Advanced

Torvalds creates patch for cross-platform virus

Posted by Scott_Ruecker on · 3 comments
NewsForge; By Joe Barr
Mail this story
Print this story

Linus Torvalds has had an opportunity to examine the testing and analysis by Hans-Werner Hilse which we reported on yesterday, and has blessed it as being correct. The reason that the virus is not propagating itself in the latest kernel versions is due to a bug in how GCC handles specific registers in a particular system call. He has coded a patch for the kernel to allow the virus to work on even the latest Linux kernel.

Full Story

  Nav
» Read more about: Story Type: News Story; Groups: Kernel, Linux

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (3)

Jeez. That must be one wicked 'virus' if it requires patching the kernel for it to work.

Next time one of the parasitic anti-virus companies wants to make big FUD with some Linux 'virus', they should first run it by the kernel hackers. At least that way they will have a working piece of software.

The corporate ticks will then have to figure out how to (a) get users to download the code, (b) get users to set the execute bit, (c) get users to run the code, (c) get users to spread the code to other users with similar systems. Instead of (c), they could devise some means to escalate privileges (some kind of rootkit payload) and then find a wormhole by which it can spread itself. Of course, with all of that baggage it's going to be pretty suspicious in size.

It seems hardly worth the effort even for something as sleazy as the anti-virus industry. A virus depends upon a gullible user and sloppy permissions. There will always be gullible users, but if untrusted code is not auto-executed, as it is through many 'features' of the world's worst software seller (Microsoft), then the untrusted code just lays there. Any sloppy permissions that show up in (truly) free software can be fixed too quickly for a virus to become a problem sufficient to support the anti-virus parasites.

Those developers working on free software who try to imitate the bad features of the world's worst software will simply lose credibility. Their coding efforts will become wasted. It is not correct behavior for user software to auto-damage user files.

Note that Torvalds was patching for correct behavior. If a user chooses to run untrusted software, that software should run correctly. It should not run just because it is downloaded or just because it happens to have a certain name.

Yes Grouch, it's pretty pitiful. Poor ole AV industry, that dern Linux is threatening to take the bread from their children's mouths.

"Note that Torvalds was patching for correct behavior. If a user chooses to run untrusted software, that software should run correctly. It should not run just because it is downloaded or just because it happens to have a certain name."

Good point. It's still funny.
tuxchick2:

I get the feeling they're desperate to come up with some reason to continue to exist. The desperation of the AV ticks is a good barometer for measuring how many people are actually using Linux. (Sales figures are about the least trustworthy way of measuring Linux usage, since MS manages so well to coerce the installation of MS with most sales).

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post