a big warning box that says "you that are running as root, you could really screw up your system". but, of course you knew that already, because it took you three days to get X working in the first place, and it wasn't a matter of popping in CDs; you really had to understand what you were trying to do. i don't know anyone who runs windows of any flavor as anything but admin. though i've never tried, it's probably no challenge at all to write a windows virus (ignoring the secondary goal of fooling anti-virus software). windows is wide open, by default. -c ------------------------------ Smaller Animals Software, Inc. http://www.smalleranimals.com

          X J 2 Replies Last reply
          0
          • C Chris Losinger

            Er... Your point is? i think you got my point perfectly. windows is simple when compared to unix and almost everyone who needs to be is familiar enough with it to do what they need to do - but not enough to know what they shouldn't do. maybe they'll learn. All official documentation I’ve ever read from Microsoft... and on my win95, 98 and NT4 boxes, i've never seen a warning or message that tells me not to run as Admin. contrast that to Gnome, where starting X as root results in a big warning box that says "you that are running as root, you could really screw up your system". but, of course you knew that already, because it took you three days to get X working in the first place, and it wasn't a matter of popping in CDs; you really had to understand what you were trying to do. i don't know anyone who runs windows of any flavor as anything but admin. though i've never tried, it's probably no challenge at all to write a windows virus (ignoring the secondary goal of fooling anti-virus software). windows is wide open, by default. -c ------------------------------ Smaller Animals Software, Inc. http://www.smalleranimals.com

            X Offline
            X Offline
            Xian
            wrote on last edited by
            #16

            i don't know anyone who runs windows of any flavor as anything but admin. I run Windows2000 and I sure don't run as Admin. Now you know someone. Nice to meet you. :mad: And fyi, I am a linux user of a few years and I still find Windows to be my OS of choice. Your "almost everyone" and "most" generalizations are not very accurate in my experiences, so yes, it is a matter of opinion. Realize that. ---- Xian

            C R 2 Replies Last reply
            0
            • Z Zyxil

              I am a parrot, I am a lemming, I don't think before I speak. -John

              P Offline
              P Offline
              Paolo Messina
              wrote on last edited by
              #17

              Is that a lemming's attitude too? :) (btw, I only knows lemmings thanks to that old wonderful game) Paolo ------ "airplane is cool, but space shuttle is even better" (J. Kaczorowski)

              1 Reply Last reply
              0
              • X Xian

                i don't know anyone who runs windows of any flavor as anything but admin. I run Windows2000 and I sure don't run as Admin. Now you know someone. Nice to meet you. :mad: And fyi, I am a linux user of a few years and I still find Windows to be my OS of choice. Your "almost everyone" and "most" generalizations are not very accurate in my experiences, so yes, it is a matter of opinion. Realize that. ---- Xian

                C Offline
                C Offline
                Chris Losinger
                wrote on last edited by
                #18

                Your "almost everyone" and "most" generalizations are not very accurate in my experiences, so yes, it is a matter of opinion. I didn't use the word "most" in my post. If you're going to ignore the point and nitpick the delivery, at least get your nits right. English isn't C - there's a lot of room for interpretation, exaggeration, missspeling, redundancy and hyperbole. And, this isn't a code review. Realize that. -c ------------------------------ Smaller Animals Software, Inc. http://www.smalleranimals.com

                1 Reply Last reply
                0
                • C Chris Losinger

                  Er... Your point is? i think you got my point perfectly. windows is simple when compared to unix and almost everyone who needs to be is familiar enough with it to do what they need to do - but not enough to know what they shouldn't do. maybe they'll learn. All official documentation I’ve ever read from Microsoft... and on my win95, 98 and NT4 boxes, i've never seen a warning or message that tells me not to run as Admin. contrast that to Gnome, where starting X as root results in a big warning box that says "you that are running as root, you could really screw up your system". but, of course you knew that already, because it took you three days to get X working in the first place, and it wasn't a matter of popping in CDs; you really had to understand what you were trying to do. i don't know anyone who runs windows of any flavor as anything but admin. though i've never tried, it's probably no challenge at all to write a windows virus (ignoring the secondary goal of fooling anti-virus software). windows is wide open, by default. -c ------------------------------ Smaller Animals Software, Inc. http://www.smalleranimals.com

                  J Offline
                  J Offline
                  James Millson
                  wrote on last edited by
                  #19

                  i've never seen a warning or message that tells me not to run as Admin Sure, Windows comes on a CD, but you still have to read the instruction manual before using it. But then I suppose if you bought an Airfix model you'd build it without reading the instructions wouldn't you? Or maybe a Kit Car, or a PC... Do you take medicines without reading the labels? I hope not. So why are you so confident that you know how to use Windows (not meaning you specifically, but all the people that claim they know how to use Widnows, just because they have installed it)? If you don't read the documentation (especially with anything that will be setup as a server, or connect to the Internet) then you might as well tie that naked women to your bed with the sign saying "FREE SEX" (link). Windows is a complex beast under the user friendly skin. If you just stick in the CD and start clicking without understanding what you're doing, then of course you are going to run into trouble down the line. i don't know anyone who runs windows of any flavor as anything but admin Then you have some seriously deranged friends. Well, maybe not deranged, but they sure like taking risks. windows is wide open, by default Not true! (providing you read the documentation before installing) The 'default' installation (I'm referring to Windows 2000 Server here) has a lot of stuff disabled by default. You ahve to manually go into custom installation options and check the stuff like Indexing Server, et al. Cheers, James

                  1 Reply Last reply
                  0
                  • K Konstantin Vasserman

                    Great! Thank you for the link. My point though was that with RedHat the box is accessible by any employee who is passing by your server and happened to remember the "magic word". That is he/she does not need a utility, a boot disk - nothing. They are instant admin. That is in default installation of RedHat. Now tell me, is it secure or what? But, of course, there are always tools and smart people that write the tools to get around everything in the world. And perhaps it is a good thing that people like that exist. ;) Cheers.

