Re: Do we really need to worry about viruses (was Re: Anyone else notice that Swen is slowing down?)

2003-10-05 Thread Ron Johnson
On Sun, 2003-10-05 at 11:14, ScruLoose wrote: > On Sun, Oct 05, 2003 at 03:52:08AM -0400, [EMAIL PROTECTED] wrote: > > On Sun, 5 Oct 2003, Karsten M. Self wrote: > > > > > > > > Given that I live alone with a cat, I still lock my desktop when I walk > > > away for any length of time, set xscreensa

Re: Do we really need to worry about viruses (was Re: Anyone else notice that Swen is slowing down?)

2003-10-05 Thread Monique Y. Herman
On Sun, 5 Oct 2003 03:52:08 -0400 (EDT), <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> penned: > On Sun, 5 Oct 2003, Karsten M. Self wrote: > >> >> Given that I live alone with a cat, I still lock my desktop when I walk >> away for any length of time, set xscreensaver to cut in (and lock) anyway, >> and

Re: Do we really need to worry about viruses (was Re: Anyone else notice that Swen is slowing down?)

2003-10-05 Thread ScruLoose
On Sun, Oct 05, 2003 at 03:52:08AM -0400, [EMAIL PROTECTED] wrote: > On Sun, 5 Oct 2003, Karsten M. Self wrote: > > > > > Given that I live alone with a cat, I still lock my desktop when I walk > > away for any length of time, set xscreensaver to cut in (and lock) > > anyway, and require a passwor

Re: Do we really need to worry about viruses (was Re: Anyone else notice that Swen is slowing down?)

2003-10-05 Thread Brian Walker
[EMAIL PROTECTED] wrote: On Sun, 5 Oct 2003, Karsten M. Self wrote: Given that I live alone with a cat, I still lock my desktop when I walk away for any length of time, set xscreensaver to cut in (and lock) anyway, and require a password for 'sudo' on my personal account. Hi Karsten, you must hav

Re: Do we really need to worry about viruses (was Re: Anyone else notice that Swen is slowing down?)

2003-10-05 Thread kmark
On Sun, 5 Oct 2003, Karsten M. Self wrote: > > Given that I live alone with a cat, I still lock my desktop when I walk > away for any length of time, set xscreensaver to cut in (and lock) > anyway, and require a password for 'sudo' on my personal account. > Hi Karsten, you must have one smart cat

Re: Do we really need to worry about viruses (was Re: Anyone else notice that Swen is slowing down?)

2003-10-05 Thread Karsten M. Self
on Thu, Oct 02, 2003 at 09:25:50PM -0400, Bijan Soleymani ([EMAIL PROTECTED]) wrote: > On Fri, Oct 03, 2003 at 01:42:28AM +0100, Karsten M. Self wrote: > > E.g.: there are _good_, _solid_ reasons Debian doesn't allow Mozilla to > > run as root, why X11 TCP connections are disabled by default, and

Re: Do we really need to worry about viruses

2003-10-03 Thread kmark
On Fri, 3 Oct 2003, Benedict Verheyen wrote: > > I think that a lot of users tend to switch to using root because they > cannot achieve simple tasks with their "normal" user. For instance > writing cd's. It would help if there is a doc that explains how users > can best set up their system to a

Re: Do we really need to worry about viruses

2003-10-03 Thread Ron Johnson
On Fri, 2003-10-03 at 08:48, Benedict Verheyen wrote: [snip] > I think that a lot of users tend to switch to using root because they > cannot achieve simple tasks with their "normal" user. For instance > writing cd's. It would help if there is a doc that explains how users You mentioned sudo. Pau

Re: Do we really need to worry about viruses

2003-10-03 Thread Benedict Verheyen
>> I don't know but this seems like overkill. Does mounting home noexec >> mean that I can't run programs for /home/. > >Yep, that's what it means. Things located in the partition mounted at >/home are not allowed to be executed (though it can be bypassed) > >> What about at school. They >> don't

Re: Do we really need to worry about viruses

2003-10-02 Thread ScruLoose
On Thu, Oct 02, 2003 at 11:21:39PM -0400, Bijan Soleymani wrote: > > I don't know but this seems like overkill. Does mounting home noexec > mean that I can't run programs for /home/. Yep, that's what it means. Things located in the partition mounted at /home are not allowed to be executed (thoug

Re: Do we really need to worry about viruses

2003-10-02 Thread Bijan Soleymani
On Thu, Oct 02, 2003 at 10:39:50PM -0400, ScruLoose wrote: > On Thu, Oct 02, 2003 at 09:27:48PM -0500, John Hasler wrote: > > ScruLoose writes: > > > > But at least you _can_ mount /home noexec, and in many circumstances > > > that'll be a perfectly practicable solution... :P > > > > It's not a c

Re: Do we really need to worry about viruses

2003-10-02 Thread ScruLoose
On Thu, Oct 02, 2003 at 09:27:48PM -0500, John Hasler wrote: > ScruLoose writes: > > But at least you _can_ mount /home noexec, and in many circumstances > > that'll be a perfectly practicable solution... :P > > It's not a complete solution. It's just another layer of defense. This is entirel

Re: Do we really need to worry about viruses

2003-10-02 Thread John Hasler
ScruLoose writes: > But at least you _can_ mount /home noexec, and in many circumstances > that'll be a perfectly practicable solution... :P It's not a complete solution. It's just another layer of defense. -- John Hasler [EMAIL PROTECTED] (John Hasler) Dancing Horse Hill Elmwood, WI -- To

Re: Do we really need to worry about viruses

2003-10-02 Thread ScruLoose
On Thu, Oct 02, 2003 at 02:04:48PM -0500, Alan Shutko wrote: > Michael D Schleif <[EMAIL PROTECTED]> writes: > > > In fact, just this week, I am engaged with a prominent software > > development company, and every one of the developers develops on > > various Linux boxen, and every one of them ins

Re: Do we really need to worry about viruses (was Re: Anyone else notice that Swen is slowing down?)

