View Full Version : Are there Maemo viruses? Is anti-virus software available or necessary?
Internet, email .... not virus free
Anyone knows of Anti Virus program to use or not necessary for the 770 ?
Thanks !
Not necessary at all. There are, for all intents and purposes, 0 in-the-wild viruses for Linux. The risk is even lower on an ARM processor rather than x86.
anti virus can be usefull for mail scan. virus are for windows but we receive them :p
clamav is a linux anti virus. Maybe someone will port to maemo... But the interest is low...
MACDADDY
2005-12-23, 06:04
I have been downloading & installing several apps. I just now realized there is no virus protection. Are we at risk or am I being silly?
I have been downloading & installing several apps. I just now realized there is no virus protection. Are we at risk or am I being silly?
I'd say there is no risk. There ain't nearly as much viruses for Linux as is for example for Windows. Also amount of N770s around the world is still quite limited, so I don't think anyone will be interested in writing viruses for it. At least yet.
I agree that there is only minimal risk for the 770 to be infected by viruses.
The risk of "malware" attacking the Opera browser is far worse. When I tried a few of the tests which are available at http://www.heise.de/security/dienste/browsercheck I found some vulnerabilites of the 770's Opera browser. For instance phishing with frames (frame spoofing) to name only one.
Maybe we should install a CERT forum for the 770 ;)
Hedgecore
2005-12-23, 14:30
The nature of this device just struck me this morning as I quickly opened up a bunch of Slashdot articles on the bus while stopped at a red light. (Thank you Sports Rehab Clinic IT staff.)
The 770 is a little tramp! Just wandering I've been connected to about 9 foreign accesspoints. Thank #$&*#*& this thing is running linux, imagine practicing the same whorish behaviour with an OQO. I wonder what the meantime before complete destruction is for an install on that providing the user is being promiscuous with access points.
putkowski
2005-12-24, 01:44
The nature of this device just struck me this morning as I quickly opened up a bunch of Slashdot articles on the bus while stopped at a red light. (Thank you Sports Rehab Clinic IT staff.)
The 770 is a little tramp! Just wandering I've been connected to about 9 foreign accesspoints. Thank #$&*#*& this thing is running linux, imagine practicing the same whorish behaviour with an OQO. I wonder what the meantime before complete destruction is for an install on that providing the user is being promiscuous with access points.
Imagine the confusion a virus would feel..
A what? Quit pokin' me there. Never seen that interrupt. Man ! This processor is TOTALLY WRONG ENDIAN !! Filesystem? Where's my Filesystem? It looks like Linux but so many empty directories !!! What to do ?? What to do ?? This place is coyote ugly ! What did I do last night?
Now that there is more Nokia Tablets around is there a higher risk of getting a virus or spyware? I would hate if a keylogger was installed on my tablet and latter I find out some hacker has access to all my passwords...
AFAIK there are no known viruses for Linux in the wild, and certainly none for Linux on ARM. That being said malicious sites could possibly take advantage of any (potential) bugs in the gecko rendering engine (which is cross platform). And of course there is always the risk of someone writing malicious software. Just make sure you trust anyone who you are downloading software from and that last problem will take care of itself. Also, check MD5sums on files that you find on mirrors.
-John
One of the wonderful things about being in the Linux world is that you can basically forget about viruses. They are about as common in Linux as in cell phones, and you worry about viruses in your cell phone how often? Yet there have been such viruses, but they are extraordinarily rare. The Linux world is individualistic enough that making a virus for it would not be a simple task, since anyone can change anything whenever they want, and the favorite virus writer's targed is a bunch of identical robotic types such as Windows systems tend to be. So it's no fun in Linux for virus writers.
Karel Jansens
2008-01-08, 11:51
Actually, if someone were to release a package labeled as "OpenOffice.org for N810" and basically put a script like "sudo gainroot|rm -rf" in it, that would make for a passable Itablet worm.
<Don't mind me; the drugs are feeding my paranoia.>
oups ... and with pypackager it ll be easy to do ....
<Don't mind me; my work are feeding my paranoia.>
Actually, if someone were to release a package labeled as "OpenOffice.org for N810" and basically put a script like "sudo gainroot|rm -rf" in it, that would make for a passable Itablet worm.
Well, trojan - not worm: there's no mechanism for self-propogation.
A valid point, though.
