A very BIG, very refreshing ad. Must-see - Page 2 - Guitars101

**Fateswebb** · 08-04-2005, 04:40 PM

well the linux hacks are coming.

a piece of os code that big has a lot of hands in the code. so there are going to be mistakes and unchecked buffers.

most hacks come from unchecked buffers you see they write a program where the user must enter data as a response. say the data should never be longer than 8bits.

an unchecked buffer is when you dont write the program to check and make sure that the data that is input is not larger than the size allocated for it (in this case would be around 8 bits.

So a hacker comes along and inputs data larger than the buffer that is unchecked, this results in a buffer overflow, and the spot that the code was to jump to to continue the program has now been overwritten by the hackers code, so when it goes back to run the program it gets the hackers code, which usually will redirect it back to exectute a spot in the stack. which is the memory and data that the hacker uploaded.

depending on what the hacker sent basically he could get access to your pc.

unfortunatly ms products are FILLED with unchecked buffers.
My company has a copyright on a idea that it is highly unusually for an address in the stack to be called. and therefore by stopping the call to the stack you are stopping the hackers code from executing. the program will probably crash but you didnt load the trojan/virus.

unfortunatly microsoft cannot make its developers check buffers everytime. I guess they are lazy... donno

the reason linux has only about 3 viruses, and same with Mac is this. If you are going to write a virus, do you want it to hack 500 billion computers 10 million computers or what? you want the most audience available (microsoft)

however linux is an interesting discussion here for a few of reasons based on it is open source code that anyone can view.

a hacker CAN VIEW THE CODE of linux, so if he wanted to create exploits for it, it would be easier based on the fact that he has the raw code.

however this actually works in linux favor, since the hacker can see the code. so can everyone else, and there are good guys out there, that could see the same thing, and write a fix for it if they want.

Linux is GAINING GROUND on windows, so with this increased audience the hackers will start paying more attention to it. especially since a lot of servers are linux these days, and since macs are now based on a linux shell.

Linux will start to have security issues more, but probably not ever like windows does, unless hell freezes over, and windows loses popularity.

FW

**Sister_Wrath** · 08-04-2005, 08:13 PM

wow, thanks Fateswebb, i really enjoy your explanation since my knowledge of Linux is very limited, and yes, you're right: hackers will always go for the biggest audience...and maybe if MS would share its code, it would help them prevent some of the hacks -so what you say is true: a wider access to the code can better protect the OS-

**Fateswebb** · 08-04-2005, 08:27 PM

no problem. just an interesting topic.

FW

08-04-2005, 08:13 PM	#17
Sister_Wrath Metal head Join Date: Jan 2004 Location: Quebec, Canada Posts: 1,058	wow, thanks Fateswebb, i really enjoy your explanation since my knowledge of Linux is very limited, and yes, you're right: hackers will always go for the biggest audience...and maybe if MS would share its code, it would help them prevent some of the hacks -so what you say is true: a wider access to the code can better protect the OS- __________________ http://www.montserratmetal.com/ , stars being born http://www.petitiononline.com/mioti/petition.html make tabs a free ressource, go sign this petition

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

08-04-2005, 04:40 PM	#16
Fateswebb Famous Artist Join Date: Mar 2005 Location: dfw Posts: 384	well the linux hacks are coming. a piece of os code that big has a lot of hands in the code. so there are going to be mistakes and unchecked buffers. most hacks come from unchecked buffers you see they write a program where the user must enter data as a response. say the data should never be longer than 8bits. an unchecked buffer is when you dont write the program to check and make sure that the data that is input is not larger than the size allocated for it (in this case would be around 8 bits. So a hacker comes along and inputs data larger than the buffer that is unchecked, this results in a buffer overflow, and the spot that the code was to jump to to continue the program has now been overwritten by the hackers code, so when it goes back to run the program it gets the hackers code, which usually will redirect it back to exectute a spot in the stack. which is the memory and data that the hacker uploaded. depending on what the hacker sent basically he could get access to your pc. unfortunatly ms products are FILLED with unchecked buffers. My company has a copyright on a idea that it is highly unusually for an address in the stack to be called. and therefore by stopping the call to the stack you are stopping the hackers code from executing. the program will probably crash but you didnt load the trojan/virus. unfortunatly microsoft cannot make its developers check buffers everytime. I guess they are lazy... donno the reason linux has only about 3 viruses, and same with Mac is this. If you are going to write a virus, do you want it to hack 500 billion computers 10 million computers or what? you want the most audience available (microsoft) however linux is an interesting discussion here for a few of reasons based on it is open source code that anyone can view. a hacker CAN VIEW THE CODE of linux, so if he wanted to create exploits for it, it would be easier based on the fact that he has the raw code. however this actually works in linux favor, since the hacker can see the code. so can everyone else, and there are good guys out there, that could see the same thing, and write a fix for it if they want. Linux is GAINING GROUND on windows, so with this increased audience the hackers will start paying more attention to it. especially since a lot of servers are linux these days, and since macs are now based on a linux shell. Linux will start to have security issues more, but probably not ever like windows does, unless hell freezes over, and windows loses popularity. FW

08-04-2005, 08:27 PM	#18
Fateswebb Famous Artist Join Date: Mar 2005 Location: dfw Posts: 384	no problem. just an interesting topic. FW

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)