lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Thu, 31 Aug 2006 01:15:37 +0200 From: Pavel Machek <pavel@....cz> To: Crispin Cowan <crispin@...ell.com> Cc: David Safford <safford@...son.ibm.com>, Serge E Hallyn <sergeh@...ibm.com>, Mimi Zohar <zohar@...ibm.com>, David Safford <safford@...ibm.com>, kjhall@...ibm.com, linux-kernel <linux-kernel@...r.kernel.org>, LSM ML <linux-security-module@...r.kernel.org>, linux-security-module-owner@...r.kernel.org Subject: Re: [RFC][PATCH 8/8] SLIM: documentation On Wed 2006-08-30 16:11:42, Crispin Cowan wrote: > Pavel Machek wrote: > >> The Windows problem is foolish users who download something shiny, such > >> as enhanced emoticons or a keen password caching mechanism (e.g. Gator) > >> or games (as in David's example) which turns out to be spyware. Under > >> David's demo, you can download and run the spyware, but it doesn't get > >> access to the critical system files that make spyware so difficult to > >> remove. > >> > > Well, it gets access to my browser, which contains most of the stuff > > spyware is interested in, anyway. > > > It gets access to the data, but doesn't get to insert itself into > important system files. An important attribute of spyware is that it is > hard to remove, and this makes the "hard to remove" property much harder > to achieve. As I wrote in my previous email, yes, it makes it easier to remove. Thinking about it, it may also make it hard to survive login/logout; which is actually good point. Pavel -- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists