| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 39539 | 2003-11-09 23:58:00 | Windows is not the only OS, which could get a security flaw | stu140103 (137) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 190503 | 2003-11-10 21:46:00 | If you had a NT based system with NTFS you would have been able to limit access. Its interesting that Linux can provide those restrictions on Fat32 drives and MS's own OS's can't. GNU/Linux does take a while to get one's head around. But it's like anything new/untried it takes time, a little research , trial and error. Using a restrictive user account to surf the internet just makes sence. Haven't gone completely MS free yet, but am getting there. After 12 years of being assimilated by the Borg its natural ;). And look fwd to Geoffs articles. | mark.p (383) | ||
| 190504 | 2003-11-10 22:46:00 | Yes, but people have to learn to use one OS or another... Its like growing up on cows milk and getting used to soy milk.. Still milk right (OS), but just still different. Some people grow up on cows milk, some on soy milk... Either way, it just takes a bit of "getting used to" the other type of milk. I agree that it is rather amusing how MS cant even put those read-only restrictions on that file-system, yet Linux can :-) And I agree about using a restrictive account... While I do tons of stuff every day as root (Such as compiling/installing apps, tweaking my system settings etc) the very fact that I have to type: su before I begin makes me realise that what Im doing is not something that can be fixed by creating a new user....! Aside from that, if im going to let somebody else use my PC, why should I let them have the ability to change my network settings, remove my apps, and ultimately format my PC? Yet in Windows, my two year old brother has this... and I've actually found him in a lot of place he should be, such as changing from a static IP to a DHCP IP!!! He's two years old! </Rant> Chill. |
Chilling_Silently (228) | ||
| 190505 | 2003-11-10 22:55:00 | > I agree that it is rather amusing how MS cant even put those read-only restrictions > on that file-system, yet Linux can :) I thought that was because in Linux you had to mount Windows Fat32 partitions and in mounting something you can specify if you want to have R/W access to a drive or just read access... Whereas in Windows you can't mount a drive that's already mounted and by default if a user can read a mounted drive they can effectively write to it (exception of course with CDRom media)? That's the nature of the FAT32 file system... Although I'm sure that there are some registry tweaks around which allow you to use C: drive as read only..? Then again I suppose it'd be as useful as having a root password of 'password'... Security/Safety is a 2 sided coin don't forget. |
cyberchuck (173) | ||
| 190506 | 2003-11-10 23:21:00 | Then again it could be an x-microsoft employee shafted for taking pictures of bill gates playing minesweeper on a mac, the skies the limit. The fingers always pointed at the competition, no matter what side of the fence your on. | rsnic (3780) | ||
| 190507 | 2003-11-10 23:29:00 | So true. Considering MS employees have to eat there own dog food it's quite possible X MS employees are involved ;) | mark.p (383) | ||
| 190508 | 2003-11-11 00:34:00 | > Yes that is a pathetic move by Lindows and could do a > lot of damage to Linux in general I am using LindowsOS right now and am logged in as root. This does not really bother me at all - even with LindowsOS logged in as root it is more secure than Windows. There is nothing stopping me from creating a user account but I choose not to because it causes more inconvenience when installing programs, modifying system files, etc. If I accidentally destroy something the system needs then it doesn't bother me, because I will learn that I shouldn't do that next time. :D |
flyer590 (2523) | ||
| 190509 | 2003-11-11 00:40:00 | > ...and ultimately format my PC? Yet in Windows, my two year old brother has this... and I've actually found him in a lot of place he should be, such as changing from a static IP to a DHCP IP!!! He's two years old! Not sure about anyone else, but I know that when formatting a PC I can usually do it without needing to use the operating system that is used :-P Windows can be configured in a way to prevent a user allowing IP changes and similar I'm sure, haven't played around with it myself seeing as I'm a sole user on this computer. As you said though. It is very much a different strokes for different folks type situation and of course what role the computer is going to be playing. |
-=JM=- (16) | ||
| 190510 | 2003-11-11 01:22:00 | i disagree strongly,Soymilk is not milk by any stretch of the imagination and should be wiped out. That goes for false meat products as well. And decaffinated coffee. ................................................HA |
metla (154) | ||
| 190511 | 2003-11-11 01:49:00 | <troll> Call me cynical but isn't it strange that the Open Source community seem to all be such goodie-goodie-two-shoes types that would never write malicious code into a program or even into the Linux OS to gain them access to other people's machines or whatever? It would be so easy to do and done cleverly enough may take a long while to be noticed by anyone else . After all, lots of people accuse Microsoft of dirty tactics such as snooping around hard drives when registering/checking for updates, etc to see what the hardware is and/or what programs are being run, etc . Why wouldn't there be a small section in the Linux programmers community with similar "sinister" motives, or worse? Are there none at all? It is human nature to have a few black sheep amongst the crowd after all . . . . </troll> |
Susan B (19) | ||
| 190512 | 2003-11-11 02:06:00 | > Call me cynical but isn't it strange that the Open Source community seem to all be > such goodie-goodie-two-shoes types that would never write malicious code into a > program or even into the Linux OS to gain them access to other people's machines > or whatever? It would be so easy to do and done cleverly enough may take a long > while to be noticed by anyone else . I'm sure I've read about that somewhere . . Just can't remember where to get a decent link . . This was also raised on NZLug a few days ago (IIRC) and the general concensus was that it would be harder as OpenSource means open source and people can publically go and view the code so someone would be bound to pick up the flaw . The other side of the arguement was that not everyone looks at source code - they just want a program that works and who cares how it runs . And with the number of OpenSource applications I'd be surprised if someone hadn't tried it as it's practically impossible to monitor all the projects . But you have to remember that it depends how the program is setup first - eg: lets say Gaim has a backdoor to it and I run Gaim under my account - then it means that Gaim is running with my privilages and can only access what I can access . However, if I get super user privilages and then set gaim up as a system service (no Idea why I'd want to do that, but yeah) then assuming it loads on startup, it would have root privilages and access to the entire system - although the point is I'd have to manually tell it to run on startup before it got root privilages and even then I try and get programs to use their 'own' special accounts which get locked down as much as I possibly can to stop that happening . Just means that if Gaim was running under it's own account it could only access the files it needs to run and everything else is off limits . . . Although it's nothing a good firewall shouldn't pick up . . . CyberChuck |
cyberchuck (173) | ||
| 1 2 3 4 5 6 7 | |||||