Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

unbelievable whats on manjaro website!

Off-Topic discussions about science, technology, and non Debian specific topics.
Message
Author
User avatar
sickpig
Posts: 589
Joined: 2019-01-23 10:34

unbelievable whats on manjaro website!

#1 Post by sickpig »

Excerpt from Manjaro's website

"Linux systems are very secure and not affected by the huge amount of Windows viruses, trojans, worms or malware out there. Anti-virus software is not required."

not true, how can it be? i mean each and every statistic confirms that majority of the servers are running Linux. Even top 500 super computers are running Linux.

then how come no one is targeting them?

i think its misinformation

User avatar
sunrat
Administrator
Administrator
Posts: 6412
Joined: 2006-08-29 09:12
Location: Melbourne, Australia
Has thanked: 116 times
Been thanked: 462 times

Re: unbelievable whats on manjaro website!

#2 Post by sunrat »

Of course it's true, Linux is not affected by Windows nasties and antivirus programs are generally for Windows so useless for Linux.

Your excerpt doesn't say nobody is targeting Linux systems, the bad guys most certainly are but have a much harder time than with Windows.
“ computer users can be divided into 2 categories:
Those who have lost data
...and those who have not lost data YET ”
Remember to BACKUP!

User avatar
Bloom
df -h | grep > 90TiB
df -h | grep > 90TiB
Posts: 504
Joined: 2017-11-11 12:23
Been thanked: 26 times

Re: unbelievable whats on manjaro website!

#3 Post by Bloom »

It has to do with architecture. The Windows architecture is such that malware can get started from almost any source and modify system files. In Linux, that's just not possible because the Linux architecture doesn't allow that.

User avatar
sickpig
Posts: 589
Joined: 2019-01-23 10:34

Re: unbelievable whats on manjaro website!

#4 Post by sickpig »

yes my excerpt, says anti-virus not required. Not true at all especially if you install from a source not in your distro's official repos. i still use clamav just to be safe.

User avatar
Ardouos
Posts: 1075
Joined: 2013-11-03 00:30
Location: Elicoor II
Has thanked: 1 time
Been thanked: 4 times

Re: unbelievable whats on manjaro website!

#5 Post by Ardouos »

It is not required for Linux, it is optional. Linux by design is inherently more secure than Windows for numerous reasons (leaving out obscurity); having no intentional backdoors is one of them.

IMO there is nothing wrong with ClamAV, it is a great tool. But by design it is mostly used for mail servers or gateways. I can also understand to an extent if you have Windows machines on the same network with shared resources.

Don't get me wrong, GNU/Linux systems are certainly not immune from malware, and there are some cases where there are security holes. But a lot of malware enters a users system due to a layer 8 issue, or lack of security updates.
There is only one Debian | Do not break Debian | Stability and Debian | Backports

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄⠀

User avatar
sickpig
Posts: 589
Joined: 2019-01-23 10:34

Re: unbelievable whats on manjaro website!

#6 Post by sickpig »

well calmav's virus database updates for every known malware or virus, OS independent.
Also, I am aware there are other LInux anti-virus apps but they all start startup daemons or systemd services which i would then have to disable as they would consume memory. i dont like that.
clamav is just fine for me, also i dont download or install anything which is not in official repository, so should b ok.

but the purpose of this post is - how shocking for a distro which is on no 2. on distrowatch to say that linux doesn't need antivirus!! on their official website

User avatar
Bloom
df -h | grep > 90TiB
df -h | grep > 90TiB
Posts: 504
Joined: 2017-11-11 12:23
Been thanked: 26 times

Re: unbelievable whats on manjaro website!

#7 Post by Bloom »

Malware on Linux is indeed possible, but it requires a *lot* of cooperation from a foolish user.
First, the malware has to be written especially for Linux. Windows malware will not work.
Second, you have to convince the user to download an unknown program, make it executable and then execute it and even suppy their root/sudo password when asked.
Then and only then can you succesfully infect a Linux system with malware. That's a lot of conditions.
In Windows, just surfing to the wrong website without clicking on anything is enough to get infected with malware.

User avatar
sickpig
Posts: 589
Joined: 2019-01-23 10:34

Re: unbelievable whats on manjaro website!

#8 Post by sickpig »

nope u wrong, everything IOT, routers or even android is linux, albeit for android only the kernel is linux there is lot of java as well. but the point is internet works on linux, which is definitely not malware free

arzgi
Posts: 1185
Joined: 2008-02-21 17:03
Location: Finland
Been thanked: 31 times

Re: unbelievable whats on manjaro website!

