Malware Found Hidden In Screensaver On Gnome-Look

AndGodSed writes "OMG! UBUNTU! Reports the following: 'Malware has been found hidden inside an innocuous 'waterfall' screensaver .deb file made available on popular artwork sharing site Gnome-Look.org. The .deb file installs a script with elevated privileges designed to perform a DDoS attack as well as keep itself updated via downloads. The dodgy screensaver in question has since been removed from gnome-look, and this incident was a very basic, if potentially successful, attempt.'" A similar report at Digitizor.com says that similar malware was also found in a theme called Ninja Black. For those affected, both sites also provide instruction on cleansing your system.

YES! Finally!

[binarylarry]

It's the YEAR OF THE LINUX desktop! It's official! /Happy Ubuntu User

Re:Of course the ninja was infected...

[royallthefourth]

He scurries in the darkness because he fears the light that is the Sun Source... Sinanju.

So Solaris users are unaffected?

Patch news...

[ghostis]

The Gnome team is working with several university neurology departments to develop a patch for human nature that fixes this problem. It will be included in Gnome 4.

Re:Not more safe

[nschubach]

... which has nothing to do with how secure the operating system is, but the profile itself.

Re:The Elegance of Programming

[sexconker]

There is an easier (read: more elegant) way to get rid of this Linux malware:

sudo rm -rf /

Pussies.
rm -rf /
works fine for me!

Re:Not more safe

[LinuxIsGarbage]

I always tell users to only download software from sites like Softpedia or Download.com. Plus you get the "choice" of what site you want. And we all know that choice is a good thing!

Re:Not more safe

[kenshin33]

well, I'm not questioning sudo per say (it's useful) and yes you can manage it's use. What I call implicit (less explicit would more curate)is the way Ubuntu (may be other distros I don;t know, I'm a gentoo user)) uses it, yes you have to enter a password, But opening a terminal and typing "su" (or sudo for that matter) is more explicite. Meaning you won't do it just for pleasure, and therefore most likely you know what you're about to do. Any app that wants root priviledges can popup a window (gksu, gksudo). While it's convenient, it's more dangerous. most people don;t actually read carefully before clicking.

Re:Not more safe

[Rockoon]

No I am not. You have assumed there is a false dichotomy because you imagine repository resources to be infinite.

The argument is that people want 3rd party software, ergo if the repository does not have it then people will go somewhere else for it.

The response to this point is that repositories strive to have as much 3rd party software as possible on them. This would be fine and dandy if there is no raised entry bar, because there could theoretically be enough resources to host every 3rd party program that exists (for instance, Google could.)

But you have imagined a world where there is also enough human resources in order to maintain that raised entry bar (humans looking over source code, accepting and rejecting programs based on what they are programmed to do) while also overcoming the need to download 3rd party programs from someplace else

If Linux had 95% market share, no software repository on the planet could keep up with the *submissions* to it while also maintaining that raised bar of yours, because they simply cannot allocate enough humans to the task.

Security is like sex

[argent]

Security is like sex. Once you're penetrated you're ****ed.

When you install software, you're having unsafe sex.

Don't do it lightly.

Re:Patch news...

[refactored]

The Gnome team is working with several university neurology departments to develop a patch for human nature that fixes this problem. It will be included in Gnome 4.

Don't you mean "Genome 4"?

Interesting...

[jonaskoelker]

Gnome team is working [...]] to develop a patch for human nature that fixes this problem.

I suspect they've decided that a free will is unusable and will replace it with sane defaults ;)

Re:Not more safe

[Waffle Iron]

I was going to comment on your post, but I've set my system to allow the browser to send only 100 cha

Good News

[savvyart]

Finally, the year of Linux desktop is coming. Even malware authors are taking notice and creating trojans and sneakware, so indeed linux adoption is up, yay!

Re:Not more safe

[ZarathustraDK]

Yes, we need a new kind of package that only gives root-priveleges to packages that do Good Stuff(TM) ^^