Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #237598

Re: MDs & Dentists

From Reco <recoverym4n@enotuniq.net>
Newsgroups linux.debian.user
Subject Re: MDs & Dentists
Date 2021-07-21 21:10 +0200
Message-ID <CDpLr-V8-3@gated-at.bofh.it> (permalink)
References (5 earlier) <CD00F-1XX-3@gated-at.bofh.it> <CDfCp-3bn-1@gated-at.bofh.it> <CDlRw-6JH-13@gated-at.bofh.it> <CDmud-7bz-9@gated-at.bofh.it> <CDpip-ul-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

On Wed, Jul 21, 2021 at 02:38:50PM -0400, Celejar wrote:
> > > > > https://hacked.com/linux-ransomware-notorious-cases-and-ways-to-protect/
> > > > 
> > > > Requires Java to be installed. A rare case on a Linux *desktop*.
> > > 
> > > Rare? I don't have statistics, but on one of my Linux desktops, I do
> > > some development work for Android, using IntelliJ IDEA / Android Studio,
> > > which depend on at least some Java components.
> > 
> > Numbers show that I was incorrect. Let's call it "unlikely" instead of
> > "rare". Let the popcon graphs speak for themselves:
> > 
> > https://qa.debian.org/popcon.php?package=firefox-esr
> > vs
> > https://qa.debian.org/popcon.php?package=openjdk-11
> 
> I'm not sure I'm reading the numbers correctly, but the openjdk-11-jre
> figures are 26-29% (as opposed to firefox-esr's 42%) - hardly "unlikely."

I was referring to absolute numbers, which are 57847 and 83915
respectively.  Looks like I was incorrect again, I looked at jre, not
jdk. Ok, let's make this "common".

I wonder which software (that requires JDK) is provided by Debian and
is that popular.


> > True. Every version of Chromium and Firefox fixes at least one.
> > Most of said vulnerabilities do cannot be used to get Remote Code
> > Execution (RCE) though. Which leaves us with "random download" scenario,
> > which I've discussed above.
> 
> Most, yes. But the pwn2own hackers, for example, seem to pretty
> routinely get RCE on the major browsers, so I wouldn't bet my data that
> ransomware authors won't as well:
> 
> https://www.zerodayinitiative.com/blog/2019/3/21/pwn2own-vancouver-2019-day-two-results
> https://www.bleepingcomputer.com/news/security/researchers-earn-1-2-million-for-exploits-demoed-at-pwn2own-2021/

Given the amount of money and the publicity these people earn - I'd be
surprised if they did not find anything. Still, it's one (ok, several)
RCE per year, and due to the nature of pwn2own - it's unlikely that such
vulnerabilities are common knowledge before the actual pwn2own event,
and they're patched afterwards.

