RE: [expert] OT: /root
Title: RE: [expert] OT: /root Doesn't this still require the user to open an attachment? Meaning that most linux/unix root users would know better to not just run any file that was sent to them. Angelo -Original Message- From: Michael Holt [mailto:[EMAIL PROTECTED]] Sent: Monday, May 08, 2000 2:05 AM To: [EMAIL PROTECTED] Subject: Re: [expert] OT: /root Pj wrote: I know the guru's already know the Love Bug copycat has been ported to Linux, so this isn't for you. The new versions are called Jokes and Mother's Day Order Confirmation. The bad news for Linux users is if you read your mail in /root and NOT as /user - you are vunerable. Nuff said. Pj [EMAIL PROTECTED] I was under the impression that 'love bug' was written using VB sript and took advantage of the scripting host in Outlook Express... how then would that affect Linux? Mike -- == Michael Holt [EMAIL PROTECTED] Kirkland, WA == The Penguins are coming!!! ==
RE: [expert] OT: /root
On Mon, 15 May 2000, you wrote: Doesn't this still require the user to open an attachment? Meaning that most linux/unix root users would know better to not just run any file that was sent to them. AFAIK, there is no application in Linux/Unix/etc that runs VB Scripts. I could be wrong, but going by what I know, there is no such thing as a VB Script for *nix. John
Re: [expert] OT: /root
Pj wrote: I know the guru's already know the "Love Bug" copycat has been ported to Linux, so this isn't for you. The new versions are called "Jokes" and "Mother's Day Order Confirmation." The bad news for Linux users is if you read your mail in /root and NOT as /user - you are vunerable. Nuff said. Pj [EMAIL PROTECTED] I was under the impression that 'love bug' was written using VB sript and took advantage of the scripting host in Outlook Express... how then would that affect Linux? Mike -- == Michael Holt [EMAIL PROTECTED] Kirkland, WA == The Penguins are coming!!! ==
Re: [expert] OT: /root
The virus/worm is dependent on the Windows Scripting Host (Windows Security Hole). The major cause for concern for linux admins is that if your users are clueless Windows users and use Outlook as their mail client you can get swamped with a lot of crap email. All other stories of it being ported to linux/Unix are a hoax, as of 4/8/2000. --- Michael Holt [EMAIL PROTECTED] wrote: Pj wrote: I know the guru's already know the "Love Bug" copycat has been ported to Linux, so this isn't for you. The new versions are called "Jokes" and "Mother's Day Order Confirmation." The bad news for Linux users is if you read your mail in /root and NOT as /user - you are vunerable. Nuff said. Pj [EMAIL PROTECTED] I was under the impression that 'love bug' was written using VB sript and took advantage of the scripting host in Outlook Express... how then would that affect Linux? Mike -- == Michael Holt [EMAIL PROTECTED] Kirkland, WA == The Penguins are coming!!! == = Mage Grimau, Strange Unwashed Somewhat Slightly Dazed VoiceMail/Fax: 1-651-328-1145 __ Do You Yahoo!? Send instant messages get email alerts with Yahoo! Messenger. http://im.yahoo.com/
Re: [expert] OT: /root
Mike, I'm not a programmer or expert. My Linux guru and several friends who own ISP's; run some flavor of *NIX on servers and their own machines sent the warnings. I believe them. My own guru said as long as I read mail only as /user I am safe. I believe him. He then explained why /user was safe and /root wasn't. I didn't understand it, but I'm looking forward to the day when I do. In the meantime that's why he's the guru and I'm the newbie. He says; I do and it's a perfect relationship. My L-M machine runs better than Winblows ever did. MANDRAKE ROCKS!!! Pj Michael Holt wrote: Pj wrote: I know the guru's already know the "Love Bug" copycat has been ported to Linux, so this isn't for you. The new versions are called "Jokes" and "Mother's Day Order Confirmation." The bad news for Linux users is if you read your mail in /root and NOT as /user - you are vunerable. Nuff said. Pj [EMAIL PROTECTED] I was under the impression that 'love bug' was written using VB sript and took advantage of the scripting host in Outlook Express... how then would that affect Linux? Mike -- == Michael Holt [EMAIL PROTECTED] Kirkland, WA == The Penguins are coming!!! ==
