Comment on Never-before-seen Linux malware gets installed using 1-day exploits

Warl0k3@lemmy.world ⁨8⁩ ⁨months⁩ ago

• halcyoncmdr@lemmy.world ⁨8⁩ ⁨months⁩ ago

  Also keep in mind that the main reason Windows is targeted for so many exploits is because of the consumer market share. If Linux consumer market share goes up, so will general malware targeting it. We already saw it happen when OSX share increased and Apple had to abandon the whole “Macs don’t get viruses” schtick.

  source

  • Chozo@fedia.io ⁨8⁩ ⁨months⁩ ago

    We already saw it happen when OSX share increased and Apple had to abandon the whole "Macs don't get viruses" schtick.

    It's kinda crazy that Apple got away with spinning "Our products don't sell well enough for this to be a problem" into a marketing point for as long as they did.

    source

    • Bimbleby@lemmy.world ⁨8⁩ ⁨months⁩ ago

      I assume they said it was due to other reasons than obscurity, although we know better.

      source

      • GenderNeutralBro@lemmy.sdf.org ⁨8⁩ ⁨months⁩ ago

        It was due to other reasons, too.

        One of the main malware vectors back then was Internet Explorer (and specifically ActiveX), Outlook Express, and MS Office macros. That’s not just a matter of obscurity; it’s because Microsoft specifically wrote very shitty software with no regard for security. Netscape was not nearly as exploited as IE even when it was the leading browser.

        source
    • bamboo@lemmy.blahaj.zone ⁨8⁩ ⁨months⁩ ago

      Apple always does that. After iAds failed, they pivoted into advertising a privacy focused ad campaign to counter Google. Had iAds succeeded, they’d be perfectly fine into getting into that business.

      source

      • Rye@lemmy.blahaj.zone ⁨8⁩ ⁨months⁩ ago

        How did it take 6 yrs to fail tho

        en.wikipedia.org/wiki/IAd

        source
  • rbos@lemmy.ca ⁨8⁩ ⁨months⁩ ago

    Linux has had a long history of worms and viruses, fortunately (sorta) thanks to its server legacy. Dumb and lazy server admins have given it pretty good ‘secure by default’ behaviours and cultures.

    Desktop users though: while different set of challenges.

    source
• Molecular0079@lemmy.world ⁨8⁩ ⁨months⁩ ago

  I mean, I don’t think I would mind forced updates if they didn’t take so damned long and fail half the time. And then, just when you think you’ve finished installing all updates, you reboot and there’s more updates! Why can’t they just install it all at once?

  Plus, after each major update, Microsoft wastes your time by advertising to you about Edge, Office 365, and OneDrive before they even let you get back into the desktop.

  Forced security updates is addressing a symptom but not addressing the root cause, which is that the Windows update process is just painful for a myriad of reasons. In Linux, I run one command, wait 5 minutes, reboot, and I am back to work.

  source

  • KairuByte@lemmy.dbzer0.com ⁨8⁩ ⁨months⁩ ago

    I legitimately haven’t had a windows update take more than 5 minutes during the reboot phase for years. Most of the time it’s about 30 seconds.

    source

    • halcyoncmdr@lemmy.world ⁨8⁩ ⁨months⁩ ago

      Same here. I don’t know what people that have all these issues are doing, but none of my systems or those of my friends and family have these issues.

      We also aren’t fucking around with the various random guides to “debloat”, mess with telemetry, eetc. however, so I can only assume that it’s things in those guides and programs that cause issues. For the people with enough technical knowledge to look for the guides but not enough knowledge to know what they do, or care enough to find out.

      The longest update I’ve had took about 15 minutes. My system never restarts in the middle of use to install updates, with the only exception when I was actively hitting the delay button for several days to see if I could force it to. And it finally did, after several days of it asking and me telling it no, and it still gave me a countdown to save my work. It did not randomly restart while in use without warning.

      Programs like candy crush, that had install links that were preinstalled (it’s not the full game, just a link to install it) I uninstalled like any regular app and they never returned. I use my system like a regular user, not mucking about blindly in the registry, and never run into these weird issues people complain about. I block telemetry I don’t want at the network level. The OS never knows and I don’t have to blindly trust random guides telling me to mess with things that aren’t intended to be messed with. The OS seems to work just fine with telemetry connections working but failing to connect, as would be expected and tested by MS. People messing with those things manually is not something they’d likely spend much, if any, time on testing.

      source

      • MrScottyTay@sh.itjust.works ⁨8⁩ ⁨months⁩ ago

        It’s people who had a single bad experience 15-20 years ago, or heard second hand of such issues. Or if they’ve experienced it recently then they were probably running a very slow hard drive rather than an ssd.

        source

        • -> View More Comments
      • conciselyverbose@sh.itjust.works ⁨8⁩ ⁨months⁩ ago

        The problem with windows is it’s one time it’s installing ads that you have to disable for apps, a different time it’s installing ads by re-enabling Cortana and forcing local searches over the web, a different time it’s adding ads by installing a bullshit weather app, a different time it’s adding ads with a bullshit news app, a different time it’s reverting all your settings limiting spyware telemetry, a different time…

        It’s not one thing repeatedly. But it’s constantly whack an old to figure out how to disable the newest hostile anti-feature it installed without your consent.

        source

        • -> View More Comments
      • Molecular0079@lemmy.world ⁨8⁩ ⁨months⁩ ago

        The longest update I’ve had took about 15 minutes.

        Asking someone to take 15 minutes out of their work time to do updates is exactly why people DON’T want to update. Even 15 minutes is insane. That’s a whole standup meeting, that’s a whole presentation, that’s work disruption for a bunch of people.

        Linux updates in a minute. That’s the kind of performance we SHOULD be expecting in the modern age and that Microsoft refuses to deliver.

        source

        • -> View More Comments
    • Molecular0079@lemmy.world ⁨8⁩ ⁨months⁩ ago

      I legitimately haven’t had a windows update take more than 5 minutes during the reboot phase for years.

      I wasn’t just talking about the reboot phase…

      Downloading gigabytes worth of updates, waiting for them to install, rebooting, see more updates, reboot again takes WAY more than 5 minutes.

      source

      • KairuByte@lemmy.dbzer0.com ⁨8⁩ ⁨months⁩ ago

        But why are you paying attention to a process that a) doesn’t need supervision and b) is done automatically in the background? It’s such a weird thing to complain about.

        Not to mention, the vast majority of windows updates are tiny. The only large updates are the yearly major updates. If you’ve got multi gig downloads happening even weekly, you might want to look into what’s wrong with your system.

        source

        • -> View More Comments
    • DingoBilly@lemmy.world ⁨8⁩ ⁨months⁩ ago

      Yep. I have no idea what people complain about with Windows update. Unless you just haven’t used it for 20 or so years.

      source
  • LadyAutumn@lemmy.blahaj.zone ⁨8⁩ ⁨months⁩ ago

    I love that on my arch setup, I update every single day, usually more than once, and doing so almost never requires me to powercycle my computer.

    source

    • Molecular0079@lemmy.world ⁨8⁩ ⁨months⁩ ago

      There is occasional weirdness if you don’t powercycle though. In particular, certain KDE updates will make the desktop misbehave until you reboot. I get where you’re coming from though. Quick updates and the ability to decide when you want to restart means that I have no qualms about updating frequently.

      I am on Arch too and pacman -Syu is usually a snack I have with my morning tea.

      source

      • XTL@sopuli.xyz ⁨8⁩ ⁨months⁩ ago

        If the desktop misbehaves, just restart the desktop (log out and in again)?

        source
      • coolmojo@lemmy.world ⁨8⁩ ⁨months⁩ ago

        You can log out, then CTRL + ALT + F1 , log in and run the update command. If there was no kernel update, you don’t have to reboot. If some service got updated restart the service (if that was not done by the updater.) Then you can switch back to the graphical session usually by CTRL + ALT + F7) and log in again.

        source

        • -> View More Comments
  • trolololol@lemmy.world ⁨8⁩ ⁨months⁩ ago

    Reboot? What for, most updates don’t need reboot.

    source
  • jabjoe@feddit.uk ⁨8⁩ ⁨months⁩ ago

    Market share is only any kind Linux dominates servers, routers, and any IOT big enough for a OS. This article is about servers.

    For Linux you install unattended upgrades and security updates are done automatically.

    source
• root@precious.net ⁨8⁩ ⁨months⁩ ago

  The problem with Windows Updates is that they force new ‘features’ on you along with the patches.

  With Linux you get to choose how bleeding edge you want to be, and can generally avoid the monetization crap.

  source

  • THE_ANTIHERO@lemmy.today ⁨8⁩ ⁨months⁩ ago

    I didn’t think linux had monetization do they ?

    source

    • bizzle@lemmy.world ⁨8⁩ ⁨months⁩ ago

      There is some enterprise stuff that charges out the ass, IIRC, but I think your comment speaks for itself regarding the home user.

      source

      • root@precious.net ⁨8⁩ ⁨months⁩ ago

        Ubtuntu Desktop definitely tries to push a few things but it’s not even remotely as bad as Windows.

        I prefer to live without my software nudging me to do anything.

        How would you feel if your hammer stopped working after a while and each new hammer suddenly looked a lot more like a screwdriver because the company wants to sell you screws?

        source
• jaschen@lemm.ee ⁨8⁩ ⁨months⁩ ago

  I remembered when OSX didn’t barely had any viruses and malware. Then their user base went up and more malware started to appear.

  I’m starting to think virus and malware creators only want to focus on making things that will actually be used. Linux being not one of them.

  source
• linearchaos@lemmy.world ⁨8⁩ ⁨months⁩ ago

  Even if you don’t pretend it’s way down from where it used to be.

  source
• spez_@lemmy.world ⁨8⁩ ⁨months⁩ ago

  I don’t want to install security updates. You cannot and will not force me. Case closed.

  source

  • Warl0k3@lemmy.world ⁨8⁩ ⁨months⁩ ago

    I have no idea if this is satire or not. Well done.

    source