Become a fan of Slashdot on Facebook

 


Forgot your password?
Close
typodupeerror
×

Comment I think you've already decided... (Score 5, Insightful) 600

by Jeff321 (#30278562) Attached to: Ethics of Releasing Non-Malicious Linux Malware?

There were two options:
1. Release it anonymously and take no credit
2. Write about it and get some credit (but then you can't actually release it due to legal issues)

You can't (and won't) release it now. If somebody gets attacked with your code, guess who they're going to prosecute and/or sue.
Security

Ethics of Releasing Non-Malicious Linux Malware? 600

Posted by kdawson from the what-would-schneier-do dept.
buchner.johannes writes "I was fed up with the general consensus that Linux is oh-so-secure and has no malware. After a week of work, I finished a package of malware for Unix/Linux. Its whole purpose is to help white-hat hackers point out that a Linux system can be turned into a botnet client by simply downloading BOINC and attaching it to a user account to help scientific projects. The malware does not exploit any security holes, only loose security configurations and mindless execution of unverified downloads. I tested it to be injected by a PHP script (even circumventing safe mode), so that the Web server runs it; I even got a proxy server that injects it into shell scripts and makefiles in tarballs on the fly, and adds onto Windows executables for execution in Wine. If executed by the user, the malware can persist itself in cron, bashrc and other files. The aim of the exercise was to provide a payload so security people can 'pwn' systems to show security holes, without doing harm (such as deleting files or disrupting normal operation). But now I am unsure of whether it is ethically OK to release this toolkit, which, by ripping out the BOINC payload and putting in something really evil, could be turned into proper Linux malware. On the one hand, the way it persists itself in autostart is really nasty, and that is not really a security hole that can be fixed. On the other hand, such a script can be written by anyone else too, and it would be useful to show people why you need SELinux on a server, and why verifying the source of downloads (checksums through trusted channels) is necessary. Technically, it is a nice piece, but should I release it? I don't want to turn the Linux desktop into Windows, hence I'm slightly leaning towards not releasing it. What does your ethics say about releasing such grayware?"
Image

Microsoft Exec Says, "You'll Miss Vista" 273

Posted by samzenpus from the cold-day-in-hell dept.
Oracle Goddess writes "'Years from now, when you've moved on to Windows 7, you'll look back at Windows Vista fondly. You'll remember its fabulous attributes, not its flaws.' That's the opinion of Steve Guggenheimer, vice president of the OEM division at Microsoft. 'I think people will look back on Vista after the Windows 7 release and realize that there were actually a bunch of good things there,' Guggenheimer said in a recent interview. 'So it'll actually be interesting to see in two years what the perception is of Vista.' A dissenting opinion comes from Bob Nitrio, president of system builder Ranvest Associates, doesn't believe organizations that skipped Vista will ever regret their decision. 'I don't think for a second that people are suddenly going to love Windows 7 so much that they will experience deep pangs of regret for not having adopted Vista,' said Nitrio. If I had to bet, I'd go with Bob's take on it." My first thought was, Steve meant Windows 7 is designed to be virtually unusable as payback for all the complaints about Vista, but I might be biased.
Games

The Speed Gamers Raise Over $26,000 For Charity 65

Posted by Soulskill from the and-counting dept.
Levonn Lawrence writes "Moving into day four of seven, The Speed Gamers (TSG) continue to play a Final Fantasy marathon for an unusual reason: charity. The guys at TSG are playing through every main Final Fantasy game, from one to twelve, over a period of seven days in hopes or raising $50,000 for ACT Today (Autism Care and Treatment). The marathon is streamed live for people to watch. ACT is a charity helping to financially support families effected by Autism. The marathon started 6pm CST, Friday, July 17th, 2009 and is going until Friday, July 24th 2009. So far they've raised over $26,000 (not a typo) and they're only 89 hours in."
PC Games (Games)

Is Cataclysm the Next World of Warcraft Expansion? 259

Posted by Soulskill from the either-that-or-it's-not dept.
ajs writes "There has been no official announcement yet, but a number of moves by Blizzard Entertainment seem to indicate that the next expansion for World of Warcraft could be titled Cataclysm. Speculation began when Blizzard trademarked Cataclysm recently, and then later when a test server briefly popped up with the word 'Maelstrom' in its name. If true, the name would fall neatly into the WoW lore and expected expansion list. The Cataclysm is another name for the Great Sundering, an event that created a swirling vortex of water and mystical energies (the 'Maelstrom') that has appeared on the world map in-game since release. There are also indications that early design work included some of the islands in this area, which has long fueled anticipation of a Maelstrom-based expansion involving the former Night Elf noble, Azshara, queen of the Naga and the Goblins whose main city is in the south seas."

Slashdot Top Deals

Thus spake the master programmer: "After three days without programming, life becomes meaningless." -- Geoffrey James, "The Tao of Programming"

Close