Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Thu 18 Dec 2014, 20:32
All times are UTC - 4
 Forum index » Advanced Topics » Additional Software (PETs, n' stuff) » Security/Privacy
parental control package
Post new topic   Reply to topic View previous topic :: View next topic
Page 2 of 2 [27 Posts]   Goto page: Previous 1, 2
Author Message
Pizzasgood


Joined: 04 May 2005
Posts: 6270
Location: Knoxville, TN, USA

PostPosted: Sat 20 Dec 2008, 21:48    Post subject:  

Well, anybody wanting to add a keylogger into a package could just throw in some mail utilities while they're at it...

(OMG! Another bright idea no other person could ever come up with on his own! I've just inspired the ID theft of two and forty score people!)

That leads to one way you could possibly identify a suspicious package: make sure it isn't abnormally large. Also, you can extract (without installing) a package like this:
pet2tgz somepackage.pet
tar -xf somepackage.tar.gz

Then the package's contents will be inside the somepackage/ directory, so you can look around and make sure there aren't any suspicious files. In particular, look for things in auto-run directories like etc/init.d, etc/profile.d, and root/Startup. Also beware of replaced system files like /root/.xinitrc, /etc/profile, and stuff in /etc/rc.d/. And if there's a pinstall.sh script, read it to be sure there's nothing nefarious in that.

That doesn't help if the malware is compiled into the programs or libraries though.

(Oh snap, another inspiration!)

I'd better not mention the madness that could happen if the package also replaced things like ps, kill or even the kernel so that all this malware they're installing wouldn't turn up in the process list, nor be killable...


There is a reason that people recommend keeping a list of md5sums for all system files so you can tell when they change (assuming nobody modifies the list - store a hard copy outside the system so that that isn't a possibility unless you're dealing with people who have physical access to your stuff)

I would do that myself, if I didn't change things around so often that it would be more hassle than it's worth.


EDIT: With non-Full Puppy installs, you can look in /initrd/pup_rw/ to get an idea of what files have changed or been added from the default installation. That doesn't take into account anything added through a .sfs file, nor anything added by modifying the pup_xxx.sfs file (not normally possible - it's a readonly filesystem due to being compressed, but it could still be replaced, and I think you can append to it.)

(Whoops, out slips another one...)


I say, best to know how they can hit you, then figure out how to block it, rather than suppress the knowledge in the hopes that the crooks won't figure it out on their own. And yeah, I'm against gun bans, and my neck is a little red in the summer. And there ain't nuthin wrong with a pick-em-up truck, 'cept they tend to burn more gas than a small car or motorcycle.
[/rant]

_________________
Between depriving a man of one hour from his life and depriving him of his life there exists only a difference of degree. --Muad'Dib

Back to top
View user's profile Send private message Visit poster's website 
brad_chuck

Joined: 15 Aug 2005
Posts: 284
Location: Appalachian Mountains

PostPosted: Sun 21 Dec 2008, 00:44    Post subject:  

woof woof...

well said pizza.
Back to top
View user's profile Send private message 
Aitch


Joined: 04 Apr 2007
Posts: 6825
Location: Chatham, Kent, UK

PostPosted: Sun 21 Dec 2008, 22:25    Post subject:  

Pizza does it again.....

However, before everyione goes off topic, merlin026 revealed the real reason [?] for suggesting a keylogger was for 'parental control'

I posted a link to dansguardian, which performs that function without a keylogger in sight, & since other parents may be wanting 'parental control' also, I suggest those who want to get paranoia/911 blues start a new thread, and any other ideas for 'parental control' be continued here.....


just a bit of focus, eh, guys & gals?

Perhaps an edited change of thread name, merlin026?

Aitch Smile

Edit: Thanks
Back to top
View user's profile Send private message 
richard.a


Joined: 15 Aug 2006
Posts: 510
Location: Adelaide, South Australia

PostPosted: Fri 26 Dec 2008, 07:34    Post subject:  

Now we are back on topic, there is a cumbersome but fully workable way to prevent actual access to known urls.

The key there - nothing to do with keyloggers lol - is the word "known".

You put a list of KNOWN addresses into your hosts file.

That's located at /etc/hosts

I discussed this with another fellow, I think on another forum.

You can read about my ideas which I've since realised are able to be modified a bit, but it is a project I called "gotcha" - why becomes obvious as you read the page at http://micro-hard.homelinux.net/gotcha/index.htm

This concept would do the trick, but as I said, you would need to know the bad addresses in advance, and add them as new ones came to light. The file ends up being quite huge.

Explore the directory where that page is located. It's index.htm rather than index.html so you can look inside. Check out the philosophy

Richard

_________________
Have you noticed editing is always needed for the inevitable typos that weren't there when you hit the "post" button?


Back to top
View user's profile Send private message 
ttuuxxx


Joined: 05 May 2007
Posts: 10843
Location: Ontario Canada,Sydney Australia

PostPosted: Fri 26 Dec 2008, 07:39    Post subject:  

or just add an internet filter is probably the easiest way Smile
http://procon.mozdev.org/
ttuuxxx
also use what schools use for filtering
http://www.opendns.com/

_________________
http://audio.online-convert.com/ <-- excellent site
http://samples.mplayerhq.hu/A-codecs/ <-- Codec Test Files
http://html5games.com/ <-- excellent HTML5 games Smile
Back to top
View user's profile Send private message Visit poster's website 
vito

Joined: 14 Sep 2006
Posts: 54
Location: US

PostPosted: Thu 14 May 2009, 13:07    Post subject: Mozillia filters
Subject description: content filters for kids
 

Thanks for this suggestion ttuuxxx . I wanted to give my sons the simplicity linux netbook edition (90meg) on a flashdrive to use for school papers but I could not figure out how to add a pornblocker, since dansguardian is a little tricky and takes up precious memory.

Also another firefox add on that works nicely together with procon latte is Foxfilter.

Mny Thx,
Vito
Back to top
View user's profile Send private message 
mikeb


Joined: 23 Nov 2006
Posts: 9017

PostPosted: Thu 14 May 2009, 14:34    Post subject:  

Some routers (if you use one) have the ability to do content filtering...setup through its admin.....eg games will block any site with games in the address etc

mike
Back to top
View user's profile Send private message 
ecomoney


Joined: 25 Nov 2005
Posts: 2183
Location: Lincolnshire, England

PostPosted: Thu 14 May 2009, 23:48    Post subject:  

I have used Glubble....a firefox addon, for adding parental controls.

http://www.glubble.com/

It has a preloaded list of "allowed" sites such as the discovery channel/homework sites etc which no-one would really object their kids looking at (unless they were religious fundamentalists/creationists/flat earthers/Amish) Every new site the child tries to access, is denied and the url sent to the parent account for him/her to pre-read and either approve or deny access to for the child.

This is good because the Parents can judge, according to their standards, what is suitable for their child to see, based on their own moral values and/or the childs "mental age". This is much better than censoring the whole internet!

Yahooligans is a good search engine for kids

Dansguardian is a pain to set up, a preconfigured package would great to set up. We used a Dansguardian mod on Smoothwall at the cybercafe I ran, and it was VERY effective at filtering there, and practically unhackable as the filtering was done before the connection got to the puppy machine. We will be using the same at the mission cybercafe (all those sailors coming off long voyages etc etc Rolling Eyes )

@ Ttuuxxx

Perhaps you could write a patch that would mean the keylogger above would not work in puppy?

_________________
Puppy Linux's Mission

Sorry, my server is down atm!
Back to top
View user's profile Send private message Visit poster's website MSN Messenger 
ttuuxxx


Joined: 05 May 2007
Posts: 10843
Location: Ontario Canada,Sydney Australia

PostPosted: Fri 15 May 2009, 00:21    Post subject:  

ya I think this whole thread should be deleted, or all the post other than the last 4 or so. Its about the only time I wanted to have adim privileges.
ttuuxxx

_________________
http://audio.online-convert.com/ <-- excellent site
http://samples.mplayerhq.hu/A-codecs/ <-- Codec Test Files
http://html5games.com/ <-- excellent HTML5 games Smile
Back to top
View user's profile Send private message Visit poster's website 
legendofthor

Joined: 17 May 2007
Posts: 219
Location: Queensland Australia

PostPosted: Fri 15 May 2009, 04:31    Post subject:  

Agree with ttuuxxx
Though a PC Puppy may be a good Puplet
Cheers
Martin
Back to top
View user's profile Send private message 
ecomoney


Joined: 25 Nov 2005
Posts: 2183
Location: Lincolnshire, England

PostPosted: Fri 15 May 2009, 09:28    Post subject:  

Its an important thread because a lot of people want parental controls. Old computers that puppy flys on are often given as hand-me-downs for children.

If this thread gets deleted (which wouldnt hurt), I will repost this information in a new one.

_________________
Puppy Linux's Mission

Sorry, my server is down atm!
Back to top
View user's profile Send private message Visit poster's website MSN Messenger 
edoc


Joined: 07 Aug 2005
Posts: 4434
Location: Southeast Georgia, USA

PostPosted: Thu 08 Apr 2010, 20:59    Post subject:  

Is there a free app like ProCon Latte that works in Seamonkey?

I only see Firefox referenced and while they share base-code not everything is cross-compatible.

_________________
Thanks! David
Home page: http://nevils-station.com
Don't google Search! http://duckduckgo.com
Puppy upup Raring 3992 & Lighthouse64-b602
Back to top
View user's profile Send private message Visit poster's website 
Display posts from previous:   Sort by:   
Page 2 of 2 [27 Posts]   Goto page: Previous 1, 2
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Advanced Topics » Additional Software (PETs, n' stuff) » Security/Privacy
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0866s ][ Queries: 12 (0.0103s) ][ GZIP on ]