miércoles, abril 19, 2006

Torvalds crea parche para virus multi plataforma

Hace poco tiempo se anunciaba el primer virus multiplataforma que afectaba tanto a linux como a windows.

Xtecuan tambien comentaba la noticia... http://xtecuan.livejournal.com/238480.html

Bueno, parece ser que seguimos cubiertos con el nuevo kernel... los dejo con la noticia en ingles.

"Newsforge is reporting that Linus Torvalds took a few minutes to review the cross-platform proof of concept virus covered yesterday and has proven that the virus does indeed not work with latest kernel version 2.6.16 and even released a patch in order to fix this "problem." From the article: "The reason that the virus is not propagating itself in the latest kernel versions is due to a bug in how GCC handles specific registers in a particular system call. [...] So the virus did a number of strange things to make this show up, but on the other hand the kernel does try to avoid touching user registers, even if we've never really _guaranteed_ that. So the 2.6.16 effect is a mis-feature, even if a _normal_ app would never care. It just happened to bite the infection logic of your virus thing."

Fuente

No hay comentarios: