| Author |
Message |
Lobster
Official Crustacean

Joined: 04 May 2005 Posts: 15109 Location: Paradox Realm
|
Posted: Fri 20 Jul 2012, 02:41 Post subject:
|
|
About a year or two ago I was testing Windows 7 and had it on my system. It was good, fast and seemed reliable enough. Good voice recognition. Played with a bit. Nothing too extreme.
Then I returned to Puppy and it was just on a partition in case I wanted to use anything.
So it got no real use. It offered me nothing. If Windows offers you something be careful.
Anyway . . . after a few months I came across a game or program that I wanted to try and booted into Windows 7.
It had been compromised.
How?
Basically through my visiting of dodgy sites. These sites are notorious for targeting and compromising Windows. They had detected a NTFS partition and downloaded malware. When? I don't know. Did not effect Puppy.
So in other words Windows malware can get on your system but you will have to go through the effort of keeping and activating Windows
in order to have that genuine Microsoft hijacking of your system experience . . .
Just running Puppy you will be safe
Windows - Just say No
Way!
_________________ Puppy WIKI
Last edited by Lobster on Sat 21 Jul 2012, 01:10; edited 1 time in total
|
|
Back to top
|
|
 |
ICPUG
Joined: 24 Jul 2005 Posts: 1278 Location: UK
|
Posted: Fri 20 Jul 2012, 07:58 Post subject:
|
|
Lobster - that experience is a bit worrying.
Are you saying that running Puppy (with presumably the NTFS partition not mounted) malware managed to mount the NTFS partition and install itself to it?
|
|
Back to top
|
|
 |
jafadmin
Joined: 19 Mar 2009 Posts: 343
|
Posted: Fri 20 Jul 2012, 15:54 Post subject:
|
|
Lobster, I'm skeptical. Sorry man. Extraordinary claims require extraordinary proof.
It boggles the mind that a virus enters through linux and infects a windows partition. Unheard of. If this is true, the linux world and puppy in particular are on the brink of an extinction event. This makes puppy linux the most vulnerable OS since Windows 95 since users always run as root.
|
|
Back to top
|
|
 |
Lobster
Official Crustacean

Joined: 04 May 2005 Posts: 15109 Location: Paradox Realm
|
Posted: Sat 21 Jul 2012, 01:29 Post subject:
|
|
Guys
I do not know enough to know the actual in and outs or if something else is happening.
However.
I used the NTFS partition to store downloaded files. So it was being mounted. During the download process it is quite possible for even a script kiddy using javascript to write something that will write to the NTFS drive in directories it expects to find (that is Windows folders) these may include rogue dll's. These do nothing on a Linux system.
Then a while later you access Windows and the dll's come into play.
I am not sure if that is what, or if this could happen but that is how I suspect it was done.
As for proving it. m m m . . . no interest.
Go ask crackers if they would, could or can go about it like this.
Or would prefer to use Flash exploits.
http://www.hackforums.net/
I am sure they have any proof you require.
Just deleted Windows and continued visiting dodgy sites. No trouble since.
Puppy proves it.
Linux is better.
_________________ Puppy WIKI
|
|
Back to top
|
|
 |
nooby
Joined: 29 Jun 2008 Posts: 9389 Location: SwedenEurope
|
Posted: Sat 21 Jul 2012, 06:46 Post subject:
|
|
I wish somebody would pull the plug for all kind of companies that sue each other and that use economic pressure on hardware makers to make it hard to install other OS on that HW.
Microsoft often behave in that way. Apple tend to do it too.
Even Google on Android does not make it very easy to root
and put a Linux on that smartphone instead.
So why would one keep Windows? Often it is the only way to update
some Smartphones. Even Android phones make use of Windows computers to do the update thing. impossible to do from Linux.
And even Raspberry Pi to do the transfer of file to the SD card in some versions works best using a windows exe file.
That is kind of embarrassing indeed. But maybe I did misunderstand it could be that that developer wanted to make it easy to do and if 90% of all computers do have Windows on them then why not use that then?
I never use Windows apart from once a year to update my Smartphone
or to do the IRS identity thing for to do the Taxes in a legal way.
But they have promised that one "soon" should be able to use Linux for such "identity authentication" too.
_________________
I'm a noob so I use Google Search of Puppy Forum
|
|
Back to top
|
|
 |
rcrsn51

Joined: 05 Sep 2006 Posts: 7756 Location: Stratford, Ontario
|
Posted: Sat 21 Jul 2012, 07:10 Post subject:
|
|
| Quote: | | It had been compromised. |
How?
| Quote: | | I used the NTFS partition to store downloaded files. |
You may be reading too much into this situation. Maybe Win7 just detected the external activity in its partition and interpreted it as an attack.
|
|
Back to top
|
|
 |
Lobster
Official Crustacean

