February 2016 - WLUG - wlug.mailman3.com

Linux Malware

by Gregory Boyce

On Thu, Feb 25, 2016 at 6:40 PM James Barclay <andinadditiontothat(a)gmail.com> wrote: > A few days ago I watched a Matthew Moore You tube "Mythbusting Linux" > (Https//www.youtube.com/watch?v=y_lhqg_p21k) and he shows how he got > malware and his Arch Linux was hacked. I am using Linux Mint 17.3 and now > have an antivirus program. > His "malware infection" on his Arch box consisted of some .exe and .dll files. The existence of Windows malware on a disk doesn't make your linux system infected. Additionally, the "malware" seems to be a malware sample from an anti-virus vendor: http://www.tekdefense.com/downloads/malware-samples/

Feb. 26, 2016

Re: [Wlug] Wlug Digest, Vol 148, Issue 9

by James Barclay

A few days ago I watched a Matthew Moore You tube "Mythbusting Linux" (Https//www.youtube.com/watch?v=y_lhqg_p21k) and he shows how he got malware and his Arch Linux was hacked. I am using Linux Mint 17.3 and now have an antivirus program. I used Comodo for my XP and have it here. So now I guess we should have to buy an antivirus. I'm also looking for better ways to email and since I now have Yandex and Zoho as well as Gmail perhaps there is one even safer. I would also like to give kudos to Apple for refusing to give up the master key codes to NSA, DHS and the FBI though they have reasonably cooperated with these agencies in the past. All this from a newbie. Thank you. On Wed, Feb 24, 2016 at 12:00 PM, <wlug-request(a)mail.wlug.org> wrote: > Send Wlug mailing list submissions to > wlug(a)mail.wlug.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://mail.wlug.org/mailman/listinfo/wlug > or, via email, send a message with subject or body 'help' to > wlug-request(a)mail.wlug.org > > You can reach the person managing the list at > wlug-owner(a)mail.wlug.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Wlug digest..." > > > Today's Topics: > > 1. Linux Mint servers hacked (Richard Klein) > 2. Re: Linux Mint servers hacked (John Platt) > 3. Topic ideas for next meeting? (Tim Keller) > 4. Re: Topic ideas for next meeting? (Frank Sweetser) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 23 Feb 2016 15:37:12 -0500 > From: Richard Klein <rich(a)richardklein.org> > Subject: [Wlug] Linux Mint servers hacked > To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > Message-ID: > < > CA+_AdvkWx4V9ui1R5iNEN+df2dBwgaMf+EXXYD2Lp2QaqfFh2A(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > I haven't read the whole story, but apparently intruders managed to > put an ISO on their servers that included a backdoor. If you > downloaded an ISO from them on Saturday, you're at risk. > > http://blog.linuxmint.com/?p=2994 > > > ------------------------------ > > Message: 2 > Date: Tue, 23 Feb 2016 15:54:46 -0500 > From: John Platt <jplatt39(a)gmail.com> > Subject: Re: [Wlug] Linux Mint servers hacked > To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > Message-ID: > < > CAKNsmOgOxN19wzaR9Gw_BX2X68+CVBz29BiDu5YuoGWGYD9J4A(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > Steven J. Vaughan-Nichols who is a big Linux Mint fan says that if you used > bittorent or did not use a mirror you are safe. > > http://www.zdnet.com/article/has-your-linux-mint-desktop-been-hacked/ > > On Tue, Feb 23, 2016 at 3:37 PM, Richard Klein <rich(a)richardklein.org> > wrote: > > > I haven't read the whole story, but apparently intruders managed to > > put an ISO on their servers that included a backdoor. If you > > downloaded an ISO from them on Saturday, you're at risk. > > > > http://blog.linuxmint.com/?p=2994 > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > http://mail.wlug.org/pipermail/wlug/attachments/20160223/21b884c9/attachmen… > > ------------------------------ > > Message: 3 > Date: Tue, 23 Feb 2016 16:16:29 -0500 > From: Tim Keller <turbofx(a)gmail.com> > Subject: [Wlug] Topic ideas for next meeting? > To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > Message-ID: > < > CA+r3vQh5sTuh9sBtR6dNHVtLH+TEfyBSeWb-x-CuJW3trBGA4w(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > Hey Gang, > > Anybody got any ideas for next meeting? > > My buddy Nick is going to be out of the country for the next meeting, so > he's yet again a no show... > > Thanks, > Tim. > > -- > I am leery of the allegiances of any politician who refers to their > constituents as "consumers". > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > http://mail.wlug.org/pipermail/wlug/attachments/20160223/2fccfe01/attachmen… > > ------------------------------ > > Message: 4 > Date: Tue, 23 Feb 2016 18:55:58 -0500 > From: Frank Sweetser <fs(a)WPI.EDU> > Subject: Re: [Wlug] Topic ideas for next meeting? > To: Worcester Linux Users Group <wlug(a)mail.wlug.org>, Tim Keller > <turbofx(a)gmail.com> > Message-ID: <28F9BAC6-0A5A-4E33-BA96-3CA92F7C1B15(a)wpi.edu> > Content-Type: text/plain; charset="utf-8" > > It wouldn't be a huge topic, but I could talk about the RPZ security > feature in BIND: > > https://dnsrpz.info/ > > On February 23, 2016 4:16:29 PM EST, Tim Keller <turbofx(a)gmail.com> wrote: > >Hey Gang, > > > >Anybody got any ideas for next meeting? > > > >My buddy Nick is going to be out of the country for the next meeting, > >so > >he's yet again a no show... > > > >Thanks, > >Tim. > > > >-- > >I am leery of the allegiances of any politician who refers to their > >constituents as "consumers". > > > > > >------------------------------------------------------------------------ > > > >_______________________________________________ > >Wlug mailing list > >Wlug(a)mail.wlug.org > >http://mail.wlug.org/mailman/listinfo/wlug > > -- > Sent from my Android device with K-9 Mail. Please excuse my brevity. > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > http://mail.wlug.org/pipermail/wlug/attachments/20160223/aa9b7384/attachmen… > > ------------------------------ > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > > End of Wlug Digest, Vol 148, Issue 9 > ************************************ >