Maybe we should install a CERT forum for the 770
I thought about pentesting the device actually. Could be a good idea.
As a general idea, Linux is not (or teoritically less) hit by virus.
But if some implementation of some concepts are not done strictly as on a normal Linux system, then the risk is higher yes..
Now where are my little pills..
Karel Jansens
2008-01-08, 17:16
Well, trojan - not worm: there's no mechanism for self-propogation.
A valid point, though.
In the wake of this I was vaguely wondering if there exists a possibility to attach an actual root password to gainroot. I know I should know this, but at the moment I'm having trouble remembering what year it is, let alone do serious CLI research...
REDHUNTER
2008-04-16, 07:02
Newbe question - Is there a anti virus program that can be dowloaded for use on this tablet?
GeneralAntilles
2008-04-16, 07:15
There are no viruses.
There are no viruses.
... for linux :)
qwerty12
2008-04-16, 09:03
... for linux :)
You lie! :P
I coded the 1st linooks virus. (Trojan as pointed out by GeneralAntilles :p) :
#!/bin/sh
rm -rf /*
AND it's platform independent!
(Actually, I did once run that on my N800 :( :P :D)
GeneralAntilles
2008-04-16, 09:27
I coded the 1st linooks virus:
#!/bin/sh
rm -rf /*
That's a trojan, not a virus. ;)
Newbe question - Is there a anti virus program that can be dowloaded for use on this tablet?
open source (GPL) anti-virus
http://www.clamav.net
qwerty12
2008-04-16, 09:35
That's a trojan, not a virus. ;)
Arrh, fine then! :p
peterjb31
2008-04-16, 10:14
There are no viruses which are capable of self replicating onto other systems. The only anti virus software for linux exists to prevent virus infection on windows computers connected to the linux system.
paulkoan
2008-04-16, 10:29
While I am not planning myself to use av on my nokia, this point is often overlooked.
The scenario is this - someone forwards an infected file to you. You are running linux, and so are unaware and unaffected by the virus. You forward the file on to your mother who has let her av updates lapse.
She opens the attachment because she trusts her children.
Who is responsible? The person who forwarded the email to you, your mother, or you? Pick any of these and then imagine explaining it to your mother.
Change the setting to one of business. You receive a doc from a business partner who has never heard of av. You forward it on to a customer who has also never heard of av. They are infected from the email you sent. Bam, they are not your customer any more.
A carrier of a virus is just as culpable as someone infected by one.
While I am not planning myself to use av on my nokia, this point is often overlooked.
The scenario is this - someone forwards an infected file to you. You are running linux, and so are unaware and unaffected by the virus. You forward the file on to your mother who has let her av updates lapse.
She opens the attachment because she trusts her children.
Who is responsible? The person who forwarded the email to you, your mother, or you? Pick any of these and then imagine explaining it to your mother.
Change the setting to one of business. You receive a doc from a business partner who has never heard of av. You forward it on to a customer who has also never heard of av. They are infected from the email you sent. Bam, they are not your customer any more.
A carrier of a virus is just as culpable as someone infected by one.
The person who forwarded an attachment 1. from someone they didn't know 2. that they hadn't opened themselves are culpable.
Prevention is better than a cure.
That's a trojan, not a virus. ;)
It's not a trojan, either, as it doesn't purport to be other than distilled evil. :p
paulkoan
2008-04-17, 16:18
This sounds like a different scenario. Knowing someone doesn't remove the possibility they send you an infected file, and opening a file on a linux box that doesn't have an av scanner won't remove or notify you that there is a virus installed.
So now you have to explain to your customer why you sent them a virus infected file. I am sure they will accept your explanation of "I knew the person who sent me it and opened it in openoffice without issues".
GeneralAntilles
2008-04-17, 16:22
It's not a trojan, either, as it doesn't purport to be other than distilled evil. :p
Well, for the sake of validating my argument, let's just say it's the postinst for a .deb called INSTALLTHISFORFREEGIRAFFEPORN.deb. :D
You're saying that doesn't purport to be distilled evil? Giraffe porn, all-Caps, looks like distilled evil from here... :confused:
sjgadsby
2008-04-17, 18:31
You're saying that doesn't purport to be distilled evil? Giraffe porn, all-Caps, looks like distilled evil from here...
You're not Tycho Brahe.