Joined: 04 May 2005 Posts: 15109 Location: Paradox Realm
|
Posted: Sun 22 Jul 2012, 05:15 Post subject:
|
|
| rcrsn51 wrote: | It had been compromised.
How? |
Probably something along these lines. PDF (which as an in built programming language) is also exploitable . . . oh dear . . . knew this was possible . . . now they are doing it . . .
http://www.sophos.com/en-us/security-news-trends/reports/security-threat-report/html-09.aspx
As for the ins and outs.
When the computing is slow and the browser being redirected, something is amiss. I really don't have the inclination to remember or investigate.
I prefer to use my computer. So I just had an unworkable system (it had been working nicely before).
Deleted Windows. Problem solved.
Sorry to not be able to offer more info.
Puppy Linux
Stay Safe
_________________ Puppy WIKI
|
|
Back to top
|
|
 |
jafadmin
Joined: 19 Mar 2009 Posts: 343
|
Posted: Mon 23 Jul 2012, 07:36 Post subject:
|
|
I'd really be interested in seeing how a virus hitting puppy can find a windows drive? How does it know sda2 is an ntfs drive for instance?
The reason windows machines are so vulnerable is because of things like standard drive letters and %profile% environment variables. While linux can read ntfs drives, it ignores these M$ conventions.
Of greater concern is that you're reporting that puppy is becoming vulnerable to executing remote virus code and it is infecting drives via the puppy OS.
Since puppy users run as root this is extremely troubling.
|
|
Back to top
|
|
 |
ICPUG
Joined: 24 Jul 2005 Posts: 1278 Location: UK
|
Posted: Mon 23 Jul 2012, 08:00 Post subject:
|
|
| jafadmin wrote: | Of greater concern is that you're reporting that puppy is becoming vulnerable to executing remote virus code and it is infecting drives via the puppy OS.
Since puppy users run as root this is extremely troubling. |
It's not troubling me any more now that Lobster has admitted he had the ntfs partition mounted while online with Puppy. The solution is not to have the ntfs partition mounted.
If you use Puppy as a sandbox it is a bit pointless opening a door to the big wide world.
|
|
Back to top
|
|
 |
Lobster
Official Crustacean

Joined: 04 May 2005 Posts: 15109 Location: Paradox Realm
|
Posted: Tue 24 Jul 2012, 02:05 Post subject:
|
|
| Quote: | | Since puppy users run as root this is extremely troubling. |
Since deleting Windows I am untroubled. The attack was not a virus. If anything it is a Windows URL redirect script or maybe it turned my Windows installation into a zombie.
http://en.wikipedia.org/wiki/Zombie_%28computer_science%29
I do not use GROWL, though I wrote it for the troubled . . .
http://puppylinux.org/wikka/security
or use Tor.
or use Kirk and James Bond 'Fatdog' which has a little security hardening
I have a simple policy that has worked for years.
Windows
Just say No!
However some people are dual booting or need to run essential Windows programs. How should they proceed?
| Quote: | | But that’s only one part of a much larger awareness of security issues (which apply, by the way, even if you’re using a platform other than Windows). You should be running as a standard user, and your network should be behind a hardware router, and all connected PCs should have up-to-date antimalware protection in place, and you should avoid the kinds of behaviors that might take you to unsafe websites, and you should be vigilant of phishing attempts… In short, security awareness isn’t something you just think about once or twice a month, when patches arrive, but is a part of the overall way you approach computing. |
http://www.edbott.com/weblog/2008/07/the-myth-of-the-four-minute-windows-survival-time/
_________________ Puppy WIKI
Last edited by Lobster on Tue 24 Jul 2012, 06:33; edited 1 time in total
|
|
Back to top
|
|
 |
nooby
Joined: 29 Jun 2008 Posts: 9389 Location: SwedenEurope
|
Posted: Tue 24 Jul 2012, 06:20 Post subject:
|
|
I have not read this one
"the-myth-of-the-four-minute-windows-survival-time/"
But I have read a true story on idg.se which is our version of PCWorld Magazine.
Here in sweden they used several computers with a completely new install of Windows on it and it took from 10 to 20 minutes and it had very severe trojans on it. I don't remember if that where 5 or 7 different computers but as I get it it where no myth then say two or more years ago.
Maybe win7 is more secure?
So why "Why keep Windows?"
Because it is the only way to update smartphones and to get a linux going?
Okay if you already are a Linux enthusiast then maybe you can get linux going without needing a Window to make the first CD or DVD or USB for to boot your first Linux? You do need something to download the linux iso with? Just friendly teasing.
I do have a poor memory but some of the ARM computers for to install that Linux on them you did need windows to bring over the downloaded file?
That is how I remember it. I can be wrong.
_________________
I'm a noob so I use Google Search of Puppy Forum
|
|
Back to top
|
|
 |
rcrsn51

Joined: 05 Sep 2006 Posts: 7756 Location: Stratford, Ontario
|
Posted: Tue 24 Jul 2012, 10:23 Post subject:
|
|
| jafadmin wrote: | | Since puppy users run as root this is extremely troubling. |
| Code: | | su -c defaultbrowser spot |
|
|
Back to top
|
|
 |
bigpup

Joined: 11 Oct 2009 Posts: 3687 Location: Charleston S.C. USA
|
Posted: Tue 24 Jul 2012, 12:59 Post subject:
|
|
Linux does have malware.
http://en.wikipedia.org/wiki/Linux_malware
_________________ I have found, in trying to help people, that the things they do not tell you, are usually the clue to solving the problem.
Puppy Help 101 An interactive tutorial for Puppy 5.2.5
|
|
Back to top
|
|
 |
T_Hobbit

Joined: 27 May 2006 Posts: 400 Location: Portugal - Lisbon
|
Posted: Thu 02 Aug 2012, 19:00 Post subject:
|
|
Why keep Windows? Privateer!
(Using DOS mode of W98SE)
_________________ T_Hobbit
Rebuilding old DOS Machine for Wing Commander Privateer and Puppy Old spare parts to give away - anyone interested 
|
|
Back to top
|
|
 |
Lobster
Official Crustacean

Joined: 04 May 2005 Posts: 15109 Location: Paradox Realm
|
Posted: Thu 02 Aug 2012, 20:30 Post subject:
|
|
I would prefer to be using ReactOS as the better option
http://www.reactos.org/wiki/Roadmap
. . . development seems slow . . . they need such paltry amounts of cash . . .
_________________ Puppy WIKI
|
|
Back to top
|
|
 |
|