• kamen@lemmy.world
    link
    fedilink
    arrow-up
    89
    ·
    7 hours ago

    … and yet some people will readily copy-paste random shell scripts into their terminal without fully understanding them.

  • apex32@lemmy.world
    link
    fedilink
    arrow-up
    31
    ·
    8 hours ago

    A friend of mine once downloaded something malicious to his Linux machine and wasn’t worried about it. Then some time later, while browsing his files from a Windows machine, saw it and was like, “hey, what’s this?” Oops.

    He’s a tech savvy guy, so I’m guessing the fact he had downloaded it himself really let his guard down.

  • lath@lemmy.world
    link
    fedilink
    arrow-up
    40
    ·
    11 hours ago

    Modern viruses check the os before deciding which type of file to send your way.

    • dev_null@lemmy.ml
      link
      fedilink
      arrow-up
      12
      ·
      edit-2
      8 hours ago

      Do you have any data to back up that claim? I don’t think that’s true at all, it would be very rare.

      • lath@lemmy.world
        link
        fedilink
        arrow-up
        5
        ·
        edit-2
        6 hours ago

        Do you have any data to back up that claim?

        None whatsoever.

        I don’t think that’s true at all, it would be very rare.

        Suspicious words. You have one, don’t you? Don’t worry, I won’t tell.

        • dev_null@lemmy.ml
          link
          fedilink
          arrow-up
          4
          ·
          5 hours ago

          Why suspicious? I have genuinely never read a news story about a virus sending different versions of itself to different OSs. I’m sure it happens, but it doesn’t seem common at all, and you are claiming it very matter-of-factly so I am interested to know more.

          • lath@lemmy.world
            link
            fedilink
            arrow-up
            1
            ·
            1 hour ago

            If you haven’t come across them yet, then i might be a pioneer! Dibs on the patent!

            But your words confuse me. Either it’s not true at all or it happens. You’re sure they exist, though rare. As i said before, suspicious. You might just be one of those rare occurrences after all…

            You wish to be the first acknowledged one, no? It’s alright, you can have the honour. I’ll keep mum about it for you.

      • N.E.P.T.R@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        3
        ·
        10 hours ago

        Except websites can tell what base OS you run using browser fingerprinting. It os impossible to lie aboit your OS because of the differences in platforms.

          • N.E.P.T.R@lemmy.blahaj.zone
            link
            fedilink
            English
            arrow-up
            1
            ·
            4 hours ago

            You can lie, but that doesnt mean that a website cant still tell your base OS if they use JS platform fingerprinting. Arkenfox, the base config which Librewolf is based off of says the exact same thing. Go to CreepJS and see it get your platform regardless.

        • uid0gid0@lemmy.world
          link
          fedilink
          arrow-up
          4
          ·
          6 hours ago

          Twitch.TV will tell you that you need to use a supported browser if you connect with Linux in your user agent no matter what browser you use. Changing Linux to Windows in your agent with no other changes resolves this issue.

        • bamboo@lemmy.blahaj.zone
          link
          fedilink
          English
          arrow-up
          5
          ·
          7 hours ago

          Generally browser fingerprinting is used to identify individual browser sessions across IP addresses. This mostly takes into account reported features and capabilities of the browser and OS to the website. Fingerprinting isn’t looking for specific info your browser reports, it’s taking it all and hashing it to get a unique id specific to the browser. Because it’s hashed, it can’t be reversed to identify the OS from the hash.

          Sure a malicious website could Ignore the user agent and probe for some hardware capabilities that are specific to Linux, but that would be a lot of effort to probe various things which are set differently across all different browsers. I can’t speak for bad actors, but I wouldn’t spend the effort to check if the user agent is spoofed, if 95% of the time it’s accurate to get the OS type.

          • N.E.P.T.R@lemmy.blahaj.zone
            link
            fedilink
            English
            arrow-up
            1
            ·
            edit-2
            4 hours ago

            It is trivial to identify OS platform because browser work differently on each platform. Wjat Librewolf does with useragent on Linux actually is makes users stand out more because it isn’t what privacy.resistFingerprinting (RFP) reports on normally.

            Hackers (like the comment scenario i was responding to) are substantially more likely to employ platform fingerprint than trust a fale useragent. And loads general websites employ fingerprinting, meaning deviation from default RFP behaviour makes you stand out (more than you already do by using RFP since it is a small pool already).