[Discussed] Security from remote data files

Here you can discuss every aspect of Debian. Note: not for support requests!

[Discussed] Security from remote data files

Postby makh » 2018-01-30 05:54

Hi

According to:
https://www.bleepingcomputer.com/forums/t/574487/is-it-possible-for-a-virus-to-be-embedded-in-a-image/

And a message for android safety:
Gif may contain code for scripts, malware or data stealing...


Please inform that when we download any file from any server or link, will it be a security threat to our linux system?

Thankyou
Last edited by makh on 2018-02-03 17:25, edited 1 time in total.
HP Probook 440 G2: Arch, Debian Stable
Server: none
Past: Debian, Centos, Ubuntu, Opensuse
GUI: Openbox, Cinnamon
Chroot: Debian, Ubuntu, Fedora
VM: Devuan

Employing the best:
Arabic
Debian
Homeopathic

For new: Try Linux Mint
User avatar
makh
 
Posts: 622
Joined: 2011-10-09 09:16

Re: Security from remote data files

Postby bw123 » 2018-01-30 07:00

makh wrote:Hi

Gif may contain code for scripts, malware or data stealing...


Please inform that when we download any file from any server or link, will it be a security threat to our linux system?

Thankyou


Imagine how secure your house would be if it had no doors or windows? Nothing could get in easily. That would be impractical, because you yourself could not get in and out, or store/remove items.

Now if you install a window, a door, or a tunnel under the house, bringing items in, (or the items themselves) isn't the "threat," it is people being *aware of the ways to enter.

I do seem to recall some issues that have popped up over the years from .gif files. You can probably look up compuserve, cshow, gif header, and things like that for more info.

I think it is very interesting how images are misused on the internet. They are often not used as images, often you never see them. They can inform others of the location of your house, and the tunnel, door, or window.
User avatar
bw123
 
Posts: 3578
Joined: 2011-05-09 06:02
Location: TN_USA

Re: Security from remote data files

Postby makh » 2018-02-01 18:01

So an application in debian or linux or android may not be spam safe, if the file we open is from untrusted or bugged source.
HP Probook 440 G2: Arch, Debian Stable
Server: none
Past: Debian, Centos, Ubuntu, Opensuse
GUI: Openbox, Cinnamon
Chroot: Debian, Ubuntu, Fedora
VM: Devuan

Employing the best:
Arabic
Debian
Homeopathic

For new: Try Linux Mint
User avatar
makh
 
Posts: 622
Joined: 2011-10-09 09:16

Re: Security from remote data files

Postby n_hologram » 2018-02-01 19:19

Can you mark this as "solved"?
bester69 wrote:There is nothing to install in linux, from time to time i go to google searching for something fresh to install in linux, but, there is nothing

the crunkbong project: scripts, operating system, the list goes on...
n_hologram
 
Posts: 444
Joined: 2013-06-16 00:10

Re: Security from remote data files

Postby makh » 2018-02-03 08:37

n_hologram wrote:Can you mark this as "solved"?

Hi
Sir! having a solution to a problem, means: Solved.
So it is still a pending issue.
If you want, I can consider closing it with <Discussed>...?
Thankyou
HP Probook 440 G2: Arch, Debian Stable
Server: none
Past: Debian, Centos, Ubuntu, Opensuse
GUI: Openbox, Cinnamon
Chroot: Debian, Ubuntu, Fedora
VM: Devuan

Employing the best:
Arabic
Debian
Homeopathic

For new: Try Linux Mint
User avatar
makh
 
Posts: 622
Joined: 2011-10-09 09:16

Re: Security from remote data files

Postby steve_v » 2018-02-03 08:59

makh wrote:Please inform that when we download any file from any server or link, will it be a security threat to our linux system?

On any system, downloading and running an executable from an untrusted source is a security risk.
If the application handling it has security flaws, opening a non-executable file from an untrusted source may also be a risk.
Install software updates and don't download stuff, especially executables, from dodgy sites. This is not Debian or Linux specific, just good computing practice.

makh wrote:So it is still a pending issue.
And it will continue to be so as long as the internet exists. Unless you want to live in a <insert proprietary vendor> walled-garden and only use approved content.

Now can we mark this silly question as solved?
steve_v
 
Posts: 695
Joined: 2012-10-06 05:31
Location: New Zealand

Re: Security from remote data files

Postby makh » 2018-02-03 17:26

steve_v wrote:...
Now can we mark this silly question as solved?

Not all are Post Doctorate in Linux, like you.


---

I suppose theres a solution, easily possible.
HP Probook 440 G2: Arch, Debian Stable
Server: none
Past: Debian, Centos, Ubuntu, Opensuse
GUI: Openbox, Cinnamon
Chroot: Debian, Ubuntu, Fedora
VM: Devuan

Employing the best:
Arabic
Debian
Homeopathic

For new: Try Linux Mint
User avatar
makh
 
Posts: 622
Joined: 2011-10-09 09:16

Re: [Discussed] Security from remote data files

Postby bw123 » 2018-02-03 18:22

makh wrote:I suppose theres a solution, easily possible.


If the problem is, "Networked computers are vulnerable to security threats," then No, there is not an easy solution.

If the problem is specifically how to ensure downloaded images are okay, then maybe something like this http://virusscan.jotti.org/en

I don't know if it works on image files. I haven't used jotti in a long time but it might help you.
User avatar
bw123
 
Posts: 3578
Joined: 2011-05-09 06:02
Location: TN_USA

Re: [Discussed] Security from remote data files

Postby makh » 2018-02-04 03:25

bw123 wrote:....
If the problem is specifically how to ensure downloaded images are okay, then maybe something like this http://virusscan.jotti.org/en
...

Hi
I will try it ... I hope it is helpful.
It looks like a remote feature only...
Thankyou
HP Probook 440 G2: Arch, Debian Stable
Server: none
Past: Debian, Centos, Ubuntu, Opensuse
GUI: Openbox, Cinnamon
Chroot: Debian, Ubuntu, Fedora
VM: Devuan

Employing the best:
Arabic
Debian
Homeopathic

For new: Try Linux Mint
User avatar
makh
 
Posts: 622
Joined: 2011-10-09 09:16


Return to General Discussion

Who is online

Users browsing this forum: No registered users and 2 guests

fashionable