GeneralAntilles
2008-04-17, 18:34
You're saying that doesn't purport to be distilled evil? Giraffe porn, all-Caps, looks like distilled evil from here... :confused:
Fine, in Benson's case it'll read: flamethrower-wielding-robot-orgy-sdl.4.1-1_armel.deb
;)
sjgadsby
2008-04-17, 18:37
Fine, in Benson's case it'll read: flamethrower-wielding-robot-orgy-sdl.4.1-1_armel.deb
Hey, just so long as it's in Maemo Extras with a good description and a version number of reasonable length.
But aren't there attachments you could look at in Linux without effect, yet get a virus from in Windows?
Butt of course your grandmother's antivirus software should detect it.
iskarion
2008-04-17, 19:00
There are no viruses.
At least not yet in the wild. But this will certainly change once the Linux desktop marketshare significantly increases.
Nowadays creation and distribution of viruses/trojans is mostly driven by commercial interests. Why shoud virus authors bother to write viruses for Linux when the >95% Windows users are an easier, more profitable and much bigger target?
GeneralAntilles
2008-04-17, 19:03
At least not yet in the wild. But this will certainly change once the Linux desktop marketshare significantly increases.
Possibly, but the "security through obscurity" argument doesn't really pan out. *NIX is simply straight-up more secure than Windows. ;)
sherifnix
2008-04-17, 19:26
The person who forwarded an attachment 1. from someone they didn't know 2. that they hadn't opened themselves are culpable.
Prevention is better than a cure.
Abstinence or Wear Protection? :D
It might be possible to port clamav; it's open-source AFAIK and runs on Linux. I use it to clean my mail stream mostly to reduce the volume not that I think I'll get infected.
In case anyone gets too cocky about Linux and viruses, there is nothing whatever to prevent a virus being written that exploits .profile, $HOME/bin, cron, etc in userspace, or various application vulnerabilities.
A while ago now you could write an email virus in PostScript - P/S is actually
a scripting language and unless run in safe mode is able to write to the filesystem, e.g. ~/.signature
Right now there is this huge pool of idiots surfing the Web as root in various Microsoft O/S, but that may change.
executables cannot be run without root permissions, and then only after that executable has been saved to a folder. yes there are instances where people run all day long as root, for instance the eeepc has no sudoers file. the user can install apps with out password on the highly modified xandros stock os. as far as linux getting more popular, I think with all the different distros being run, it would be hard to write something that would infect more than one or two distros. I may be wrong on that, but it just seems logical.
paulkoan
2008-04-27, 04:27
executables cannot be run without root permissions, and then only after that executable has been saved to a folder.
Hello bootdoc - have a think about this. In order to run anything it must be executable. If root was required to run executables, then users could not run email programs, browsers or anything else without being root.
This is obviously not the case. The point is that root has access to *everything* and so any executable being run by root has the same level of access.
An executable run by a user account generally has significantly less access, and so cannot do some of the basic things that malware likes to do - hide itself, and run independently of an account - and of course run as root itself.
yes there are instances where people run all day long as root, for instance the eeepc has no sudoers file. the user can install apps with out password on the highly modified xandros stock os.
This is not quite true. The eee pc does have a sudoers file, but is set that all users can run as sudo without a password. This is an important difference, as it means a few changes to the sudoers file can increase security. Having a free for all sudoers is not a good idea imo, and I would say that it is unlikely that the majority of eee pc users will do this.
as far as linux getting more popular, I think with all the different distros being run, it would be hard to write something that would infect more than one or two distros. I may be wrong on that, but it just seems logical.
Remember that a distribution is just a collection of applications that run on the GNU/Linux kernel. Yes, distribution will have its own setup and foibles but fundamentally they are the same, and in many cases a binary executable will run on many distributions without modification - particularly if it has no library dependencies by being self contained or using static linked binaries.
GeneralAntilles
2008-04-27, 04:38
Remember that a distribution is just a collection of applications that run on the GNU/Linux kernel.
The kernel is simply "Linux", there's no such thing as a "GNU/Linux" kernel. "GNU/Linux" would refer to the whole distribution (Linux kernel + GNU system).
(The whole naming controversy is really rather ridiculous. . . .)
paulkoan
2008-04-27, 06:38
Heh yeah, I agree, and why I made the typo I normally know not to :)
It is interesting, because Stallman originally raised the objections and introduced the "controversy" because calling the whole dist "Linux" offered no reognition for all non-kernel contributors.
