Jak je to s obojživelným virem pro Linux i Win?

NewsForge testovalo účinnost tzv. obojživelného viru [zprávička], který má být schopen nakazit jak linuxové, tak windows programy. Jak virus "obstál", si můžete přečíst v článku Hands-on testing of the new Linux virus.

19.4.2006 09:13 | Robert Krátký | Zajímavý článek

Komentáře

[Kozuch]

Necetl to nekdo?

[belisarivs]

We sent an email to Linus Torvalds to let him know about our testing. He replied:

That said, it sounds like it's a regular program that just happens to work on both Windows and Linux, and that happens to do things that are perfectly OK per se (i.e. writing to files that are owned by the user). So it's interesting just because of the "works on both Linux and Windows" angle, not because of any viral nature.

A post we sent to the Linux Kernel Mailing List offering the "proof of concept" code to any kernel hackers interested to trying to figure out why it works on some versions of the kernel but not on others has been ignored. Obviously, the people concerned about the inner workings of the kernel are not as concerned about this threat as those selling anti-virus software.

Based on our examination of the code, Linux users need to be aware of two things. First, given the right permissions, a virus can replicate itself on Linux. This, however, has never been in doubt -- it remains to be seen whether malware authors can create a virus that can spread as easily on Linux as viruses on Windows. Second, this "proof of concept" is an excellent example of why running as root is a very bad idea.