Reco

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: MDs & Dentists Charlie Gibbs <cgibbs@surfnaked.ca> - 2021-07-14 17:40 +0200
  Re: MDs & Dentists Jude DaShiell <jdashiel@panix.com> - 2021-07-14 20:30 +0200
    Re: MDs & Dentists John Hasler <john@sugarbit.com> - 2021-07-14 21:30 +0200
      Re: MDs & Dentists Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-15 00:30 +0200
    Re: MDs & Dentists ellanios82 <ellanios82@gmail.com> - 2021-07-14 21:50 +0200
      Re: MDs & Dentists Weaver <weaver@riseup.net> - 2021-07-14 22:00 +0200
        Re: MDs & Dentists Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-15 00:40 +0200
          Re: MDs & Dentists Weaver <weaver@riseup.net> - 2021-07-15 01:00 +0200
            Re: MDs & Dentists Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-15 01:40 +0200
            Re: MDs & Dentists Weaver <weaver@riseup.net> - 2021-07-15 02:40 +0200
              Re: MDs & Dentists Gene Heskett <gheskett@shentel.net> - 2021-07-15 03:20 +0200
              Re: MDs & Dentists Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-15 04:00 +0200
                Re: MDs & Dentists Weaver <weaver@riseup.net> - 2021-07-15 04:00 +0200
                Re: MDs & Dentists Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-15 04:10 +0200
      Re: MDs & Dentists Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-15 00:30 +0200
        Re: MDs & Dentists jeremy ardley <jeremy@ardley.org> - 2021-07-15 01:10 +0200
          Re: MDs & Dentists jeremy ardley <jeremy@ardley.org> - 2021-07-15 02:30 +0200
            Re: MDs & Dentists Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-15 04:00 +0200
          Re: MDs & Dentists Stefan Monnier <monnier@iro.umontreal.ca> - 2021-07-15 03:50 +0200
            Re: MDs & Dentists Weaver <weaver@riseup.net> - 2021-07-15 04:00 +0200
          Re: MDs & Dentists ellanios82 <ellanios82@gmail.com> - 2021-07-15 09:50 +0200
            Re: MDs & Dentists Jeremy Ardley <jeremy@ardley.org> - 2021-07-15 10:10 +0200
            Re: MDs & Dentists Weaver <weaver@riseup.net> - 2021-07-15 10:10 +0200
          Re: MDs & Dentists Joe <joe@jretrading.com> - 2021-07-15 11:40 +0200
            Re: MDs & Dentists <tomas@tuxteam.de> - 2021-07-15 12:30 +0200
        Re: MDs & Dentists Reco <recoverym4n@enotuniq.net> - 2021-07-15 08:50 +0200
          Re: MDs & Dentists Celejar <celejar@gmail.com> - 2021-07-20 17:40 +0200
            Re: MDs & Dentists Reco <recoverym4n@enotuniq.net> - 2021-07-21 10:20 +0200
              Re: MDs & Dentists Celejar <celejar@gmail.com> - 2021-07-21 17:00 +0200
                Re: MDs & Dentists Reco <recoverym4n@enotuniq.net> - 2021-07-21 17:40 +0200
                Re: MDs & Dentists Dan Ritter <dsr@randomstring.org> - 2021-07-21 18:00 +0200
                Re: MDs & Dentists Gunnar Gervin <dofeelok@gmail.com> - 2021-08-01 15:40 +0200
                Re: MDs & Dentists "Andrew M.A. Cater" <amacater@einval.com> - 2021-08-01 16:00 +0200
                Re: MDs & Dentists Gunnar Gervin <dofeelok@gmail.com> - 2021-08-01 16:00 +0200
                Re: MDs & Dentists rhkramer@gmail.com - 2021-08-01 18:30 +0200
                Re: MDs & Dentists "Andrew M.A. Cater" <amacater@einval.com> - 2021-08-01 19:10 +0200
                Re: MDs & Dentists Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-08-01 22:30 +0200
                Re: MDs & Dentists Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-08-01 22:50 +0200
                Re: MDs & Dentists Gunnar Gervin <dofeelok@gmail.com> - 2021-08-02 15:00 +0200
                Re: MDs & Dentists Gunnar Gervin <dofeelok@gmail.com> - 2021-08-02 15:00 +0200
                Re: MDs & Dentists Dan Ritter <dsr@randomstring.org> - 2021-08-01 18:00 +0200
                Re: MDs & Dentists Gunnar Gervin <dofeelok@gmail.com> - 2021-08-01 15:50 +0200
                Hard to understand, being clear [ was Re: MDs & Dentists] Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-08-01 22:40 +0200
                Re: Hard to understand, being clear [ was Re: MDs & Dentists] Gunnar Gervin <dofeelok@gmail.com> - 2021-08-02 15:40 +0200
                Re: Hard to understand, being clear [ was Re: MDs & Dentists] Gunnar Gervin <dofeelok@gmail.com> - 2021-08-02 16:00 +0200
                Re: MDs & Dentists Nicholas Geovanis <nickgeovanis@gmail.com> - 2021-07-21 18:20 +0200
                Re: MDs & Dentists "James H. H. Lampert" <jamesl@touchtonecorp.com> - 2021-07-21 18:40 +0200
                Re: MDs & Dentists "Thomas Schmitt" <scdbackup@gmx.net> - 2021-07-21 19:10 +0200
                Re: MDs & Dentists Stefan Monnier <monnier@iro.umontreal.ca> - 2021-07-21 19:40 +0200
                Re: MDs & Dentists "Thomas Schmitt" <scdbackup@gmx.net> - 2021-07-21 20:20 +0200
                Re: MDs & Dentists Stefan Monnier <monnier@iro.umontreal.ca> - 2021-07-21 21:50 +0200
                Re: MDs & Dentists "Thomas Schmitt" <scdbackup@gmx.net> - 2021-07-21 23:50 +0200
                Re: MDs & Dentists Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-21 19:20 +0200
                Re: MDs & Dentists Reco <recoverym4n@enotuniq.net> - 2021-07-21 19:40 +0200
                Re: MDs & Dentists Reco <recoverym4n@enotuniq.net> - 2021-07-21 19:30 +0200
                Re: MDs & Dentists Nicholas Geovanis <nickgeovanis@gmail.com> - 2021-07-21 22:40 +0200
                Re: MDs & Dentists Celejar <celejar@gmail.com> - 2021-07-21 20:40 +0200
                Re: MDs & Dentists Reco <recoverym4n@enotuniq.net> - 2021-07-21 21:10 +0200
                Re: MDs & Dentists Celejar <celejar@gmail.com> - 2021-07-21 22:30 +0200
                Re: MDs & Dentists Richard Hector <richard@walnut.gen.nz> - 2021-07-21 21:20 +0200
        Re: MDs & Dentists Michael Lange <klappnase@freenet.de> - 2021-07-15 13:10 +0200
          Re: MDs & Dentists Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-15 15:40 +0200
    Re: MDs & Dentists Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-07-15 00:30 +0200

csiph-web