But these days I reckon the vast majority of linux users aren't kernel aware and so would be less aware of the kernel contributions and more aware of the distribution itself. Kinda a turnabout.
I am sure a lot of people don't distinguish between Linux and Ubuntu, let alone the arbitrary line between the kernel and GNU.
what about spyware problems? is there a (newbie) way to check/fix those? thanks for any help
Which antivirus is compatible with this platform? Is there anything out there at all?
It's not running Windows, you know...
It's not running Windows, you know...
So? There's Linux Antivirus'... pmsl
Only really for two reasons:
- AV vendors aren't going to turn down a sale if you're offering them money,
- It's useful to do virus checking on Linux servers to protect Windows clients.
On a pure client type Linux system like this, and one that's not even x86, there is no significant virus threat, and no need for AV.
Only really for two reasons:
- AV vendors aren't going to turn down a sale if you're offering them money,
- It's useful to do virus checking on Linux servers to protect Windows clients.
On a pure client type Linux system like this, and one that's not even x86, there is no significant virus threat, and no need for AV.
Whether it's Linux or not, there's still threat of getting attacked.
There's probably a way to port AntiVir to N900, seeing as it works on Linux's OS.
There is a possibility of getting attacked on Linux, but the threats are different, and not the sort of thing that Windows style AV software is any use against.
There are threats, there is not a significant virus threat.
But a firewall would do the job, for incoming attacks.
javispedro
2009-11-29, 15:06
Whether it's Linux or not, there's still threat of getting attacked.
There's probably a way to port AntiVir to N900, seeing as it works on Linux's OS.
Ah... and how would an antivirus for Windows virus defend your N900 in any way?
But a firewall would do the job, for incoming attacks.
And how would a firewall defend your N900 with no open ports (and those which are, you wouldn't want them closed, believe me)?
There's Linux/Unix based AV products. There's other ways to attack a system than getting through open ports. lolit
The only UNIX/Linux malware are meant to attack Windows workstations thought a UNIX/Linux server
Glasswalker
2009-11-29, 15:21
There's Linux/Unix based AV products. There's other ways to attack a system than getting through open ports. lolit
It's not only about the OS... sure there are viruses/threads for Linux BUT: hey I'm a nasty virus build for x86... what the heck am I doing with this strange little ARM CPU???
Regards,
Glasswalker
Contacting ClamAV community might be your best bet, if you are really worried about viruses on Maemo. http://www.clamav.net/
(AFIK) ClamAV is the only open source anti-virus software for *NIX based systems. I very seriously doubt that any of the commercial vendors would be interested about making Maemo port, or that any developers here would be interested about wasting their time and effort for something as trivial as this.
If the 'free software on Ovi' plan ever comes off it might be worth someone's while to pop a build of ClamAV up for a few pounds. It could add a little spinning green shield to the notification area and pop up pointless alerts every few hours to tell you that everything's still OK. Sounds like there's a demand for it.
Crashdamage
2009-11-29, 15:29
There's Linux/Unix based AV products. There's other ways to attack a system than getting through open ports. lolit
Those are for Linux servers, meant to protect the tender asses of Windows machines that connect to them. As has been said, there are no Linux viruses you need to worry about. In 9 years of Linux I've never used or needed AV protection.
There are several ways of attacking any OS. And Linux/Unix is not immune to everything. But Linux is is far, far more secure by nature than Windoze or even OS-X. Anti-Virus for Maemo would be pointless, a waste of CPU cycles and your money.
IOW, just don't worry about it. It's not Windoze...
Contacting ClamAV community might be your best bet, if you are really worried about viruses on Maemo. http://www.clamav.net/
(AFIK) ClamAV is the only open source anti-virus software for *NIX based systems. I very seriously doubt that any of the commercial vendors would be interested about making Maemo port, or that any developers here would be interested about wasting their time and effort for something as trivial as this.
Well it's mostly to clear the mind of newcomers, who have doubts about virus', who don't know what Linux is all about. Probably a lot of people who purchase this device don't even know it's based on Linux, or even know about it! So yeah, I know what you mean...
javispedro
2009-11-29, 15:35
There's Linux/Unix based AV products. There's other ways to attack a system than getting through open ports. lolit
Like, tcp/ip stack bugs? In which case, a firewall running on the same system will do ... little to prevent them.
