windows virus from the game played through proton on linux finding itself on an empty c drive

3 days ago by blibla to c/linuxmemes

TropicalDingdong 221 points 3 days ago

path: 0 26241943, hotness: undefined, score: 221, children: 2
AliOski 38 points 3 days ago

This is pure gold

path: 0 26241943 26243231, hotness: undefined, score: 38, children: 1
Natanael 1 point 2 days ago path: 0 26241943 26243231 26269534, hotness: undefined, score: 1, children: 0
CaptainBasculin 213 points 3 days ago

Meanwhile innocent looking Z:/ drive

path: 0 26241863, hotness: undefined, score: 213, children: 7
zurohki 139 points 3 days ago

Yeah, Wine is not a secure container. Don't count on it for security.

path: 0 26241863 26242231, hotness: undefined, score: 139, children: 4
TheSyndZ 7 points 3 days ago

Isn't a way possible to prevent z:/ mapping while creating wine prefix ?

path: 0 26241863 26242231 26243740, hotness: undefined, score: 7, children: 3
zurohki 27 points 3 days ago

It's not just the drive letter mapping, Wine doesn't make any attempt to secure software.

You can run Wine inside an actual security solution.

path: 0 26241863 26242231 26243740 26245238, hotness: undefined, score: 27, children: 1
Aceticon 19 points 3 days ago

All my Windows games that I launch from Lutris (which are most, since I tend to avoid Steam and prefer GOG) are launched by default inside a Firejail container configured amongst other things to have no networking enabled.

All you need to do for it is to setup a "command prefix" with firejail and its launch parameters at the Lutris level and it becomes the default one for all games.

So yeah, this runs Wine inside an actual security solution and since it's setup at the level or the launcher I use, it does it for all the games I launch from it.

path: 0 26241863 26242231 26243740 26245238 26248106, hotness: undefined, score: 19, children: 0
mysterious_cake 11 points 3 days ago

I guess not allowing flatpak wine to access anything that is not necessary is the easiest way to achieve it. No idea if it is also the most secure solution.

path: 0 26241863 26242231 26243740 26243850, hotness: undefined, score: 11, children: 0
SkaveRat 14 points 3 days ago

runs wine as root yolo

path: 0 26241863 26245459, hotness: undefined, score: 14, children: 0
Artemis_Mystique 11 points 3 days ago

unless you have it sandboxed in a flatpack container

path: 0 26241863 26243808, hotness: undefined, score: 11, children: 0
thorhop 138 points 3 days ago

Here's a careful reminder that Linux viruses can come in Windows executables.

When it comes to hacking in the modern day it's all about escaping the box - whether that box is a container, a VM, a sandbox or indeed even an emulated environment. So we should still fear the binary blob.

Remember: update early, update often - no matter how painful that sounds.

path: 0 26245398, hotness: undefined, score: 138, children: 25
Maestro 77 points 3 days ago

Remember: update early, update often - no matter how painful that sounds.

Not anymore! Supply chain attacks have become so common that it's prudent to wait at least 7 days before updating to prevent installing malware from compromised update infrastructure.

path: 0 26245398 26247642, hotness: undefined, score: 77, children: 16
nroth 13 points 3 days ago

So, what's the solution? Debian Stable?

path: 0 26245398 26247642 26249336, hotness: undefined, score: 13, children: 5
dgdft 17 points 3 days ago

Debian + unattended upgrades + modern package managers for non-system-installed software covers your bases very well.

Debian packages are downstream enough from their sources that the packaging delay keeps you safe (and means the updates have had human eyes on them before they hit you). Unattended upgrades means you don’t have to worry about running the upgrades yourself.

Pip, npm, and the other big package managers now also support dependency cooldowns on their recent releases, but uv and pnpm pioneered that and cover you for older release environments.

path: 0 26245398 26247642 26249336 26250264, hotness: undefined, score: 17, children: 2
XiJinpingStanAccount 8 points 3 days ago

Also I would heavily advocate for Debian Testing if you need a rolling release distro. It is less vetted than stable but is still more vetted than many other rolling release options and you can just stay on testing as versions change while getting features pretty fast compared to stable.

path: 0 26245398 26247642 26249336 26250264 26251096, hotness: undefined, score: 8, children: 0
blibla 6 points 3 days ago

uv is owned by openai fun fact

path: 0 26245398 26247642 26249336 26250264 26253077, hotness: undefined, score: 6, children: 0
zane 1 point 3 days ago

N-1

path: 0 26245398 26247642 26249336 26250351, hotness: undefined, score: 1, children: 0
Natanael 1 point 2 days ago

Hardened systems with hardware enforced isolation (virtualization and stuff)

path: 0 26245398 26247642 26249336 26269573, hotness: undefined, score: 1, children: 0
nroth 8 points 3 days ago

I really like Arch because I have a very custom setup and like to try the newest things, but this really worries me as Arch-based user-friendly distros that use the same packages make the repos a bigger target.

path: 0 26245398 26247642 26249327, hotness: undefined, score: 8, children: 0
signalsayge 4 points 3 days ago

On the other hand, AI has made the patch to exploit code as short as 45 minutes.

path: 0 26245398 26247642 26248512, hotness: undefined, score: 4, children: 0
Speiser0 3 points 3 days ago

What if you use for example ubuntu and wait 3 years?

path: 0 26245398 26247642 26248802, hotness: undefined, score: 3, children: 7
DevDave 5 points 3 days ago

I switched from Debian to an arch based distro. holy shit is it weird reading about some new things latest release only to have it pushed to the repo the same month or even the same day! I use btrfs so when things break its a 5 minute rollback and reboot.

path: 0 26245398 26247642 26248802 26249642, hotness: undefined, score: 5, children: 0
dgdft 0 points 3 days ago

You’d still be fine if you’re not exposing public services or visiting actively-malicious websites.

path: 0 26245398 26247642 26248802 26249260, hotness: undefined, score: 0, children: 5
Speiser0 2 points 3 days ago

You are underestimating things. Unmalicious websites can still host malicious content by users, for example.

path: 0 26245398 26247642 26248802 26249260 26251153, hotness: undefined, score: 2, children: 4
motruck 20 points 3 days ago

Compatibility layer. Wine Is Not an Emulator.

path: 0 26245398 26250905, hotness: undefined, score: 20, children: 1
Allero 12 points 3 days ago

Which is what makes the situation much worse

path: 0 26245398 26250905 26251334, hotness: undefined, score: 12, children: 0
capital5 14 points 3 days ago

I read a hilarious article, probably 2 decades ago by now, where a guy decided to try running Windows viruses on Linux in Wine.

If this really is a threat today, I would say that Wine has become a pretty damn impressive project. Here's the link in case anyone else wants to read it: https://entertainment.slashdot.org/...

path: 0 26245398 26247061, hotness: undefined, score: 14, children: 3
dgdft 4 points 3 days ago

There’s never been an instance of widespread malware built with a dedicated ability to persist on a Linux host through Wine.

It wouldn’t be hard at all for a hacker to manually wire up linux-specific malware on a computer once they had a RAT running in Wine, but there’s no credible risk of windows malware automatically installing “linux viruses” at present.

path: 0 26245398 26247061 26247452, hotness: undefined, score: 4, children: 0
j5906 1 point 18 hours ago

comments are peak 2005

path: 0 26245398 26247061 26283227, hotness: undefined, score: 1, children: 0
Zoot 1 point a day ago

Sadly newsforge (the site linked in the above article) no longer hosts said article. Sounded like a fun read!

path: 0 26245398 26247061 26280382, hotness: undefined, score: 1, children: 0
Cosmonaut_Collin 3 points 2 days ago

We need to get proton for templeos so we can be safe.

path: 0 26245398 26267489, hotness: undefined, score: 3, children: 1
bhamlin 1 point a day ago

Well, I don't t want to be the one doing the porting to holyc

path: 0 26245398 26267489 26274378, hotness: undefined, score: 1, children: 0
spacegoat 44 points 2 days ago

Thank you Lemmy devs for just allowing to download videos and images. Fuck reddit

path: 0 26256820, hotness: undefined, score: 44, children: 8
SilverJeyJey 13 points 2 days ago

Reddit is garbage

path: 0 26256820 26265096, hotness: undefined, score: 13, children: 1
mirshafie 5 points 2 days ago

Reddit is trash

path: 0 26256820 26265096 26267805, hotness: undefined, score: 5, children: 0
Xenny 4 points 2 days ago

...I left reddit a while ago...they paywalled downloading shit?

path: 0 26256820 26265854, hotness: undefined, score: 4, children: 2
programmerlexi 1 point a day ago

Not paywalled, just straight up preventing it, which they have been doing for years now. But yt-dlp still works for downloading from reddit, if so desired.

path: 0 26256820 26265854 26277042, hotness: undefined, score: 1, children: 0
SilverJeyJey 1 point 20 hours ago

I prefer reddit UI but the community is annoying asf. No one has the mental capacity to discuss and the emotional control of a toddler.

path: 0 26256820 26265854 26281611, hotness: undefined, score: 1, children: 0
pineapplelover 1 point 2 days ago

New user?

path: 0 26256820 26257106, hotness: undefined, score: 1, children: 2
Magnum 3 points 2 days ago

Well the account itself is over 3 years old? Are you a new user?

path: 0 26256820 26257106 26265421, hotness: undefined, score: 3, children: 1
pineapplelover 1 point a day ago

Oh I think we migrated around similar times then (I'm a lemm.ee refugee). I thought you were surprised that photos and videos were available to download when this wasn't a recent lemmy change

path: 0 26256820 26257106 26265421 26274173, hotness: undefined, score: 1, children: 0
Axolotl_cpp 38 points 3 days ago

"Okay i'il look in to other drives"

Wine is a flatpak

path: 0 26243903, hotness: undefined, score: 38, children: 5
KernelTale 16 points 3 days ago

yea, I play pirated games via flatpak bottles in hopes that getting out of the sandbox would be far too much work for the possible gains.

path: 0 26243903 26245655, hotness: undefined, score: 16, children: 1
rumba 2 points 3 days ago

That sounds perfectly reasonable.

path: 0 26243903 26245655 26249955, hotness: undefined, score: 2, children: 0
diaphragmwp 1 point 3 days ago

Hmmmmmm, maybe the virus shouldn't use GTK dialogs for opening files and call open(3)? hmmmmmmmmmmmmmmmmmm

path: 0 26243903 26247045, hotness: undefined, score: 1, children: 2
Axolotl_cpp 1 point 3 days ago

I don't get what you mean

path: 0 26243903 26247045 26247969, hotness: undefined, score: 1, children: 1
diaphragmwp 4 points 3 days ago

Type man 3 open.

That's what most Flatpak apps may do instead of asking permission via a fancy menu, which actually just does the same thing.

path: 0 26243903 26247045 26247969 26248114, hotness: undefined, score: 4, children: 0
RustyNova 37 points 3 days ago

My linus virus trying to fuck up my disk on nixos (coreutils isn't in the path)

path: 0 26242732, hotness: undefined, score: 37, children: 1
ThunderComplex 24 points 3 days ago

I'm sorry Linus Torvalds is personally trying to destroy your PC

path: 0 26242732 26247729, hotness: undefined, score: 24, children: 0
MangoPenguin 22 points 3 days ago

Isn't your user data available in Wine on Z:\ though? I laughed at the meme but I'd still be worried info stealer malware or similar would have no problem grabbing the data it's looking for as Wine does no sandboxing at all.

path: 0 26246400, hotness: undefined, score: 22, children: 3
WhyJiffie 7 points 3 days ago

you can remove the Z drive letter, but that's not enough. Nothing prevents a windows program from attempting to call linux syscalls

path: 0 26246400 26250797, hotness: undefined, score: 7, children: 1
MangoPenguin 3 points 3 days ago

Yeah, I'm sure some malware would fail on wine but some could still be just as bad compared to running windows natively.

path: 0 26246400 26250797 26251195, hotness: undefined, score: 3, children: 0
DragonOracleIX 1 point 3 days ago

Flatpak bottles can use wine in a sandboxed environment. Both flatpak and bottles have ways to restrict access to parts of the filesystem.

path: 0 26246400 26255571, hotness: undefined, score: 1, children: 0
adarza 18 points 3 days ago

doesn't every game have its own c_drive?

path: 0 26241394, hotness: undefined, score: 18, children: 2
Ghoelian 68 points 3 days ago

Yea im pretty sure thats the point. The virus will get a drive that has nothing but the infected game on it.

path: 0 26241394 26241758, hotness: undefined, score: 68, children: 0
WhyJiffie 5 points 3 days ago

more correctly every wineprefix. Depending on how you install games, they might not be running in separate wineprefixes, but I believe steam does it that way

path: 0 26241394 26250845, hotness: undefined, score: 5, children: 0
captainlezbian 11 points 3 days ago

Jokes on them, even when I ran windows my os wasn't on C, I think it was like E

path: 0 26248972, hotness: undefined, score: 11, children: 3
Damage 10 points 3 days ago

kinky.

path: 0 26248972 26251322, hotness: undefined, score: 10, children: 1
captainlezbian 5 points 3 days ago

Well I'm known to be a certified freak in the hard drive

path: 0 26248972 26251322 26254781, hotness: undefined, score: 5, children: 0
AliOski 3 points a day ago

path: 0 26248972 26279343, hotness: undefined, score: 3, children: 0
ourselves 5 points 3 days ago

This makes me miss r/shittyreactiongifs

path: 0 26251244, hotness: undefined, score: 5, children: 0
MrSoup 5 points 3 days ago

Proton for some reason insists in mounting root on Z. Plain wine doesn't care. So I had to use firejail.

path: 0 26246866, hotness: undefined, score: 5, children: 1
AliOski 1 point a day ago

Well, how else do you want to achieve 100% compatibility? Don't discriminate the viruses like that!

path: 0 26246866 26279374, hotness: undefined, score: 1, children: 0
linuxmemes
linuxmemes

@lemmy.world

login for more options
33061
2389
6292

Hint: :q!


Sister communities:

Community rules (click to expand)

1. Follow the site-wide rules
2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack users for any reason. This includes using blanket terms, like "every user of thing".
  • Don't get baited into back-and-forth insults. We are not animals.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry of any kind will not be tolerated. This is an LGBTQ+-friendly community -- if that is a problem for you, you should leave.
3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn, no politics, no trolling or ragebaiting.
  • Don't come looking for advice, this is not the right community.
4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, <loves / tolerates / hates> systemd, and wants to interject for a moment. You can stop now.
5. 🇬🇧 Language/язык/Sprache
  • This is primarily an English-speaking community. 🇬🇧🇦🇺🇺🇸
  • Comments written in other languages are allowed.
  • The substance of a post should be comprehensible for people who only speak English.
  • Titles and post bodies written in other languages will be allowed, but only as long as the above rule is observed.
6. (NEW!) Regarding public figures

We all have our opinions, and certain public figures can be divisive. Keep in mind that this is a community for memes and light-hearted fun, not for airing grievances or leveling accusations.

  • Keep discussions polite and free of disparagement.
  • We are never in possession of all of the facts. Defamatory comments will not be tolerated.
  • Discussions that get too heated will be locked and offending comments removed.

 

Please report posts and comments that break these rules!


Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't remove France.

go to feed...