You may have heard of the security alert on Macintosh (Apple) Computers, be it MacDefender, MacProtector or MacSecurity. I thought I had better let you know that a similar attack may be coming Linux's way. (See the Linux for the Rest of Us podcast No.44.) Obviously we don't know the details yet but like the Macintosh the solution is simple.

This software, once downloaded to your computer, (running Linux as its Operating System), WILL NEED YOUR AUTHORITY to install, just like on the Mac. To install it you will need to input your Password first and, if you cancel at this point the program cannot install itself.

In your normal (Linux) computer life, you are only prompted to supply your Password at certain times. They are:-

1. When Logging on to your account on the computer. (Although on single user systems in a secure location this can be bypassed.)

2. mintUpdate, before this can run you must supply your Password. (This is because mintUpdate will make changes to your Systems files).

3. Whenever, normally through the Control Centre, you try to make any change to the system and how it works.

4. Whenever you need to change any file that isn't residing within your own personal Home directory you would need to gain “Root” privileges before hand.

In your normal computing life you will only normally encounter options 1 & 2.

Now, if you are on a website, or have been on a website and then the screen greys over and a dialogue box comes up asking for your password, (out of the blue), PRESS CANCEL!!

How the fake MacDefender, MacProtector and MacSecurity programs work.
Just like other Unix type Operating Systems (like Linux) the Apple Macintosh computers need the User to supply their password before these programs can install.

Apple Users have encountered a website in which there is a program their default Web-browser (Safari) automatically downloads and then tries to install. For the program to install the User MUST provide their password. Let us say they do. The program installs and runs. The User is then told there are security issues on their computer and are asked to supply their Master Card/Visa details to pay for a download to clear these fictional infections/issues. I have heard that sometimes the program will say that the card hasn't worked and to try another one! (Yes the same User has been stung more than once and paid more than once for the same con trick!!) Basically the Mac Users caught by this scam have just been gullible, probably victims of Microsoft Windows slap-dash approach to security. Yes, this scam could easily work on a Windows System but not on a Unix (Macintosh/Linux) one.

YOU HAVE BEEN WARNED! DON'T ENTER YOUR PASSWORD IF A DIALOGUE BOX APPEARS WHEN YOU AREN'T EXPECTING IT TO. DON'T PROVIDE YOUR CREDIT CARD DETAILS UNLESS:-

1. You are on a secure server (a padlock on the lower status bar on your browser).

2. You are happy with the web address in the browser or, you were directed from a legitimate website where you are purchasing something.

Always remember, if you are running a Unix type computer operating system, you are part of the systems security system by default, unlike a certain proprietary operating system the masses use!