#9 Post by arzgi »

No, you are wrong (just a side note, I'd hope you would write words, not single letter abbreviations). It's normal for novice linux users to think they need a virus scanner. I did install F-secures f-prot, what was that time free for linux, I don't know the current situtiation. For about one year did I run it, first almost every day, then once a week, never did it find anything.

Android is based on linux, so is for example Ubuntu based on Debian, but it is not Debian. Just use current stable (or newer if you are adventurous), sign up to security updates mailing list, update when security updates are available. And don't use third party repositiries, which you already mentioned.

User avatar
Head_on_a_Stick
Posts: 14114
Joined: 2014-06-01 17:46
Location: London, England
Has thanked: 81 times
Been thanked: 132 times

Re: unbelievable whats on manjaro website!

#10 Post by Head_on_a_Stick »

sickpig wrote:i still use clamav just to be safe.
That program just prevents your system from spreading viruses to Windows machines.

Also note that ClamAV cannot protect you against malicious snaps, poorly packaged software from foreign repositories or any other malware.

Windows viruses cannot affect Linux but there certainly is malware for it:

https://en.wikipedia.org/wiki/Linux_malware

Check this beauty:

https://scarybeastsecurity.blogspot.com ... sktop.html

And then there's stuxnet and other hardware-based exploits, LoJax and other UEFI rootkits[1] and all the Spectre & Meltdown class exploits that work directly through the browser.

For servers the exploits are generally targeted at the software directly and so bypass the operating system, even OpenBSD is vulnerable to those (if you're silly enough to run third-party software).

But none of these are "Windows viruses, trojans, worms or malware" so Manjaro's marketing BS is actually true, if somewhat disingenuous.
deadbang

User avatar
GarryRicketson
Posts: 5644
Joined: 2015-01-20 22:16
Location: Durango, Mexico

Re: unbelievable whats on manjaro website!

#11 Post by GarryRicketson »

Postby sickpig » 2019-05-18 05:40
well calmav's virus database updates for every known malware or virus,--- snip -----
And that is why I wouldn't count on it to protect my system.
I does nothing for unknown malicious scripts, or viruses, if I wanted to cause problems, and trick you into downloading some malicious script, or even a virus, it would be easy, first I would create something new, and then when you checked it with your so called anti virus, it would not show, because it is new , and unknown,... Look at all the people that were tricked into using the mal ware included in the Intel chips,... clamav certainly did not tell them it was mal ware. IN fact Clamav will tell you a lot of malware is OK, and not mal ware, but it is, there is a lot of stuff out there that is mal ware, but popular, seems like most people like using malware, look at how many people use MS windows. :mrgreen:

User avatar
sunrat
Administrator
Administrator
Posts: 6412
Joined: 2006-08-29 09:12
Location: Melbourne, Australia
Has thanked: 116 times
Been thanked: 462 times

Re: unbelievable whats on manjaro website!

#12 Post by sunrat »

GarryRicketson wrote:... Look at all the people that were tricked into using the mal ware included in the Intel chips,...
Malware wasn't included in Intel chips. Intel just neglected to make the chips secure enough so certain vectors for possible attack were left open.
“ computer users can be divided into 2 categories:
Those who have lost data
...and those who have not lost data YET ”
Remember to BACKUP!

User avatar
GarryRicketson
Posts: 5644
Joined: 2015-01-20 22:16
Location: Durango, Mexico

Re: unbelievable whats on manjaro website!

#13 Post by GarryRicketson »

Ok thanks, for correcting me, also, I do realize many people do not consider ms windows mal ware, the point being clamav wouldn't detect anything if some one did access the Intel chip, via the
certain vectors for possible attack
...

User avatar
sickpig
Posts: 589
Joined: 2019-01-23 10:34

Re: unbelievable whats on manjaro website!

#14 Post by sickpig »

well linux is not virus free, anyone thinking otherwise chooses to be blissfully ignorant like Manjaro website
clamav website says it scans for all viruses not just windows ones. its a myth that it scans only windows ones.
https://www.lifewire.com/use-free-clama ... re-2202072
https://www.clamav.net

about snaps, the ones released by that product's official teams have never been reported to be malicious. so very safe and easy to install. bloated yes, but unsafe no.

also for the recent intel chip vulnerability not only clamav but no anti virus would be effective and that flaw is OS independent so no matter which os u r using if u have the affected intel chip u r vulnerable

@argzi i will spell however i like. u wrong.

