Re: ESET anti virus

Just a FYI, there's been at least a dozen plus cases of vulnerabilities in
the kernel, in the last year alone.

Actually, those are just the ones I've noticed.  Privilege escalation
isn't always a userland issue.

http://www.debian.org/security/2011/dsa-2153

Four cases of possible privilege escalation in that single patch alone.

Linux is *quite* vulnerable to viruses.  It is merely the way Linux is
administered, that protects most installations.

How many people download wallpaper packs as executables, and run them
under Linux?  How many people download codec packs under Linux, and just
run them?

I assure you, if people start doing things like that, those 4
vulnerabilities in the above patch could quite easily give a virus root
privileges.  Since there are a dozen or so of said vulnerabilities a
year in the kernel alone, anyone thinking Linux is somehow super secure
is living in a fairytale land.

If Linux ever hits the point that viruses writers start targeting
specific vulnerabilities, and users start acting like inexperienced
Windows users, look out.

Heck, if someone really wanted to, it would be a piece of cake to hit
some of the Firefox vulnerabilities, coupled with a kernel exploit, to
get root.  It's simply that we're not target worthy, due to a lack
of market penetration...

The Linux desktop is quite vulnerable, as it sits now...


On Tue, 12 Apr 2011 22:27:27 -0400
Patrick Ouellette <[email protected]> wrote:

> The free solution won't get you immediate updates for the virus DB, JF.
> And, before ANYONE hurls at me about how Linux doesn't have viruses,
> it's not about the Kernel but the services and service apps running -
> THEY'RE vulnerable :P Linux is way more secure as a whole, but the apps
> are vulnerable - granted, bit less than Windows apps, but still.
> 
> Last security conference I went to discussed the fact that 30-40% of
> the Bots out there are Linux based... 
> 
> Sincerely,
> 
> Patrick Ouellette
> Algonquin College - School of Advanced Technology
> Program Coordinator - Computer Systems Technician & Technology-
> Networking / Security Programs Professor - Computer Studies Department
> ________________________________________
> From: [email protected] [[email protected]]
> On Behalf Of Jean-Francois Messier [[email protected]] Sent: April-12-11
> 6:56 PM To: OCLUG
> Subject: [oclug] ESET anti virus
> 
> I got this email AD about ESET for Linux. Although there are very few
> viruses under Linux, I wanted to know what everyone is thinking. Am I
> better with some free solution, or is ESET worth the cost of $60 for 2
> years ?
> 
> Thanks :-)
> 
> I am Linux,
> And Windows 7 was NOT my idea !.......
> 
> JF
> 
> --
> OCLUG general discussion list
> [email protected]
> http://oclug.on.ca/mailman/listinfo/oclug
> 
> 
> --
> 
> -- 
> OCLUG general discussion list
> [email protected]
> http://oclug.on.ca/mailman/listinfo/oclug
-- 
OCLUG general discussion list
[email protected]
http://oclug.on.ca/mailman/listinfo/oclug