final release - p2p or mirrors

Stan Bubrouski stan at ccs.neu.edu
Mon May 17 01:01:24 UTC 2004


On Sun, 2004-05-16 at 17:28, Paul Iadonisi wrote:
> On Sun, 2004-05-16 at 12:46, Stan Bubrouski wrote:
> 
> [snip]
> 
> >  (Ie: Downloading things from suprnova.org
> > > is potentially hazardous, especially to Windows systems.)
> > > 
> > 
> > Not a problem for us though ;-)
> 
>   Don't be so sure.  I'm sure many torrentzens know about the fake
> 'Microsoft Office 2004' release for Mac OS X that is actually a trojan. 
> But I have to wonder about the 'Azureus Upgrade To 2.0.8.5' on
> suprnova.org right this moment.  There's no mention of version 2.0.8.5
> at all on http://azureus.sourceforge.net/, so this file is HIGHLY
> suspect.  And if you don't know, Azureus is an written in Java, which
> means it will run on Linux with an appropriate jvm.  I feel a *little*
> safer running an unknown java app on Linux than *anything* under
> windows, but unknown anything is BAD.
>   The point is, I'm not too cocky about Linux's purported *immunity* to
> viruses, trojans, and worms.  It's safer, yes, and I don't buy the
> argument that's it's less prone to these ailments because it's less
> popular, but the moral is, I suppose, BE CAREFUL OUT THERE.
> 

I get azureus from CVS at sourcerforge, lets make no mistake here: the
content can be suspect but I always ensure the software that delivers it
isn't ;-)

Their are trojans for any OS, in Linux though we have a distinct
advantage over windows users: we don't have to rely on binaries.

-sb





More information about the fedora-test-list mailing list