• BluescreenOfDeath@lemmy.world
    link
    fedilink
    English
    arrow-up
    22
    ·
    2 days ago

    I don’t think people are saying there’s literally no viruses for Linux, just that because Linux desktop use is so low, malware developers l developers focus on Windows because that’s what most end users will be trying to run their software on.

    It’s not a secret that lots of Enterprise systems run Linux. Almost all switching and routing operating systems that run the entire internet are Linux based. But there isn’t a person using those. They get configured and then run without user interaction. So their attack surface is different.

    That’s what people mean when they say there’s no real malware for Linux.

    Most “virus” infections this day are just programs that look legit and trick people into installing them. You’re not going to get a Linux server that way.

    • Polisheocket@lemmy.zip
      link
      fedilink
      arrow-up
      4
      ·
      2 days ago

      Also people using Linux are some kind of brain and understanding of computers. Not necessarily the case on windows.

    • Zarobi@aussie.zone
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 days ago

      I think the day there’s a widespread apt or pacman hidden malware ala npm will be a watershed moment for the Linux community. A lot of people don’t even have clamav installed

      • tomkatt@lemmy.world
        link
        fedilink
        English
        arrow-up
        7
        ·
        2 days ago

        the day there’s a widespread apt or pacman hidden malware

        You mean like all the recent exploits on the AUR? It’s already happening. Digital hygiene is a responsibility that many don’t take seriously.

        • Zarobi@aussie.zone
          link
          fedilink
          English
          arrow-up
          0
          ·
          2 days ago

          I’m worried even some random package like fastfetch getting compromised. I never installed that, it came with CachyOS, and it’s an “official package”. Does anyone actually check all 70+ packages that update per week? I dunno, it gives me the same uneasy feeling when I first was introduced to NPM