lkml.org 
[lkml]   [1997]   [Feb]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: Bliss Virus (fwd)
Date
From

In message <Pine.OSF.3.91.970207130624.23457A-100000@cscu.csc.edu>, Seth Edward
s writes on very interesting note:

> The Bliss virus is currently a Linux binary-infecting virus.
> Unfortunately, please do not feel your safe.

OK, I won't feel my safe... :)

> The author has stated that his code runs "fine" on Sun Solaris and SunOS,
> as he used little Linux specific code. I don't know if the source code
> for this is available, although I do know that it is being dis-assembled
> as we speak.
>
> I might also add that I tested it on FreeBSD, running an infected Linux
> binary via Linux emulation. This test proved that even the Linux strain
> can infect FreeBSD machines with emulation.

Sure, if through some miracle the system let it run in a ring 0
environment.

> packages). Also, consider using switching hubs and/or smart hubs in
> "secure" mode. (there is usually a mode to scramble all packets not going
> to the remote MAC address). I also recommend firewalls, and routine

This won't help you since any leg with a machine on it cannot be
scrambled. If it were, the machine(s) would not be able to see it...

> backups/compares (WITH WRITE PROTECTED TAPES!). While you are at it, make
> sure you are running new sendmail.

Oh I see, this is a conspiracy! :)


\
 
 \ /
  Last update: 2005-03-22 13:38    [W:0.058 / U:0.356 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site