Re: [expert] OT: /root
Pj, I just checked DataFellows' web site and did not see any reference to the notion that the Love Bug worm runs on Linux. I am highly skeptical that it does for two reasons: 1) It is VBScript based, and I am not aware of any VB Script interpreters for Linux other than Netscape. 2) Few, if any, Linux based mail readers will automatically run an unknown attachment. Mutt, PIne, Elm and RM and VM for Emacs do not. I am skeptical that any mail readers do. If they do, they would require user or administrator setup for the locations of the script interperters. Would you please ask your friends where they got this information? I expect that the ISPs on the list might like to know so they can determine for themselves whether the threat is real. On Mon, May 08, 2000 at 02:33:59AM -0500, Pj wrote: - Mike, - - I'm not a programmer or expert. My Linux guru and several friends who - own ISP's; run some flavor of *NIX on servers and their own machines - sent the warnings. I believe them. My own guru said as long as I read - mail only as /user I am safe. I believe him. He then explained why /user - was safe and /root wasn't. I didn't understand it, but I'm looking - forward to the day when I do. - - In the meantime that's why he's the guru and I'm the newbie. He says; I - do and it's a perfect relationship. My L-M machine runs better than - Winblows ever did. - - MANDRAKE ROCKS!!! - - Pj - - Michael Holt wrote: - - Pj wrote: - - I know the guru's already know the "Love Bug" copycat has been ported to Linux, so this isn't for you. - - The new versions are called "Jokes" and "Mother's Day Order - Confirmation." The bad news for Linux users is if you read your mail in - /root and NOT as /user - you are vunerable. Nuff said. - - Pj - [EMAIL PROTECTED] - - I was under the impression that 'love bug' was written using VB sript - and took advantage of the scripting host in Outlook Express... how then - would that affect Linux? - - Mike - -- - == - Michael Holt - [EMAIL PROTECTED] - Kirkland, WA - == - The Penguins are coming!!! - == -- -- C^2 No windows were crashed in the making of this email. Looking for fine software and/or web pages? http://w3.trib.com/~ccurley
Re: [expert] OT: /root
Oh yeah - no doubt that you shouldn't do ANYTHING as root unless it's system administration - that's always a good rule to live by. I was just curious as to the nature of a port of a virus written specifically for Windows; it's hard enough to get ports for everyday programs that have been around forever! I'm not saying it's not possible or hasn't happened, it's just that, with all due respect, that's how urban legends get started. Just for educational purposes, if anybody has anymore info on this, I wouldn't mind hearing more about it. Thanks, Mike Pj wrote: Mike, I'm not a programmer or expert. My Linux guru and several friends who own ISP's; run some flavor of *NIX on servers and their own machines sent the warnings. I believe them. My own guru said as long as I read mail only as /user I am safe. I believe him. He then explained why /user was safe and /root wasn't. I didn't understand it, but I'm looking forward to the day when I do. In the meantime that's why he's the guru and I'm the newbie. He says; I do and it's a perfect relationship. My L-M machine runs better than Winblows ever did. MANDRAKE ROCKS!!! Pj Michael Holt wrote: Pj wrote: I know the guru's already know the "Love Bug" copycat has been ported to Linux, so this isn't for you. The new versions are called "Jokes" and "Mother's Day Order Confirmation." The bad news for Linux users is if you read your mail in /root and NOT as /user - you are vunerable. Nuff said. Pj [EMAIL PROTECTED] I was under the impression that 'love bug' was written using VB sript and took advantage of the scripting host in Outlook Express... how then would that affect Linux? Mike -- == Michael Holt [EMAIL PROTECTED] Kirkland, WA == The Penguins are coming!!! ==
