131–140 of 155 posts
Is 'backdoor' the correct term if the vulnerability does not originate from Apple?
I don't like the use of backdoor for malicious cracks, as it confuses the argument between malware and bad security practices. Though technically, backdoor is the correct term.
I feel the use of 'backdoor' here is misleading. The software described would usually be classified as an Advanced Persistent Threat [1] or Rootkit [2] Backdoor [3] usually refers to methods to sidestep authentication added by the vendor. 1: https://en.wikipedia.org/wiki/Advanced_persistent_threat 2: https://en.wikipedia.org/wiki/Rootkit 3: https://en.wikipedia.org/wiki/Backdoor_(computing)
Earlier quoted context omitted.
I agree, the terminology Kaspersky Labs is using is incorrect and misleading. The further poster is right that this should be labeled as "rootkit."
No, Kaspersky Labs is using correct terminology. Some rootkits install a backdoor. Not all rootkits install a backdoor -- some merely conceal themselves and operate locally. The famous Sony Rootkit is one such example of a rootkit which did not add a backdoor. The defining characteristic of a rootkit is that it conceals its presence from the rest of the system. Backdoor.OSX.Mokes.a doesn't really do this -- it's only…
Is 'backdoor' the correct term if the vulnerability does not originate from Apple?
Earlier quoted context omitted.
A lot of cross platform software that attempts audio/video (e.g. Skype etc) would be considered malware by some. Usually people who've had to use it at least once.
Serious question: Is this snark, or does the software in question do sketchy things with privilege escalation that might be leveraged into attacks? I agree that much software has terrible UI, but it's good to distinguish surface stuff from objectively terrible security decisions.
Not sure whether to be amused, vindicated, or concerned that the most prominent conversation here on HN is terminology: "Is 'backdoor' the correct term?" Malware, trojan, virus, rootkit, backdoor, squirglebunny (OK, I may have made that last one up). There's not a lot of talk about the threat vector though - does anyone know how this infects systems?
Not sure whether to be amused, vindicated, or concerned that the most prominent conversation here on HN is terminology: "Is 'backdoor' the correct term?" Malware, trojan, virus, rootkit, backdoor, squirglebunny (OK, I may have made that last one up). There's not a lot of talk about the threat vector though - does anyone know how this infects systems?
did you see last weeks post about bikeshedding? this is exactly what bikeshedding is.
Okay, but no information on what to do about it, or how to protect against it.
Enable Gatekeeper on Mac (or just don't disable it, I think it's enabled by default).
Okay, but no information on what to do about it, or how to protect against it.
Install Kaspersky Endpoint Protection, friend! ;) In all seriousness, when a company releases a malware write-up, they typically imply that their software would have prevented it or will prevent it.