Feb. 25, 2016

Re: [Wlug] Topic ideas for next meeting?

by Frank Sweetser

It wouldn't be a huge topic, but I could talk about the RPZ security feature in BIND: https://dnsrpz.info/ On February 23, 2016 4:16:29 PM EST, Tim Keller <turbofx(a)gmail.com> wrote: >Hey Gang, > >Anybody got any ideas for next meeting? > >My buddy Nick is going to be out of the country for the next meeting, >so >he's yet again a no show... > >Thanks, >Tim. > >-- >I am leery of the allegiances of any politician who refers to their >constituents as "consumers". > > >------------------------------------------------------------------------ > >_______________________________________________ >Wlug mailing list >Wlug(a)mail.wlug.org >http://mail.wlug.org/mailman/listinfo/wlug -- Sent from my Android device with K-9 Mail. Please excuse my brevity.

Feb. 23, 2016

Topic ideas for next meeting?

by Tim Keller

Hey Gang, Anybody got any ideas for next meeting? My buddy Nick is going to be out of the country for the next meeting, so he's yet again a no show... Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Feb. 23, 2016

Re: [Wlug] Linux Mint servers hacked

by John Platt

Steven J. Vaughan-Nichols who is a big Linux Mint fan says that if you used bittorent or did not use a mirror you are safe. http://www.zdnet.com/article/has-your-linux-mint-desktop-been-hacked/ On Tue, Feb 23, 2016 at 3:37 PM, Richard Klein <rich(a)richardklein.org> wrote: > I haven't read the whole story, but apparently intruders managed to > put an ISO on their servers that included a backdoor. If you > downloaded an ISO from them on Saturday, you're at risk. > > http://blog.linuxmint.com/?p=2994 > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Feb. 23, 2016

Linux Mint servers hacked

by Richard Klein

I haven't read the whole story, but apparently intruders managed to put an ISO on their servers that included a backdoor. If you downloaded an ISO from them on Saturday, you're at risk. http://blog.linuxmint.com/?p=2994

Feb. 23, 2016

Re: [Wlug] Ubuntu, now with ZFS!

by John Stoffel

>>>>> "Michael" == Michael Voorhis <mvoorhis(a)cs.wpi.edu> writes: Michael> On 02/17/2016 04:06 PM, Franklin Moody wrote: >> The only problem I've had was it getting a bit unhappy in a memory >> constrained environment.. But that is pretty understandable given >> the feature set. Michael> How small an amount of RAM are you using with your unhappy Michael> ZFS install? I'm curious to know how small an amount of Michael> memory one can have and still do a viable ZFS installation. And I'm curious how many people are running with an SSD ZiL (RAID1 please!) to speed up things on ZFS... and to make sure it's reliable. John

Feb. 18, 2016

Re: [Wlug] Ubuntu, now with ZFS!

by Michael Voorhis

On 02/17/2016 04:06 PM, Franklin Moody wrote: > The only problem I've had was it getting a bit unhappy in a memory > constrained environment.. But that is pretty understandable given > the feature set. How small an amount of RAM are you using with your unhappy ZFS install? I'm curious to know how small an amount of memory one can have and still do a viable ZFS installation. --MCV.

Feb. 17, 2016

Re: [Wlug] Ubuntu, now with ZFS!

by Franklin Moody

On 02/17/2016 02:04 PM, Tim Keller wrote: > I just saw an article that the next version of ubuntu 16.04 is going > to have ZFS built in! > > I don't know what you guys take on it is, but I'll likely do a clean > install to have ZFS as my root filesystem. > > <SNIP> I've been using ZFS on linux (native, not FUSE, and mostly for root and all) for a bit now on my personal machines, first on Gentoo then on Ubuntu 15.04/15.10 (and now 16.04), and I've been pretty happy with it. The only problem I've had was it getting a bit unhappy in a memory constrained environment.. But that is pretty understandable given the feature set. And for the docker using folks out there, you can use the ZFS storage driver instead of using AUFS... Frank

Feb. 17, 2016

Ubuntu, now with ZFS!

by Tim Keller

I just saw an article that the next version of ubuntu 16.04 is going to have ZFS built in! I don't know what you guys take on it is, but I'll likely do a clean install to have ZFS as my root filesystem. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Feb. 17, 2016