Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

krebsonsecurity.com

Post reply on HN
Print view View original

51–60 of 229 posts

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#51

Post by II2II »

Taek wrote: post #38
floundy wrote: post #17

Earlier quoted context omitted.

Every couple of years I give daily driving Linux a try. I still find that old joke about "Linux is only free if your time is worth nothing" to be quite apt.

I don't find it to be that way at all. I've used Debian as my daily driver for almost 10 years and I spend maybe... 30 minutes per year dealing with setup and configuration and stuff? Much less than I needed to back when I mainly used Windows. Sure, there's a learning curve. But Windows has a learning curve too, you just already climbed that hill.

Judging from the rest of the thread, they were referring to setup and configuration. For the most part, I consider this to be one of the strengths of Linux.

On the other hand, the operating system is the means rather than the end to most people. If a person is transitioning from Windows to Linux, they will probably have a substantial number of new programs to learn in the process. That is going to factor into most people's impressions of the operating system as a whole.

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#52

Post by cynicalsecurity »

johanneskanybal wrote: post #27
Phurist wrote: post #14

Earlier quoted context omitted.

Or you know... just use Linux

Right tool for the job. Linux for deploying stuff to, Linux or mac for working on the stuff you’ll deploy. Windows for games and everyday use. They’re all superior in their category and it’s too obvious to spend time arguing about.

You don't need Windows for games since ages. Steam games run on Linux.

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#53

Post by thrtythreeforty »

tripplyons wrote: post #18
ronsor wrote: post #7

Earlier quoted context omitted.

Put VirtualBox strings in your firmware :)

Yes, and don't forget to install the VirtualBox guest extensions in your host machine to make it looks even more like a VM!

Is there any downside to unironically doing this? Seems like it'd actually work.

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#54

Post by NexRebular »

Phurist wrote: post #14
Melatonic wrote: post #13

The best anti malware on any version of windows has always been to make your default account you use everyday a non admin account. You also need to create a separate account (can just be a local account) that is a full administrator. Make sure you use a different password. Anytime you need to install something or run powershell/CMD as admin it will popup and ask for the separate login of the admin account. This is ba…

Or you know... just use Linux

> Or you know... just use Linux

...where namespaces provide excellent technology for hiding malware making linux one of the best platforms to turn into a evil host.

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#55

Post by rzzzt »

ttul wrote: post #4

If you make your machine look like a malware execution sandbox, a lot of malware will terminate to avoid being analyzed. This is just part of the cat and mouse game.

It was mentioned in the other front page article, I guess this is where we got this submission from: https://news.ycombinator.com/item?id=44413185

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#56

Post by fredfish »

floundy wrote: post #34
fredfish wrote: post #28

Earlier quoted context omitted.

Every few years someone forces me to use Windows and I find that my data is apparently worth nothing since it being one giant anti-pattern wastes my time.

I agree, I switched to Mac last fall with the incessant Windows 10 popups that my CPU is not supported and I can't upgrade to Windows 11, so buy a new PC chump or you'll be EOL! Okay, I bought a new PC Mr. Nadella, it just doesn't run Windows. That ended up being the last straw in a long line of complaints with data privacy and things being forced on me in Windows. Somehow that stupid Bing toolbar would constantly re…

I wasn't very happy with Apple's bizarre UI or out of date libraries.

The easiest way to make an OS with ideal support on one platform is to only support Apple's hardware instead of the PC cosmos, so I will be interested if Asahi getting the relatively little resources it needs will gradually make it the least waste of time choice to use Linux on Apple hardware.

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#57

Post by ekianjo »

johanneskanybal wrote: post #27
Phurist wrote: post #14

Earlier quoted context omitted.

Or you know... just use Linux

Right tool for the job. Linux for deploying stuff to, Linux or mac for working on the stuff you’ll deploy. Windows for games and everyday use. They’re all superior in their category and it’s too obvious to spend time arguing about.

You can game on Linux for many years now. Windows is mostly mandatory if you play multiplayer games with anticheat

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#58

Post by ekianjo »

floundy wrote: post #39
tokai wrote: post #35

Earlier quoted context omitted.

>There is no Google Drive client for Linux What? Google accounts have been a thing in Gnome for years. You have Google Drive access right in Nautilus.

Not for ARM.

If you use a distro built on GNOME, ARM or not does not matter

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#59

Post by DelaneyM »

thrtythreeforty wrote: post #53
tripplyons wrote: post #18

Earlier quoted context omitted.

Yes, and don't forget to install the VirtualBox guest extensions in your host machine to make it looks even more like a VM!

Is there any downside to unironically doing this? Seems like it'd actually work.

It’s not much harder to just harden your system to not be vulnerable in the first place, and that protects your from a lot more.
Post reply on HN