Linux system compromised by backdoor Trojan

JDW · Post by **JDW** » 14 Jun 2010, 17:19

There's been some breaking news, Linux system compromised by backdoor Trojan. This has got something to do with the Unreal gaming client for Linux.

I hope the Warzone2100 administrators have the download servers secured, nice and tight. Just checking

Post by **Saberuneko** » 14 Jun 2010, 21:24

I'm sure that vulnerability will be fixed in question of days, as always happens with linux software.

Post by **Zarel** » 14 Jun 2010, 23:27

1. Unreal is an IRC daemon, not a gaming client.

2. Warzone doesn't run its own IRC servers; it uses FreeNode.

P.S. Read the first line of the article you link to

[Author's Note: The article has been modified to correct the assertion that Unreal IRC has any relation to Unreal--the first-person shooter developed by Epic Games.]

JDW · Post by **JDW** » 15 Jun 2010, 00:56

Zarel wrote:P.S. Read the first line of the article you link to
[Author's Note: The article has been modified to correct the assertion that Unreal IRC has any relation to Unreal--the first-person shooter developed by Epic Games.]

Well I'll be damned, it wasn't there when I read it

JDW · Post by **JDW** » 15 Jun 2010, 14:05

A little something that every Linux user here should know to secure their systems,

Five tips for improving Linux security

Crymson · Post by **Crymson** » 16 Jun 2010, 20:34

You know, this is also a good reason to not allow 3rd parties to make warzone builds, since you never know what they stick in them.

The devs should make a md5 checksum of the warzone2100.exe file.

Post by **Zarel** » 16 Jun 2010, 20:42

Crymson wrote:You know, this is also a good reason to not allow 3rd parties to make warzone builds, since you never know what they stick in them.

The devs should make a md5 checksum of the warzone2100.exe file.

We used to have them. They'll be back once I find a good place on the Download page to stick them.

Honestly, checksumming should be a feature of HTTP, not something you have to do manually.

Post by **stiv** » 16 Jun 2010, 21:08

We used to have them. They'll be back once I find a good place on the Download page to stick them.

How about right next to the files they go with?

KukY · Post by **KukY** » 16 Jun 2010, 21:20

stiv wrote:
We used to have them. They'll be back once I find a good place on the Download page to stick them.
How about right next to the files they go with?

That looks too ugly and confusing. Use JS to make a dropdown or something...

Post by **Zarel** » 16 Jun 2010, 22:16

stiv wrote:How about right next to the files they go with?

Define "right next to". To the right of? To the left of? Above? Below? Should we explain what they are, or just give them a string and hope people who don't understand what they are will ignore it?

JDW · Post by **JDW** » 16 Jun 2010, 23:28

Zarel wrote:Should we explain what they are, or just give them a string and hope people who don't understand what they are will ignore it?

I suggest that you don't mention what MD5 is meant for, but do provide a link to some authentic documentation recommending the use of MD5 checksum, and display the text See why using MD5 is recommended or some other appropriate wordings.

P.S: Personally, I would prefer the checksum displayed, to the right of the Download button for the game.. But it's your call..

lav_coyote25 · Post by **lav_coyote25** » 17 Jun 2010, 06:36

thats all well and good, but, who reads anymore, everyone just wants to get to the good stuff, to hell with reading the manual or the READ ME.txt or whatever it is called ....

yes i am being somewhat sarcastic.... everyone should read the manual at least once.

Crymson · Post by **Crymson** » 17 Jun 2010, 08:16

If you don't want to put the text next to it, you could have a md5 link, or just put it in the release announcement ?

lav_coyote25,

you think people can't read these days?

Post by **Zarel** » 17 Jun 2010, 09:22

j0shdrunk0nwar wrote:I suggest that you don't mention what MD5 is meant for, but do provide a link to some authentic documentation recommending the use of MD5 checksum, and display the text See why using MD5 is recommended or some other appropriate wordings.

Good idea; I'll do that.

j0shdrunk0nwar wrote:P.S: Personally, I would prefer the checksum displayed, to the right of the Download button for the game.. But it's your call..

But we often have two download buttons next to each other - see the Mac OS X version on the Download page, or the Videos. Where would we put the MD5 then?

JDW · Post by **JDW** » 17 Jun 2010, 12:41

Zarel wrote:But we often have two download buttons next to each other - see the Mac OS X version on the Download page, or the Videos. Where would we put the MD5 then?

Ah, yes, would get too crowded..

Warzone 2100 Forums

Linux system compromised by backdoor Trojan

Linux system compromised by backdoor Trojan

Re: Linux system compromised by backdoor Trojan

Re: Linux system compromised by backdoor Trojan

Re: Linux system compromised by backdoor Trojan

Re: Linux system compromised by backdoor Trojan

Re: Linux system compromised by backdoor Trojan

Re: Linux system compromised by backdoor Trojan

Re: Linux system compromised by backdoor Trojan

Re: Linux system compromised by backdoor Trojan

Re: Linux system compromised by backdoor Trojan

Re: Linux system compromised by backdoor Trojan

Re: Linux system compromised by backdoor Trojan

Re: Linux system compromised by backdoor Trojan

Re: Linux system compromised by backdoor Trojan

Re: Linux system compromised by backdoor Trojan