[ubuntu-uk] Phishing and linux

2007-10-03 Thread Mac
I'm not sure what to make of comments about phishing sites I came across here http://www.theregister.com/2007/10/03/ebay_paypal_online_banking/ as follows: These things are incredibly sophisticated, and when they take over a computer, most [users] don't know it, he said. With every single

Re: [ubuntu-uk] Phishing and linux

2007-10-03 Thread Martyn
I'm not sure what to make of comments about phishing sites I came across here http://www.theregister.com/2007/10/03/ebay_paypal_online_banking/ as follows: These things are incredibly sophisticated, and when they take over a computer, most [users] don't know it, he said. With every single

Re: [ubuntu-uk] Phishing and linux

2007-10-03 Thread Mac
Martyn wrote: I'm not sure what to make of comments about phishing sites I came across here http://www.theregister.com/2007/10/03/ebay_paypal_online_banking/ as follows: These things are incredibly sophisticated, and when they take over a computer, most [users] don't know it, he said.

Re: [ubuntu-uk] Phishing and linux

2007-10-03 Thread Alan Pope
Hi, On Wed, 2007-10-03 at 09:05 +0100, Mac wrote: I hope we can just assume this is FUD. Does anyone more familiar with server security have anything consoling thoughts? AIUI most compromised Windows boxes are due to user error, people not installing patches or firewalls on their windows

Re: [ubuntu-uk] Phishing and linux

2007-10-03 Thread Mark Harrison
Mac wrote: I hope we can just assume this is FUD. Does anyone more familiar with server security have anything consoling thoughts? I seriously hope that we DON'T assume this is FUD. I think that Alan has summed up the key issue nicely. Anyone who goes around saying Linux is secure,

Re: [ubuntu-uk] Phishing and linux

2007-10-03 Thread Tony Arnold
Mac, On Wed, 2007-10-03 at 07:22 +0100, Mac wrote: I'm not sure what to make of comments about phishing sites I came across here http://www.theregister.com/2007/10/03/ebay_paypal_online_banking/ as follows: These things are incredibly sophisticated, and when they take over a

Re: [ubuntu-uk] Phishing and linux

2007-10-03 Thread Mac
Alan Pope wrote: snip AIUI most compromised Windows boxes are due to user error, people not installing patches or firewalls on their windows desktops and laptops. AIUI most compromised Linux boxes are due to user error, people not installing patches for server apps and scripted applications

Re: [ubuntu-uk] Phishing and linux

2007-10-03 Thread Chris Jones
Hi Mac wrote: I hope we can just assume this is FUD. Does anyone more familiar with server security have anything consoling thoughts? My guess would be: Lots more Linux servers than Windows ones, probably lots that don't have system security patches applied[0] and lots and lots and lots and

Re: [ubuntu-uk] Phishing and linux

2007-10-03 Thread Chris Rowson
My guess would be: Lots more Linux servers than Windows ones, probably lots that don't have system security patches applied[0] and lots and lots and lots and lots and lots of PHP code running on them which is even less likely to be getting security love :/ [0] MS are getting very good at

Re: [ubuntu-uk] Phishing and linux

2007-10-03 Thread Chris Jones
Hi Chris Rowson wrote: Linux is free. modulo hardware costs, of course. Wouldn't that create some difference in how well the servers are looked after. It's entirely plausible, yes :/ Cheers, -- Chris Jones [EMAIL PROTECTED] www.canonical.com -- ubuntu-uk@lists.ubuntu.com

Re: [ubuntu-uk] Phishing and linux

2007-10-03 Thread Tony Arnold
Chris, On Wed, 2007-10-03 at 11:45 +0100, Chris Rowson wrote: My guess would be: Lots more Linux servers than Windows ones, probably lots that don't have system security patches applied[0] and lots and lots and lots and lots and lots of PHP code running on them which is even less likely

Re: [ubuntu-uk] Phishing and linux

2007-10-03 Thread ged
Mac wrote: I'm not sure what to make of comments about phishing sites I came across here http://www.theregister.com/2007/10/03/ebay_paypal_online_banking/ as follows: These things are incredibly sophisticated, and when they take over a computer, most [users] don't know it, he said.

Re: [ubuntu-uk] Phishing and linux

2007-10-03 Thread Alan Pope
Hi Ged, On Wed, 2007-10-03 at 18:50 +0100, ged wrote: What's the chance of being taken over by these things ? How can I check for root kits on linux ? On a desktop/laptop client slim, very slim. On a server running popular web applications, somewhat higher. On a system running out of date

Re: [ubuntu-uk] Phishing and linux

2007-10-03 Thread Tony Arnold
On Wed, 2007-10-03 at 18:50 +0100, ged wrote: Mac wrote: I'm not sure what to make of comments about phishing sites I came across here http://www.theregister.com/2007/10/03/ebay_paypal_online_banking/ as follows: These things are incredibly sophisticated, and when they take over