We live in a networked world. ILOVEYOU and simular attacks take advantage of single user operating systems that have a high level of assumed trust. They trust that any program run on them by the user should be given full system access. the ILOVEYOU virus didn't effect unix systems because it wasn't written to, it wasn't written to because in a multiuser OS access is restricted, depending on the user, to certian area's of the system. this makes its effectivness highly questionable and therefore not worth the coders time. If you aren't going to run a secure system that is designed to survive in a network environment then you should not attach yourself to a network.

Common sense is the magic bullet. Don't execute anything on your machine that has not come from a trusted source. Don't download questionable programs with out at the very least having some sort of virus scanner. Don't do stupid things that will get you in trouble. Don't trust anyone online. Realize that distributed attacks (ddos, ILOVEYOU) are only going to become more popular and act accordinly. Don't be the weak link and don't assume MonkeyBoy64786 (at) aol (dot) com [email concealed] who sends you such funny email isn't themselves the weak link.

Of course this isn't new information, just thought I'd say it again.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/32/1795#1795