User avatar
RU55EL
Posts: 546
Joined: 2014-04-07 03:42
Location: /home/russel

Re: unbelievable whats on manjaro website!

#15 Post by RU55EL »

Manjaro's website wrote:"Linux systems are very secure and not affected by the huge amount of Windows viruses, trojans, worms or malware out there. Anti-virus software is not required."
This is essentially true. The only thing I would question is whether Anti-virus software is not required. I think that depends on how you use your computer. I don't use anti-virus software on any of my computers running Debian. But, I also am careful about exposing my computers to potential virus attacks. So, for me, anti-virus is not required. I have never used anti-virus software with Debian. And have never had a problem with Linux viruses.

Of course, any computers that I work with operating Windows alway have anti-virus software installed and running. I have had to restore computers running Windows several times over the years even with up to date anti-virus software and a religious updated operating system.

keep in mind that virus programs are only one type of attack that you have to worry about, as H_O_A_S has pointed out.

User avatar
sickpig
Posts: 589
Joined: 2019-01-23 10:34

Re: unbelievable whats on manjaro website!

#16 Post by sickpig »

yup true, i agree with "Linux systems are very secure and not affected by the huge amount of Windows viruses, trojans, worms or malware out there." of course win progs are not binary compatible with linux, :) but i dont agree with "Anti-virus software is not required." perhaps i was not clear in my initial post but a blanket statement like "Anti-virus software is not required." is what i find misleading. Especially on arch based systems like manjaro which make heavy use of aur repos which are essentially user created packages.

i also don't use anti-virus as a deamon but on an on demand basis. but i make it a point to religiously scan all archive or binary files downloaded online. better be safe than sorry :D

User avatar
Head_on_a_Stick
Posts: 14114
Joined: 2014-06-01 17:46
Location: London, England
Has thanked: 81 times
Been thanked: 132 times

Re: unbelievable whats on manjaro website!

#17 Post by Head_on_a_Stick »

sickpig wrote:a blanket statement like "Anti-virus software is not required." is what i find misleading. Especially on arch based systems like manjaro which make heavy use of aur repos which are essentially user created packages.
AUR packages *are* user-created packages, I have a few of them myself:

https://aur.archlinux.org/packages/?O=0 ... _Search=Go

I'm not sure why you think anti-virus software will protect you from them though, I could upload a package there now that would delete your entire system via a postinstall script and no anti-virus software would detect that...

This is why the ArchWiki recommends that the PKGBUILDs and supplied .install files & .hooks are checked manually before installation.
deadbang

User avatar
sickpig
Posts: 589
Joined: 2019-01-23 10:34

Re: unbelievable whats on manjaro website!

#18 Post by sickpig »

ohh thanks i wasnt aware that anti-virus will not be able to detect malicious behaviour as described by you of aur packages
good thing i m not using them then :)

User avatar
Job
Posts: 813
Joined: 2006-12-30 20:20
Location: no clue
Contact:

Re: unbelievable whats on manjaro website!

#19 Post by Job »

Has anyone been affected by a virus or malware on Linux? I started using Linux (RedHat) either in 1998 or 1999 and I never had a virus or malware. Post 3 by Bloom says it all and I feel the same way. There are various Linux installations within the same distro. Some people boot from portable drives, some have their /home elsewhere....and so on. For a virus to affect computers, those computers have to have been configured the exact same way. Windows fits that bill perfectly.
#aptitude install life
--------------------------------------------------------------------------------------------------------------
Debian 12 - FreeBSD

User avatar
GarryRicketson
Posts: 5644
Joined: 2015-01-20 22:16
Location: Durango, Mexico

Re: unbelievable whats on manjaro website!

#20 Post by GarryRicketson »

Bloom wrote:It has to do with architecture. The Windows architecture is such that malware can get started from almost any source and modify system files. In Linux, that's just not possible because the Linux architecture doesn't allow that.
I have never had one, and my first Linux was around 2002 knoppix. Clamav did not yet exist. For Linux there is no need for it, and it is not required, however the fact that so many Windows users do accesses Linux servers, and receive / send e-mail via Linux servers, its main uses is on mail servers as a server-side email virus scanner.
For those that think they need it, that's fine, they can use it, those that know better and realize they don't need it, are NOT REQUIRED to use it, just because some one claims they must use it, this argument by people trying to promote it's use is old, kind of like beating on a dead horse.
Just like the other controversy, no body is required to use it.

Post Reply