Re: [libreoffice-users] LibreOffice website security

Hi :)  
Hmm, English language is sometimes inadequate and lacks things that other languages take for 
granted.  

Which "you" do you mean?  Me personally or the LibreOffice mailing lists?  The lists are nothing to 
do with me and i'm not even a member of TDF.  In fact they often threaten to remove me from the 
lists for one reason or other.  I'm expecting another such threat about a couple of posts i made 
yday but just haven't got that far back in my emails yet.  


The LibreOffice mailing lists just routinely strip ALL attachments 
but that is less about security and more about avoiding forcing people 
to download potentially hefty files that might be irrelevant to their 
reasons for being on the lists.  You can use Nabble or some other Cloud 
storage system and then point to the file in your email
http://www.libreoffice.org/get-help/nabble-mailing-list-interface/
Nabble is probably the best when posting to this list as it makes it easy.  I'm not sure what i 
would use away from the lists.  Google-drive maybe?  Ubuntu One?  Dropbox?  It really depends on 
what you are doing and all i do is office work and IT.  I'm not an artist so DeviantArt or photo 
sharing sites wouldn't be relevant.  I've seen people have problems with SkyDrive that left them 
completely unable to access their own data but that could easily have been user-error.  


I personally rarely use any antivirus on unix-based platforms.  I just make my system as secure as 
reasonably possible and then do occasional scans.  Occasionally i realise i've been dumb about 
something and then try to tighten that up.  Other times if i'm learning something new to me i might 
keep it simple to start with and then change all the passwords and stuff when i feel comfortable.  

Mostly i just fully reinstall a new OS about every year or 2, although last time i did follow the 
normal upgrade process instead of doing a full install and was surprised how well it went.  On my 
colleagues Windows systems i typically leave AVG or something and if the machine is up to it also 
run the MS Security Essentials.  Sometimes i have to choose 1 or the other rather than having both 
:(  Again, with them i boot into a LiveCd and do a proper full antivirus scan every couple of 
years.  The first job of any decent malware should be to knock out any defences on the system it's 
on or even better is to find a way to neatly bypass them to avoid chance of detection.  A LiveCd is 
difficult to write to so it's less likely to get compromised and so the scan is more likely to get 
a good result.  

Regards form 
Tom :)  







> ________________________________
> From: Gabriel Risterucci <cleyfaye@gmail.com>
> To: 
> Cc: "users@global.libreoffice.org" <users@global.libreoffice.org> 
> Sent: Friday, 12 July 2013, 10:19
> Subject: Re: [libreoffice-users] LibreOffice website security
>
>
> The list won't let the attachment through.
>
> What antivirus do you use ?
>
> -- 
> Cley Faye
> http://cleyfaye.net
>
>
> 2013/7/12 Petre Matei Borocan <petre.borocan@gmail.com>
>
> > Hi Tom,
> >
> > Please see attached a new print screen when attempting (second time) to
> > download the Windows version of LibreOffice.
> > (I'm, already using it on Linux Mint).
> > The message clearly indicates the website has been infected with a malware.
> > Maybe (hopefully) Linux users are not affected but those on Windows
> > certainly are.
> > Kind regards,
> > Petre
> >
> >
> > On Mon, Jun 17, 2013 at 12:53 PM, Petre Matei Borocan <
> > petre.borocan@gmail.com> wrote:
> >
> > > Dears,
> > >
> > > Please see attached the print screen that I got when trying to open
> > > LibreOffice website.
> > > Kind regards,
> > > Petre
> > >
> > >
> > > On Mon, Jun 17, 2013 at 8:31 AM, Tom Davies <tomdavies04@yahoo.co.uk
> > > wrote:
> > >
> > > > Hi :)
> > > > It is unlikely the LibreOffice website is infected because it runs on
> > > > unix-based platforms such as Gnu&Linux.  I don't think any of the
> > > > internet-facing servers run on Windows.  Also i suspect that uploads get
> > > > scanned and stuff on the servers gets scanned fairly regularly.
> >   However it
> > > > might be wise if we let the websites team know there might be an issue.
> > > >
> > > > On Debian you might be able to install an antivirus program such as
> > > > Clamtk (the Gnome/Cinnamon/Mate/Xfce front-end to clamav) or
> > BitDefender or
> > > > something.  Personally i tend to use specialist LiveCds such as
> > http://trinityhome.org/Home/index.php?content=TRINITY_RESCUE_KIT____CPR_FOR_YOUR_COMPUTER&front_id=12&lang=en&locale=en
> > > > http://distrowatch.com/table.php?distribution=trinity
> > > > or one of the other System Rescue type distros listed at
> > > > http://distrowatch.com/
> > > > I quite like Trinity Rescue Kit because i have used it quite often but i
> > > > haven't tried any of the others much.  TRK can sort out quite a few
> > Windows
> > > > problems quite quickly or just do maintance.  I would use it to safely
> > > > declutter first but emptying the temp folders and caches before leaving
> > it
> > > > to do an over-night antivirus scan and i would get it to run just 1 of
> > the
> > > > av programs at a time rather than 1 after another, at least until i had
> > > > some idea how long the scans took on your machine.  They are a bit
> > > > thorough!  Even 1 could easily take all night.
> > > >
> > > > Actually i would probably start by just installing clamtk inside Debian
> > > > and scan from there.  That way i could keep working while the scan was
> > > > running.  After that scan it might be easier to decide how to proceed.
> > > > Obviously Debain wont be affected by the Windows viruses so you can
> > carry
> > > > on working on the documents that are on the Windows side of your
> > machine.
> > > > Just make sure you scan documents before sending them on to other
> > Windows
> > > > users.
> > > >
> > > > Good luck!  Thanks for letting us know!
> > > > Regards from
> > > > Tom :)
> > > >
> > > >
> > > >
> > > >    ------------------------------
> > > >   *From:* Jay Lozier <jslozier@gmail.com>
> > > > *To:* users@global.libreoffice.org
> > > > *Sent:* Sunday, 16 June 2013, 22:08
> > > > *Subject:* Re: [libreoffice-users] LibreOffice website security
> > > >
> > > > On Sun, 16 Jun 2013 14:55:51 -0400, Petre Borocan
> > > > <petre.borocan@gmail.com> wrote:
> > > >
> > > > > Dear LibreOffice Team,
> > > > >
> > > > > My antivirus program under Windows is blocking the access to your
> > > > > website because it is infected with a malware. I'm accessing your
> > > > > website using a linux operating system (debian based distro).
> > > > > Is it possible for you to check if your website has been infected?
> > > > > And thank you for the excellent office suite you have created.
> > > > > Kind regards from Romania,
> > > > > Petre Borocan
> > > > Petre
> > > >
> > > > What antivirus are you using and does it report a specific virus?
> > > >
> > > > --
> > > > Jay Lozier
> > > > jslozier@gmail.com
> > > >
> > > > --
> > > > To unsubscribe e-mail to: users+unsubscribe@global.libreoffice.org
> > > > Problems?
> > > > http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> > > > Posting guidelines + more:
> > http://wiki.documentfoundation.org/Netiquette
> > > > List archive: http://listarchives.libreoffice.org/global/users/
> > > > All messages sent to this list will be publicly archived and cannot be
> > > > deleted
> >
> > --
> > To unsubscribe e-mail to: users+unsubscribe@global.libreoffice.org
> > Problems?
> > http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> > Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
> > List archive: http://listarchives.libreoffice.org/global/users/
> > All messages sent to this list will be publicly archived and cannot be
> > deleted
>
> -- 
> To unsubscribe e-mail to: users+unsubscribe@global.libreoffice.org
> Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
> List archive: http://listarchives.libreoffice.org/global/users/
> All messages sent to this list will be publicly archived and cannot be deleted
-- 
To unsubscribe e-mail to: users+unsubscribe@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted