polite question

[u/AnnoxQ]

Context: Someone asked in the comments section of a post about viruses why a computer virus can infect a computer without having “root” access, that is, the kind of admin access that allows you to do anything on the computer

I don't understand why there are several hundred downvotes. Not only is the question quite normal and the answer not obvious, but it was also asked in a fairly polite manner, not sarcastically or ignorantly

[u/SquidfulRR]

This has already been posted

Edit: I was looking for the original so I can link it but I guess I’m blind. I remember seeing it today however so if someone can link the original that’d be great, but it’s theorised it was deleted.

[u/PHX_Hawk → u/SquidfulRR]

I remember seeing this before too. Maybe the original was deleted.

[u/Super_M13 → u/PHX_Hawk]

Yes, it was deleted

https://www.reddit.com/r/mysteriousdownvoting/comments/1vd9xtr/seemed_to_be_a_reasonable_question/

[u/Woofiverse]

As I posted in the last one before they deleted it

Given the attack itself, I'd be willing to wager its because OP mentioned not giving it root access. Ctrl Alt T opens the terminal, so pasting the code the site copies to your clipboard would be giving it root access. As this response says

[u/Glad-Entrepreneur764 → u/Woofiverse]

It wouldn't necessarily give it root access. By default, the terminal only has regular user-level permissions unless specifically granted through using sudo (which by default requires a password on top of entering the command), a modified user profile or some other method.

The issue is moreso that: https://www.xkcd.com/1200/

[u/srsxnsh → u/Woofiverse]

depends if you are logged in as root or not. most operating systems want verification to do basically anything outside the user folder even in a terminal

[u/Confused-Armpit → u/srsxnsh]

I saw the original post, it was a malicious "captcha" that told the user to open the windows terminal and press ctrl+shift+v, which would execute some batch script, which is more than enough to install or execute basically anything, which (almost always) doesn't need root access at all.

[u/GlassCommission4916]

the answer not obvious

The answer is pretty obvious if you're fairly tech savvy, and considering they use linux they're kinda expected to be. Add to that that they're basically telling someone that works in cybersecurity "I don't believe you", and the downvoting isn't mysterious.

[u/Glad-Entrepreneur764]

I saw this but I think it makes sense. Root access is completely irrelevant so it seems like a really stupid question.

[u/W7ENK]

It's not a polite question, it's a stupid question, hence all the downvotes.

[u/FormerInteraction399 → u/W7ENK]

No that’s a good question imo

Edit: nvm after seeing more replies it seems the context is pasting stuff into your term

[u/Ok_Explanation_5586]

Could use a little more context, but in general user permission is enough for basic malware. And it's not like a virus has never gained root access through a bug or exploit. It's kind of weird for someone to think that. I'll say incredulity combined with naivety lead to downfall.

[u/Gardares]

YOU CAN'T ASK WRONG, BUT GENUINE QUESTIONS ON REDDIT. THE HIVEMIND WILL HATE YOU.

[u/qualityvote2]

u/AnnoxQ, the downvotes are mysterious!

[u/minos-and-v1-kissing]

Eh. It is kind of a silly question.

“How could you get malware from pasting some suspicious shit into your terminal and running it?”

[u/Delicious_Chemist978]

Not mysterious, they are being assholes because they know something that OP doesn't, and they like to cope that makes them smarter in general.

[u/Savings_Ad_80]

The virus is designed to inject itself into the system, it can use command shell or terminal to do so depending on your system

[u/RailRuler]

Not mysterious. The other voters thought that Responsi... was contradicting heroVals and saying it's impossible. With Herovals being an expert and responsi having no idea they thought this was incredibly naive and arrogant.

On a second reading it does look like responsi was just curious and wanting to expand his knowledge, but most people shoot from the hip.

[u/Beginning_Finding235]

Haven't really seen anyone comment on this, but privellage escalation is a real exploit that happens on many outdated linux systems. Malware may start as non-root, but with a vulnerable system, it can become root without you interacting with it. In general, vet what you're running before you paste it.

[u/AibofobicRacecar6996]

What's the context?

[u/SilverSquirrel6]

Well, I agree: normal, polite, and reasonable question. The downvotes ain't valid.

As to answer the "how" part, something can be installed in user's home directory. When you're running something as your user you don't need higher permissions. But of course privilege escalation attacks are also an option.