Moving to Linux and Spyware

[whm1974]

Hello, I ordered the mandrake 8.0 Powerpack and will be getting it this week. I plan on replacing Windows as a game platform with Linux. The other OS I use is BeOS, and since the future of BeOS is doubtful and I don't want to go back to MS, is what got me to try Linux again after trying RH 5.2 over two years ago.

After D/L the ISO files and installing LM, I have to say Linux is far more usible then when I first tryed it. KDE looks nice, setting up an iterenet connection is a breeze. Played a few loki demos and I'm hooked.

Now a friend and I was discussing spyware after he tryed Ad-Aware and found 9 spyware programs on his computer. Does using a non-MS OS(other then a Mac) like Linux or BeOS make a user immune to spyware? What about cookies?

Bill Meadows

[Xsecrets]

Well no you won't be immune to spyware but I doubt you will find it in any opensource programs cause someone would see it very quickly and raise a fit. But comercial software is still free to put it in if they so desire. However at this point I can't think of any that do with the possible exeption of opera who outlines thier adware very explicity for you on their web site. and doesn't in any way try to hide it.

And as for cookies they work just like they do in windows so take any of the same precautions you would in that enviornment.

[ 17 June 2001: Message edited by: Xsecrets ]

[Craig McPherson]

When Comet Cursor gets ported to Linux, THEN it'll be time to worry about spyware. :)

Junkbuster is a very good way to handle and control cookies on a per-site basis, and also allows you to set fake user agents and referrers (((that wasn't meant as a death threat, moyix. fnord))). It also lets you block images from "services" like Doubleclick, which track you solely by using banner advertisements.

Also, you can set your firewall to log (or drop) any suspicious information going out from your system.

[whm1974]

Ok I didn't think it was likly there would be any spyware(for awhile) on Linux. It looks like Linux users are immune that way for the time being. So cookies are the only way I could be tracked, problem is cookies are very useful for password and shopping stuff.

I did look up Opera's adware statement. I used Opera for Windows before moving to BeOS for internet, and of course I use on BeOS as well. However Opera for BeOS doesn't use MDI like it does with Windows and Linux- it act like most other browsers do. I'll probly use Kongueror when I get used to Linux.

Is it worth setting up a firewall for DialUp?

sorry about the long post
Bill Meadows

[Craig McPherson]

I think Mozilla lets you accept cookies from only sites you choose to allow. Junkbuster is a personal proxy that lets you do the same, no matter what browser you're using.

You can also be tracked via banner ads even if you have all cookies turned off, even though it's of a much more limited nature. That's why Junkbuster is also good to block banner ads.

And yes, I think you should have a firewall up even if you're on dialup. A sometimes-on connection is NOT more secure than an always-on connection, just like a dynamic IP is NOT more secure than a static IP, unless you count obscurity as security.

Probably the most angry I've been in my life (and I get angry on a regular basis) was when I read a "letter to the editor" in PC Magazine (or a similar publication) in which a novice DSL user explained that he kept his DSL connection down when he wasn't using it, to "keep the horrible hackers at bay." Oh, yes, sir, that's absolutely brilliant: instead of having your system pitifully vulnerable to attack 24 hours a day, you only have your system pitifully vulnerable to attack 6 hours a day. Yes, yes, that's much better. That guy could get a job in Microsoft's Obscurity Department -- err, pardon me, Security Department.

[ 17 June 2001: Message edited by: Craig McPherson ]

[Xsecrets]

I know that opera and konkeror (sp) both let you block cokies from inividual sites or acept only from certian sites or whatever you want to also.

So all in all you cookie mangement options are there.

And like craig said junkbuster is a good little proxy program for that.

[whm1974]

There might be somthing to be said about turning off the computer if not in use if you have DSL or cable Craig, although I would agree with you that it would be stuiped not to have a firewall.

I take it that junkbuster is avalible for Linux? Assuming I get my LM order, after this week I don't plan on using Windows. I'm still considing buying another HD for Linux, it's on a 2 gig now, while Windows and BeOS are on a 30 gig HD divided into 2 15 gig partitions. I just don't feel like buying another HD.

Bill Meadows

[Craig McPherson]

Originally posted by whm1974:
<STRONG>There might be somthing to be said about turning off the computer if not in use if you have DSL or cable Craig</STRONG>

How?

An insecure system that's only online three hours a day is JUST as insecure as an insecure always-on system, during those three hours.

[whm1974]

There might be somthing to be said about turning off the computer if not in use if you have DSL or cable Craig, although I would agree with you that it would be stuiped not to have a firewall.

I take it that junkbuster is avalible for Linux? Assuming I get my LM order, after this week I don't plan on using Windows. I'm still considing buying another HD for Linux, it's on a 2 gig now, while Windows and BeOS are on a 30 gig HD divided into 2 15 gig partitions. I just don't feel like buying another HD.

Bill Meadows

[whm1974]

There might be somthing to be said about turning off the computer if not in use if you have DSL or cable Craig, although I would agree with you that it would be stuiped not to have a firewall.

I take it that junkbuster is avalible for Linux? Assuming I get my LM order, after this week I don't plan on using Windows. I'm still considing buying another HD for Linux, it's on a 2 gig now, while Windows and BeOS are on a 30 gig HD divided into 2 15 gig partitions. I just don't feel like buying another HD.

Bill Meadows

[Craig McPherson]

A triple-post, with one of them four hours before the other two?

Well, anyway, Junkbuster is an HTTP proxy that'll run on any UNIX system. Doesn't even have to run as root; it runs fine as "nobody." Exists mainly to block banner ads (by specifying a list of servers never to connect to, like Doubleclick, or directory regexps like /banners/), but it also can do cookie control, fake HTTP headers, and so forth. Pretty cool.

[whm1974]

Sorry guys, for some reason Opera is acting funny, instead of letting me view stuff it's posting my last message.

Anyway, I place an order for LM 8 PK from Linux Central thursday and didn't get an email saying they got the order, or what my order's status is. Has anybody brought stuff from Linux Central?

Bill Meadows

[whm1974]

Well I got the games I ordered from www.eboline.com (http://www.eboline.com) - HOMM and SOF. While the price is $10 I'm going to order some more while I can like Q3A and D3.

And I'm getting LM 8 PP tommorrow

Bill Meadows