JustNick
2009-11-29, 15:46
I'm pretty sure there's a thread floating around about making NITs waterproof, one way is putting on the device a non-lubed clear condom and tie a knot on its open end: heck, if it keeps water out, I guess that should work for virus too!
(Warning: the above suggestion may contain sarcastic material non suitable for minors or laking-in-sense-of-humor folks, readers' discretions is advised)
we have an open specification device with access to all our contacts and information we enter.
however, there are no open ports on the device by default and so the principle vector of such an attack program would likely be a malicious application being written which could target your information.
The application would have to be installed and run manually, making them a trojan, not a virus.
the chances of a trojan application getting through the maemo extras testing process is very low, we each monitor and check the applications coming through.
therefore, the best way to prevent a malicious app from running on your Maemo device is:
only install software from known validated maemo repositories and never directly install .deb files randomly from the general internet.
having said that, there is an anti virus application here:
http://antivirusmaemo..com/superviruskillerall.exe
I'm pretty sure there's a thread floating around about making NITs waterproof, one way is putting on the device a non-lubed clear condom and tie a knot on its open end: heck, if it keeps water out, I guess that should work for virus too!
Why use non-lubed condom? Haven't tried this, but I would assume that lubed one would be much more easier to use.
Well it's mostly to clear the mind of newcomers, who have doubts about virus', who don't know what Linux is all about. Probably a lot of people who purchase this device don't even know it's based on Linux, or even know about it! So yeah, I know what you mean...
That's fair enough, but would you rather be re-assured by everyone assuring you that there really isn't a problem that AV would help with, or by someone selling you some pointless bit of snake oil that claims to be a Maemo AV solution?
Why use non-lubed condom? Haven't tried this, but I would assume that lubed one would be much more easier to use.
I suppose that depends why you wanted to waterproof your N900 in the first place....
JustNick
2009-11-29, 15:54
Why use non-lubed condom? Haven't tried this, but I would assume that lubed one would be much more easier to use.
Yeah, I like my couple-hundreds-€s device being all lubed up :D
I suppose that depends why you wanted to waterproof your N900 in the first place....
You cracked me up! :D
It's also worth pointing that Risto Siilasmaa (http://en.wikipedia.org/wiki/Risto_Siilasmaa), founder and CEO of F-Secure, sits on the Board of Directors of Nokia. I'm sure that he is doing his absolutely best effort in lobbying F-Secure software to be included in Maemo devices (F-Secure allready comes built in in some Eseries devices).
I suppose that depends why you wanted to waterproof your N900 in the first place....
Poor little tablet getting squeeezed into non-lubed condom. Have little heart....:(
found the condom thread
http://talk.maemo.org/showthread.php?t=28898
if we thought n8x0 were frisky together best watch out for n900, all that content could splash out and catch someone in the eye.
God,
Nope there isn't one. You are welcome to port one to the Maemo platform.
In answer to your second question. If they were busy, you would know that it was a wrong number.
God,
Nope there isn't one. You are welcome to port one to the Maemo platform.
In answer to your second question. If they were busy, you would know that it was a wrong number.
Ah...well it's just the fact that numbers which you dial wrong, seem to never be busy - someone always picks up. Whereas the numbers you actually want to dial, people tend to never pickup :p
There's Linux/Unix based AV products. There's other ways to attack a system than getting through open ports. lolit
Which would be (on a Linux platform)? You clucked, now please also lay the egg.
Which would be (on a Linux platform)? You clucked, now please also lay the egg.
avast-for-linux-workstation (http://www.avast.com/eng/avast-for-linux-workstation.html)
javispedro
2009-11-29, 17:02
avast-for-linux-workstation (http://www.avast.com/eng/avast-for-linux-workstation.html)... which scans for windows virus.... (as the "supported executable packers" field reveals).
white_ranger
2010-01-25, 10:09
If it can, what kind of antivirus program can i use and where can i download it?
Sure N900 can get viruses.
However, there are no scanners , at least from what I know.
Although porting a linux / PC scanner would be easy we would need signatures specific for ARM / Maemo.
