Pqluglist- [Gnome-Look "Social Engineering" exploit NOT just Ubuntu] (was: Re: Malware Hidden Inside Screensaver On Gnome-Look)

[Parksville-Qualicum Linux Users group mail list]

I should have put a smiley at the end of my comment. Did not get much sleep
last night and the brain, what little there is of it is not working too
good. I am quite aware that no software is perfect, I have been in the
business since 61. As far as I am concerned anything written in "C"  by a
non-master has potential for problems/insecurities.

Right now I am struggling with a frozen shower drain, a flaky version of
firefox (3.5.3) and trying to get Angstrom to boot on my old Zaurus,
welcome  to the real world as they say. ;> { (That,s better)

Thanks for the reply and see you at the next meeting hopefully.
Roly

On 2009-12-10, at 10:18 AM, Parksville-Qualicum Linux Users group mail list
> wrote:
>
> > I am glad I do not use Ubuntu.
> > Roly
>
> Hi, Roly...
>
> With all due respect, this is not an Ubuntu-specific issue and your comment
> borders on flame bait.
>
> Any system using debs for package maintenance could be subject to this
> specific exploit.
>
> Have you ever seen the Debian ports list? That's a lot of flavours. Only
> one of them is Ubuntu.
>
> If users consider a repo trusted and add the GPG keys to a keyring that
> just exacerbates the issue.
>
> Alien could even convert the debs to rpm if a user was really, really
> wanting the screensaver.
>
> Also, don't forget linux holds a significant market share in the server
> world and a lot of those servers have GUIs that might need screen savers.
>
> Not all admins are smart. Social engineering exploits are the tip of the
> iceberg.
>
> Welcome to the beginning of the end of being able to say "No virus here."
> _______________________________________________
> PQLUGlist mailing list
> PQLUGlist at pqlug.org
> http://mail.pqlug.org/mailman/listinfo/pqluglist_pqlug.org
> Visit our web site: http://www.pqlug.org
>




-- 
I read somewhere that if you manage your money perfectly, you would never
run out, but the check that you wrote for your funeral should bounce. ;>)