they will save 188,000 € on Microsoft license fees per year

you are viewing a single comment's thread
view the rest of the comments
[–] 38 points 1 year ago (18 children)

If the trend continues then maybe the hacker community will start focusing on Linux. Can you imagine "I don't need a virus scanner, I use Windows, the under dog OS"

  • source
  • hideshow 18 child comments
  • [–] 56 points 1 year ago (4 children)

    The hacker community it's very focused on Linux since most servers in the world run it. The fly by night script kiddies and botnet creators definitely prefer end user systems though.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 7 points 1 year ago (2 children)

    This right here. Linux security is so good that the easiest way to break in is via Phishing someone with a windows laptop.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 6 points 1 year ago (10 children)

    Please become a thing. Having viruses custom tailored for your OS means you've made it.

  • source
  • parent
  • hideshow 10 child comments
  • [–] 10 points 1 year ago (4 children)

    I don't wanna "make it". I just want fast, secure, private computing.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 3 points 1 year ago (2 children)

    Agreed. However, more users (personal, institutional or business) equals more devs focused on the OS.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 1 year ago (1 child)

    We need enough, not more. The concept of "more" and "surplus" got us into this capitalist dystopia. I know this isn't the point you're making. I'm just making a separate point that I thought of reading yours. :)

  • source
  • parent
  • hideshow 1 child comment
  • Same, I'm largely being facetious. But viruses come with success, and success also means more software and hardware compatibility. I think that's worth a periodic scan every so often and some slightly inconvenient security systems in place.

  • source
  • parent
  • [–] 3 points 1 year ago* (4 children)

    There already are. I barely missed a linux virus from a hijacked python package what... two years ago?

    Linux desktops are quite non-homogenous though, so their vectors/nature is kinda different.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 1 year ago (3 children)

    Sure, and they have been for decades. They're still not that common though.

    What Python package almost got you?

    I wonder if I've been hit but just haven't noticed because I tend to run things in containers.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 3 points 1 year ago* (1 child)

    Pytorch Nightly: https://pytorch.org/blog/compromised-nightly-dependency/

    https://www.theregister.com/2023/01/04/pypi_pytorch_dependency_attack/

    Funnily enough I can't even post what it does without the Lemmy comment filter zapping me, but it tried to scrape accounts and passwords.

    The malicious binary would upload files ranging in size up to 99,999 bytes and send the contents to a specified domain.

    Was pretty scary from my perspective. I missed it by a week. PyPi is a mess, and it makes me wonder how much isn't caught.

  • source
  • parent
  • hideshow 1 child comment
  • That is scary. But it does require using a custom repository, so hopefully few were hit.

    We use poetry, enough which allows specifying additional package repos and it looks like we'd be susceptible to the same attack, but for our internal package index. Looks like I have something to fix this week, thanks for the link!

  • source
  • parent