                    A Offline
                    A Offline
                    Anders Molin
                    wrote on last edited by
                    #20

                    My point though was that with RedHat the box is accessible by any employee who is passing by your server and happened to remember the "magic word". Is it "singleuser" you are thinking about. If you can get locally access, you can log on to any linux machine, with root rights, as singleuser... - Anders Money talks, but all mine ever says is "Goodbye!"

                    K 1 Reply Last reply
                    0
                    • A Anders Molin

                      My point though was that with RedHat the box is accessible by any employee who is passing by your server and happened to remember the "magic word". Is it "singleuser" you are thinking about. If you can get locally access, you can log on to any linux machine, with root rights, as singleuser... - Anders Money talks, but all mine ever says is "Goodbye!"

                      K Offline
                      K Offline
                      Konstantin Vasserman
                      wrote on last edited by
                      #21

                      Yes, I think that this is what I meant. I just could not remember the specifics.

                      O 1 Reply Last reply
                      0
                      • X Xian

                        i don't know anyone who runs windows of any flavor as anything but admin. I run Windows2000 and I sure don't run as Admin. Now you know someone. Nice to meet you. :mad: And fyi, I am a linux user of a few years and I still find Windows to be my OS of choice. Your "almost everyone" and "most" generalizations are not very accurate in my experiences, so yes, it is a matter of opinion. Realize that. ---- Xian

                        R Offline
                        R Offline
                        Richard Lund
                        wrote on last edited by
                        #22

                        I also run Windows 2000, and try my best not to run as Admin. However, it's darned difficult! :mad: Half of Microsoft's own programs don't work correctly (Microsoft Money, anyone?) and things like the "Install on first use" from Office simply falls over in a heap. Plus from time to time permissions on files seem to get reset so only the logged-in user can read the file, killing things I share between users. I tried Linux many moons ago, and after a while of struggling, felt hugely proud of myself when I got it running, and spent a fair time writing little C programs to interact with the window manager. Then I got bored, and had to do some work, and I didn't have anything other than a window manager and a few card games on Linux, so... back to Windows.

                        1 Reply Last reply
                        0
                        • J John Simmon outlaw programmer

                          Yet another worm that has something to do with Microsoft. Microsoft always have security holes. This is a big security hole with yet another downloadable patch. My Message to Microsoft : You suck in the server market Why ? Too many Security holes. Not Stable, etc. The list goes on and on. Microsoft doesn't have the ability to create stable products. So i switched from Windows 2000 to RedHat Linux and boy am I happy. There are hardly and security holes with linux. Linux is also very stable. ;P By the way i only like linux for the server market. I am a Window fan when it comes to personal use simply because it's easy to use. Sarah


                          Warning: This is my personal opinion. This message was not intended to hurt anyone. If you are disturbed, please contact your local physiatrist. :((

                          P Offline
                          P Offline
                          Paul Watson
                          wrote on last edited by
                          #23

                          Ok I do concede that Windows Servers generally are a bit less secure than their Linux equivalents. IMHO that is to do with the simple fact that Microsoft offer so many features along with their products. I am pretty sure that as .NET takes off (which I hope and feel it will) more holes in security will be found and plugged. Linux is stable because it is perhaps not quite as diverse and feature rich as Microsoft Servers. However my main thought on why Linux has far fewer holes is the simple fact that because it is as not main stream as Windows fewer virus writers and hackers have focused their attention on it. Simple really. The same was true for mobile phones until someone wrote the first virus for them, now there are plenty viruses floating about for mobile phones. The holes in Linux simply have not been fully explored yet. I will take a bet that as Linux grows in popularity with main stream business more holes will be found. IMHO :-D regards, Paul Watson Cape Town, South Africa e: paulmwatson@email.com w: vergen.org

                          1 Reply Last reply
                          0
                          • K Konstantin Vasserman

                            Yes, I think that this is what I meant. I just could not remember the specifics.

                            O Offline
                            O Offline
                            Obliterator
                            wrote on last edited by
                            #24

                            IMHO NT suffers far more from security flaws than any thing else, the whole MS attitude is wrong towards security - it simply isn't a priority. Read the MS security bulletins - half the fixes simply state "disable this feature" - thats not a fix! Both systems can be fairly secure, but you require a good knowledge of each system to ensure it. I'm simply not a believer in out of the box security. As for NT, there are far worse problems than the "magic word". There are patches out there which allow you to boot from floppy and create your own administrator account without ever having logged into the NT server. Your telling me thats secure?! -- The Obliterator

                            1 Reply Last reply
                            0
                            Reply
                            • Reply as topic
                            Log in to reply
                            • Oldest to Newest
                            • Newest to Oldest
                            • Most Votes


                            • Login

                            • Don't have an account? Register

                            • Login or register to search.
                            • First post
                              Last post
                            0
                            • Categories
                            • Recent
                            • Tags
                            • Popular
                            • World
                            • Users
                            • Groups