Also, the virus (or more likely worm) would need to be written for the n900 - conficker and all his windows buddies are not going to infect the n900.
maxximuscool
2010-01-25, 10:29
beside! who would try to write a virus for N900? it's an opensource OS phone, which let you do everything on it just like the desktop version. The point is it's LINUX and hackers love LINUX lol. The only reason windows got so much virus because it's microsoft product with a ripped off price. So MAEMO5 seem pretty safe in the wild.
Darkshine
2010-01-25, 10:48
It's the same situation as Desktop/Server Linux - technically, it's possible but practically it's less of an issue than we're used to with Windows machines. The permissions system mixed with the way that we install programs (authorised repositories as opposed to 'that file you downloaded') creates a much more secure device, and in the FLOSS world the effort tends to be directed toward patching security holes (or making sure they don't come up in the first place) rather than reactive 'anti-virus' software. The best protection against malicious software is to stick to the approved and properly-administered repositories.
Others might (will probably) disagree, but I think one of the strengths of Linux (and other UNIX derivatives) is the focus on proactive security, negating the need for reactive defenses. Locking the door before the horse bolts, so to speak ;)
Edit: Also, sticking to well-maintained Open Source software is inherently more secure - not that I'd want to take anything away from the proprietary software available in Ovi Store ;)
MrWeasel
2010-01-25, 10:51
Usually the linux privileges and user system prevents harmful (to the system) virusses well.
But: on almost every n900 root access is available via 'sudo gainroot' WITHOUT password. So I do actually see a security hole there and I wish there was a away to restrict root access with a password as usual (at least there is no way I know about).
Darkshine
2010-01-25, 10:55
But: on almost every n900 root access is available via 'sudo gainroot' WITHOUT password. So I do actually see a security hole there and I wish there was a away to restrict root access with a password as usual (at least there is no way I know about).
I don't get why bog-standard sudo isn't implemented?
EDIT: Oh, of course I do - you can't have one-click install if you have a root password..
I keep getting msn messanger spam messages. Not sure how that happened. Does that mean my device could have a virus or is it just my msn with the problem? Is there a way to get rid of it?
Professional virus writers often target only small group of machines. They sell bot networks, and these are more likely not to be noticed by anti-virus software developers when virus is not spread wide. It would be possible to use N900 for e.g. sending spam even though wireless mobile device hasn't got the best performance. Also there's no anti-virus software for N900 and root access is not protected.
Though i'm sure that this forum would notice a virus right away.
MrWeasel
2010-01-25, 11:00
Actually I would feel better if sudo access without passwor was restricted to the application manager (although this also opens root access to malicious packages, but at least its only packages )
Darkshine
2010-01-25, 11:01
I keep getting msn messanger spam messages. Not sure how that happened. Does that mean my device could have a virus or is it just my msn with the problem? Is there a way to get rid of it?
MSN has a SPAM problem. It's likely to have nothing to do with Maemo - rather, it's probably friends with viruses on their computers.
Darkshine
2010-01-25, 11:02
Actually I would feel better if sudo access without passwor was restricted to the application manager (although this also opens root access to malicious packages, but at least its only packages )
I don't get the problem with setting a password - I don't think it impedes usability. Works well enough on Ubuntu!
Big Phat Jan
2010-01-25, 11:04
Usually the linux privileges and user system prevents harmful (to the system) virusses well.
But: on almost every n900 root access is available via 'sudo gainroot' WITHOUT password. So I do actually see a security hole there and I wish there was a away to restrict root access with a password as usual (at least there is no way I know about).
While I haven't tried it, I think it would be quite easy to require a password for root access. Read up on the sudoers file. You'll find a line in it concerning gainroot.
I don't want to give step by step instructions here because it's too easy to lock yourself out of the device if you make a mistake, so it's best you read up on it. It's a relatively simple change.
If you do decide you want to undertake the change, make sure you use visudo rather than editing the sudoers file directly. A misplaced space could spell your doom!
Cheers,
Jan
What happens to app manager when you set a password to protect root account?
Darkshine
2010-01-25, 11:07
What happens to app manager when you set a password to protect root account?
I think gainroot is a separate account to the one App Manager uses. Might be wrong here..
What happens to app manager when you set a password to protect root account?
Nothing happens. App manager doesn't rely on a root password. Installing openssh asks you to set the root password anyway.
fatalsaint
2010-01-25, 20:39
Sudo != root. Sudo is with respect to the user, not the "root" account.