2003-10-02 Thread Bijan Soleymani
On Fri, Oct 03, 2003 at 01:42:28AM +0100, Karsten M. Self wrote: > E.g.: there are _good_, _solid_ reasons Debian doesn't allow Mozilla to > run as root, why X11 TCP connections are disabled by default, and why > SSH is strongly recommended. Yes, it's possible to override or ignore > these settin

Re: Do we really need to worry about viruses (was Re: Anyone else notice that Swen is slowing down?)

2003-10-02 Thread Karsten M. Self
on Thu, Oct 02, 2003 at 01:36:06PM -0500, Michael D Schleif ([EMAIL PROTECTED]) wrote: > Ron Johnson <[EMAIL PROTECTED]> [2003:10:02:04:44:28-0500] scribed: > > On Wed, 2003-10-01 at 23:17, ScruLoose wrote: > > > On Wed, Oct 01, 2003 at 07:56:07PM -0500, Michael D Schleif wrote: > > > > "Karsten M.

RE: Do we really need to worry about viruses

2003-10-02 Thread Joyce, Matthew
> -Original Message- > From: Daniel B. [mailto:[EMAIL PROTECTED] > Sent: Friday, 3 October 2003 8:00 AM > To: [EMAIL PROTECTED] > Cc: Debian-User > Subject: Re: Do we really need to worry about viruses > > > "Jamin W. Collins" wrote: > > ..&q

Re: Do we really need to worry about viruses

2003-10-02 Thread Monique Y. Herman
On Thu, 02 Oct 2003 17:59:34 -0400, Daniel B. <[EMAIL PROTECTED]> penned: > "Jamin W. Collins" wrote: >> .." >> >> Aye, but you do have backups right? Are your backup locations >> accessible as mounted file systems where your user has ready read/write >> access to them? I would certainly hope no

Re: Do we really need to worry about viruses

2003-10-02 Thread Daniel B.
Alan Shutko wrote: > > Ron Johnson <[EMAIL PROTECTED]> writes: > ... > > And a click-thru virus (or is it really a trojan?) can only do > > damage to files that you have privs to touch (unless there's a bug > > in Java or JavaScript). > > ... But just saying "A virus > can't hurt a user unless i

Re: Do we really need to worry about viruses

2003-10-02 Thread Daniel B.
"Jamin W. Collins" wrote: > .." > > Aye, but you do have backups right? Are your backup locations > accessible as mounted file systems where your user has ready read/write > access to them? I would certainly hope not. Do you backups every day? Every minute? Every instant? If not, the user'

Re: Do we really need to worry about viruses

2003-10-02 Thread Alan Shutko
Ron Johnson <[EMAIL PROTECTED]> writes: > How can an email virus work on *ix? How does it work on Windows? Either convince the user to click on a link, or exploit a bug in the MUA. When it has code running, scan the user's address book and mail archives, and send out lots of email. Include you

Re: Do we really need to worry about viruses

2003-10-02 Thread Jamin W. Collins
On Thu, Oct 02, 2003 at 03:24:21PM -0500, Ray wrote: > > i personally have not seen an email virus work on *ix, but as far as > damage, you normally don't need full root access to destroy a box for > a user. after all, most people keep their work in places that they > can work on them (read+write

Re: Do we really need to worry about viruses

2003-10-02 Thread Ray
On Thursday 02 October 2003 15:07, Ron Johnson wrote: > How can an email virus work on *ix? > > And a click-thru virus (or is it really a trojan?) can only do > damage to files that you have privs to touch (unless there's a bug > in Java or JavaScript). > i personally have not seen an email virus

Re: Do we really need to worry about viruses

2003-10-02 Thread Ron Johnson
On Thu, 2003-10-02 at 14:04, Alan Shutko wrote: > Michael D Schleif <[EMAIL PROTECTED]> writes: > > > In fact, just this week, I am engaged with a prominent software > > development company, and every one of the developers develops on > > various Linux boxen, and every one of them insists on runni

Re: Do we really need to worry about viruses

2003-10-02 Thread Alan Shutko
Michael D Schleif <[EMAIL PROTECTED]> writes: > In fact, just this week, I am engaged with a prominent software > development company, and every one of the developers develops on > various Linux boxen, and every one of them insists on running as root. Could you name names, so we know which imbeci

Re: Do we really need to worry about viruses (was Re: Anyone else notice that Swen is slowing down?)

2003-10-02 Thread Michael D Schleif
Ron Johnson <[EMAIL PROTECTED]> [2003:10:02:04:44:28-0500] scribed: > On Wed, 2003-10-01 at 23:17, ScruLoose wrote: > > On Wed, Oct 01, 2003 at 07:56:07PM -0500, Michael D Schleif wrote: > > > "Karsten M. Self" <[EMAIL PROTECTED]> [2003:10:02:00:37:35+0100] scribed: > [snip] > > > That kind of exec

Do we really need to worry about viruses (was Re: Anyone else notice that Swen is slowing down?)

2003-10-02 Thread Ron Johnson
On Wed, 2003-10-01 at 23:17, ScruLoose wrote: > On Wed, Oct 01, 2003 at 07:56:07PM -0500, Michael D Schleif wrote: > > "Karsten M. Self" <[EMAIL PROTECTED]> [2003:10:02:00:37:35+0100] scribed: [snip] > > That kind of executable -- one that entices a user to click on it -- is > > just as real a thre