Re: [Full-disclosure] mac trojan in-the-wild

[Jay Sulzberger <jays@xxxxxxxxx>]

On Thu, 1 Nov 2007, Paul Schmehl <pauls@xxxxxxxxxxxx> wrote:

> --On November 1, 2007 6:31:39 PM -0400 "Adam St. Onge" 
> <adamst.onge@xxxxxxxxx> wrote:
>
>> So if i put a picture of a naked girl on a website and said to see more
>> you must open a terminal and enter "rm -rf".
>> 
>> 
>> Would we consider this a trojan...or just stupidity?
>> 
> I would consider it stupidity to think that that is comparable to a trojan.
>
> Paul Schmehl (pauls@xxxxxxxxxxxx)

I think, under the standard Unix system of permissions, this is a
Trojan.  Under the standard Unix system of permissions, every
application running in my home directory can issue an
'rm -rf /home/me' and, without proper near in time backup, cause
me much annoyance.  The defect lies in the system of permissions.
There exist systems of rolling off-machine backups and minimum
privilege permissions systems, but they are not yet standard.

oo--JS.


> Senior Information Security Analyst
> The University of Texas at Dallas
> http://www.utdallas.edu/ir/security/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/