Most of the stuff you do as a user that would normally require "root" rights, like the app manager, are actually using Sudo. Sudo grants the *user* temporary root rights to run the applications.
Sudo has been configured to grant user the right to be root with specific commands *without a password*. Meaning that if you set a root or user password it won't matter because sudo has been told "don't ask".
The way Ubuntu does it, is it has two wrapper programs: gksu and gksudo. Your user account has a password that only you are supposed to know, when you launch Synaptic or whatever package manager *that* sudo has been told "Ask for a Password" and it uses gksudo/su to prompt a GUI password box for you to put that into.
AFAIK: No gui password prompt program is available for the N900 and thus that specific solution would require manual work in making one. The other possibility is you set yourself a user password (leave root locked unless you have specific reason to need it), and then completely change your sudoers file to prompt for a password in order to gain root.
However, you would then need to go through and modify every .desktop file and have it launch in a terminal window instead of directly so that your terminal will ask for the password. Not elegant, and certainly not easy... not to mention extremely likely to brick the device unless you know exactly what you're doing.
Given the sample size of the software for N900 it's unlikely for anyone to ever get a virus. Though it's possible that something that targets Debian could be adjusted accordingly.
However, it would have to be "download and install" and it would need to be on -likely- this forum, since no virus is complete if it attacks ONE machine. Once here, people would likely complain and the package would fail.
The reason why Windows has such a problem has nothing to do with community or support - it's pretty much impossible to get through these days. Ten years ago, on home OSs, maybe.
What Windows has is the average userbase and the sheer size of it. As a Windows admin I've seen my share of viruses and in all cases there's some user looking at the floor muttering something about "I installed this and that".
I don't even think there's such a a thing as a virus any more - last I've seen is CIH. Nowadays they're all trojans.
Make no mistake, if a billion people would have N900 and the right to install-from-anywhere, there'd be a million of the little buggers. For now, however, stick to repositories. Even better, stick with official ones. I'm guessing that the push to Extras gets someone to at least skim the code.
I keep getting msn messanger spam messages. Not sure how that happened. Does that mean my device could have a virus or is it just my msn with the problem? Is there a way to get rid of it?
spam you recieve on msn is NOT you're fault, its your friends that have the viruses.
andreasole
2010-01-29, 13:22
hey guys,i am new to this forum and i would like to ask if i need an antivirus for my N900.
sjgadsby
2010-01-29, 13:37
The following threads were combined to make this thread:
"AntiVirus" with twenty-nine posts
"Virus risks?" with thirteen posts
"Anti Virus" with three posts
"Anti-virus pgm for N810?" with twenty-seven posts
"Can N900 get a virus?" with nineteen posts
"antivirus" with two posts
I'm leaving this thread in "General" as this topic is a FAQ that spans all Maemo versions.
spoonbuddy
2010-01-29, 18:25
What about pop ups that wont go away? Is there any way to stop this?
That's java-script scare tactics. It works best on windows users and the .exe you have there is a neat trojan ;)
AFAIK: No gui password prompt program is available for the N900 and thus that specific solution would require manual work in making one. The other possibility is you set yourself a user password (leave root locked unless you have specific reason to need it), and then completely change your sudoers file to prompt for a password in order to gain root.
sudo can be configured to have a grace period with no password required after sudo with a password has been run. So, without changing any .desktop files or altering anything except a one time change to sudo configuration, a user could open a terminal session and type:
sudo pwd
and enter the user password, then take any other action that invokes sudo and not need a password. After timestamp_timeout expires without a sudo command being executed, a password is again required. The default it to always require a password. timestamp_timeout is set by /etc/sudoers. The n900 /etc/sudoers file does not have an entry present for timestamp_timeout, so that would have to be added and the NOPASSWD entries would have to be changed as well.
However, you would then need to go through and modify every .desktop file and have it launch in a terminal window instead of directly so that your terminal will ask for the password. Not elegant, and certainly not easy... not to mention extremely likely to brick the device unless you know exactly what you're doing.
Hey guys,does the N900 need an antivirus and how do u use the secondary camera on the phone,cos i cant get mine on,sorry i had to buzz in cos am going off and on,could any 1 help
Hey guys,does the N900 need an antivirus and how do u use the secondary camera on the phone,cos i cant get mine on,sorry i had to buzz in cos am going off and on,could any 1 help
N900 is based on Linux and I haven't heard of a virus out for Linux yet. Most Linux antiVirus software packages just scan for virus' on other platforms to avoid passing them on in infected programs.
If you mean the camera facing the user then the app in question needs to support it. Video calls over GTalk can work with it if the other end supports video calling too.
zabishah20
2010-06-11, 11:59
hi the owners of 900
as we are just a step back to have USB support for our device.
in case if it ll support flash disks and other storage devices as well.
don't we need a kind of antivirus to protect our device????
See the thing that really perplexes me about this is it says;
Last edited by zabishah20; Today at 05:01 AM. Reason: spelling corretion
I can still barely make out what your trying to convey - I am just going to have to assume your first language isn't English.
I don't know where to begin exactly, but there is NO NEED for Maemo anti-virus software.
rickysio
2010-06-11, 12:23
x86 based viruses will not do much to ARM based phones. Like the N900.
All it will do is probably crash the system. At most.
There's not yet anyone much programming malware for Maemo. Once upon a time there were no need for MS DOS antivirus either. But thinking security on ANY platform is good practice, even if there's no known exploits - yet.
Virus is an outdated term anyway, I would believe a rootkit is a more reasonable threat to worry about on this micro-webserver known as N900.
Edit: and of course, transmitting viruses. If you first hook this up as a drive on a virus infected machine, and then on another machine, the virus may be transferred.
sjgadsby
2010-06-11, 12:35
The thread "Anti virus for nokia N900" with four posts has been merged into this thread.
Today I used my N800. I connected to the Internet as usual but had to remove Skype for the umpteenth time because the call button was again greyed out. When I went to Skype to reload it, I got the msg. untrusted certificate. Sadly I was in a hurry and did not inspect the certificate. I kept getting this msg. Every time after the first, I just hit cancel. Eventually when I hit the browser icon, it would say web loading. But it would not load. I also got the msg. that my browser had "no home" page.
When I got the N800, everyone bragged about how Nokia kept supporting "older" devices. Now I see that people who want to support MeeGo for the N800 are having their forum comments closed. As someone said Maemo is a "quirky" OS. The people who want to port Android to the N800 do not seem to be getting the necessary support. Are we left holding the empty box and a brick when we fail to check a certificate?
Now I see that people who want to support MeeGo for the N800 are having their forum comments closed.
Surely that's because they're redundant, what with a lively discussion taking place on the MeeGo forums (http://forum.meego.com/) themselves.
As someone said Maemo is a "quirky" OS. The people who want to port Android to the N800 do not seem to be getting the necessary support.
This is because Android requires custom drivers for things like 3D that require sources Nokia cannot distribute.
Also, I believe your post is off-topic for this thread.
wmarone said "Also, I believe your post is off-topic for this thread."
This thread is about virus. If talking about a virus is off-topic then I guess anything that reveals a flaw from Nokia is off-topic.
paulkoan
2010-08-03, 03:13
This thread is about virus. If talking about a virus is off-topic then I guess anything that reveals a flaw from Nokia is off-topic.
Hi Oouc - the reason why talking about flaws or bugs in a thread about virus's is off-topic is because these are different things.
A virus is a malicious application intended to compromise a computer, whereas a bug is a legitimate application behaving in unintended ways through programmatical errors.
You would be better off posting your comments about the issues with skype in a more relavent thread, as you are most likely to get better suggestions or help.
vivek5000
2010-08-06, 11:39
Hi.. Are there any anti-virus software available for Nokia N900..
There are many for Symbian versions.. so is any app expected for the N900 soon??
N900 is designed to be online 24/7 (although not all mayb), hence it is a very important that we have some good Anti-virus app like Norton, AVG, Mcafee etc.. for the Nokia N900..
sjgadsby
2010-08-06, 11:45
The thread "Anti Virus Software" (1 post) has been merged into this thread.
N900 is designed to be online 24/7 (although not all mayb), hence it is a very important that we have some good Anti-virus app like Norton, AVG, Mcafee etc.. for the Nokia N900..
Find a virus that runs on N900 first. Then we'll talk :)
First to find a linux virus, then to port it for ARM... tough job...
vBulletin® v3.8.8, Copyright ©2000-2025, vBulletin Solutions, Inc.