[general_re]

Per Slapdash. I predict great fun from this, so none of that reasoned discourse nonsense from you people ;)

[general_re]

FYI.

[Dan Nunn]

Right after the Linux manifesivos stuck foot in mouth over Symantec's study!

[proxy_user]

A tripwire daemon would catch the changed size of the executables, right?

[Tennessee_Bob]

CP/M - The only way to go.

[freebilly]

This is as I predicted here on FR last year (and got thoroughly trashed as being a complete ignoramus). I love Firefox. I'm using it right now, but Mozilla used to benefit from its relative anonymity. Why go after it when you could screw up the day of millions of Windows' users.

Well, boys and girls, success has now made Mozilla a target....

[lilylangtree]

Thanks for alerting us.

[no-s]

Yet another example of why you should have an up to date antivirus solution, and scan EVERYTHING you download, without exception.

Another important step is get the package signatures (MD5, SHA, PGP, etc) from a different service and compare to the signature of the downloaded package. Some folks download the source and compile to produce just the signatures as a public service.

I don't see this mentioned anywhere on the mozilla page, btw. However it's mentioned in the developer side. Other open source binaries (e.g. Apache, OpenOffice, etc) usually are distributed with signatures.

[duckhead]

Sometimes, it's important to dig a little deeper. In this case, it was not mozilla.org that had the infected binaries, but rather a Mozilla fan site in Korea. This should not need repeating, but it's probably not safe to donwload programs from arbitrary servers on the Internet.

You can continue to safely download files from mozilla.org

[PokeyJoe]

"This virus searches for executable ELF files in the current and /bin directories and infects them. When infecting files, it writes itself to the middle of the file, at the end of a section of code, which pushes the other sections lower down. It also contains a backdoor, which downloads scripts from another site, and executes them, using a standard shell."

Maybe on Linspire - a Linux for newbies that logs users on as root (like WinderzXP). Not on my Debian box.

[Golden Eagle]

Not the first time the host servers from an open source vendor have been rooted. Remember these?

GNU Project's FTP Servers Hacked

Gentoo Linux Server Hacked

Debain Servers Hacked

Things like this happen when you let just anyone view your source code.

[Golden Eagle]

Seems to be a recurring problems for these Mozilla guys.

http://www.mozillazine.org/talkback.html?article=6771

Nice blimp.