Hello everybody! I can say I’m a newbie at Linux. Wanted to ask about Linux’ task viewers. On the famous task viewers such as bpytop, htop etc., can viruses hide from them? Excluding the injected codes, can virus & tracker/logger softwares hide from classic task viewers of Linux? Do they show all kinds of services and running tasks?
Here is an alternative Piped link(s):
https://www.piped.video/watch?v=c-ftuiRDqO0
Piped is a privacy-respecting open-source alternative frontend to YouTube.
I’m open-source; check me out at GitHub.
No, they cannot. If a process is running on your system, you can see it in htop.
Unless it has kernel access. If it controls the kernel then it can do whatever it wants.
If the kernel is compromised all bets are off. They have complete control of your machine.
Would you know a virus if you saw it?
In general, no. Most malware that runs its own process simply uses some name intended to make you not notice it. But it is possible, in Linux just as in every other operating system that ever existed, to imagine that some unusually sophisticated malware manages to exploit some unknown vulnerability to gain full control of the kernel and then all bets are off, then it would be able to do anything.
Getting the sudo password is pretty trivial.
Just alias the sudo command to catch it and pipe it to the wanted tool.
With the sudo password you can recompile the kernel and add a random kernel module to it.
Only secureboot and verified boot make problems there. These are actually useful!
Good point, but seems like a non starter from many opinions on Linux forums.
I understand caution when approaching things like secure boot - it can absolutely be abused by monopolies. however… barring inherent or implementation flaws and ensuring that signing keys are under user control it conceptually (and practically) allows for some useful things.
