Re: [Asrg] Viruses

>No, there are actually specific weaknesses in the memory and
>protection model of windows operating systems which allow programs run
>by ordinary users without privileges to infect the machine with
>viruses.

Viruses and worms can easily enough propagate while operating without 
privileges.

The fact is that Sun, Linux, Mac, VMS, and other OSes (and apps running under 
those) also can be and have been subject to viruses too.  The main reason 
they're not infected more often is because Windows and its apps are more widely 
found, and thus a more appealing target for virus authors.

>Plus or minus the odd serious bug or misconfiguration operating
>systems such as unix, linux, VMS, MVS, TOPS-20 (going back 20+ years),
>etc are more or less immune to such problems. 

I guess you can claim that if you dismiss any vulnerability as an "odd serious 
bug".

OS/MVT had plenty of strong memory and protection features, but (like most ANY 
operating system) there were plenty of holes and vulnerabilities, too.  All 
systems have them;  most nontrivial applications do, too.

> This is because you generally have to first obtain super-user privilege to 
modify system software.

But you don't have to "modify system software" to become infected with a worm, 
virus, or trojan.

>This is really viruses 101.

The problem (here on THIS list at least) isn't viruses, it's the ability to 
install malicious programs that can aid and abet spammers.  That does NOT 
require system root rights.  

One of the things that's so appealing about the sender/recipient pair 
permissions lists is that the SAME mechanism works against BOTH spam AND 
viruses/worms/trojans.  And it doesn't require a special theoretical 
high-security operating system to achieve that.

Gordon Peterson                  http://personal.terabites.com/
1977-2002  Twenty-fifth anniversary year of Local Area Networking!
Support the Anti-SPAM Amendment!  Join at http://www.cauce.org/
12/19/98: Partisan Republicans scornfully ignore the voters they "represent".
12/09/00: the date the Republican Party took down democracy in America.

_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg