Take example of CSS crack [was - [LI] Linux Virus scanners ]

[Swapan Sarkar <swapan@xxxxxxxxxxxxx>]

1) Yes, it can be. Look under the topic of virus in Linux Today for
announcements of commercial products which do it.

2) No, your interpretation was wrong. These security modules are based
on strong mathematical formulaes which are difficult to solve. If their
sources are open then the experts can judge whether the formula is
really strong or weak. Take the recent case of cracking the CSS code
used in DVDs. If they had used an open source method, they wouldn't
have used the existing method and it would have been lot more difficult
to crack.

HTH
-swaps

Date: Sun, 14 Nov 1999 13:38:28 +0530 (IST)
From: "Rajeev B.S.Rao" <rajeevr@xxxxxxxxxxxxxxxxxxx>
Subject: [LI] Linux Virus scanners.

Hello,
   With all these mails about viruses I couldn't help asking these
questions.
1) Can a linux virus scanner be coded to scan for virus of other
operating
system, ("Windows, prime example).

2) A long time ago, I had queried about linux viruses and the danger of
open source code. In essence, the answer was that viruses are created,
as
an answer to Microsoft's closed source, and other security policies, ie
vengence. And even if
a linux virus was created, it would be easy to track and remove.

But virus's need not be the couse an effect of sadistic minds, to
paranoid
person like myself, a virus could be created, as a matter of greed. I.E
to
bypass security and restrictions, for economical gain. Hence I
re-iterate,
that if linux, has to be used in situations where security is essential,

like banks, companies, (or even lists) the modules for security cannot
be
designed, and then have it's source exposed for all to see. Any comments

on this? Or has the open source policy been changed, since the last time
I
read abbout it?

B.T.W one of the recent pcqs, had an article on windows 2000 passwords.
could you in a later issue, provide an article on password-shadowing
systems, used in linux/ unix.

Rajeev

--------------------------------------------------------------------
The Linux India Mailing List Archives are now available.  Please search
the archive at http://lists.linux-india.org/ before posting your question
to avoid repetition and save bandwidth.