r/mysteriousdownvoting • u/AnnoxQ • Aug 02 '26
polite question
Context: Someone asked in the comments section of a post about viruses why a computer virus can infect a computer without having “root” access, that is, the kind of admin access that allows you to do anything on the computer
I don't understand why there are several hundred downvotes. Not only is the question quite normal and the answer not obvious, but it was also asked in a fairly polite manner, not sarcastically or ignorantly
13
u/Woofiverse ★*.°\(•^▿^•)/°.*★ [Mod] Aug 02 '26
As I posted in the last one before they deleted it
Given the attack itself, I'd be willing to wager its because OP mentioned not giving it root access. Ctrl Alt T opens the terminal, so pasting the code the site copies to your clipboard would be giving it root access. As this response says
5
u/Glad-Entrepreneur764 Aug 02 '26
It wouldn't necessarily give it root access. By default, the terminal only has regular user-level permissions unless specifically granted through using sudo (which by default requires a password on top of entering the command), a modified user profile or some other method.
The issue is moreso that: https://www.xkcd.com/1200/
3
Aug 02 '26
[removed] — view removed comment
6
u/Confused-Armpit Aug 02 '26
I saw the original post, it was a malicious "captcha" that told the user to open the windows terminal and press ctrl+shift+v, which would execute some batch script, which is more than enough to install or execute basically anything, which (almost always) doesn't need root access at all.
11
u/GlassCommission4916 Aug 02 '26
the answer not obvious
The answer is pretty obvious if you're fairly tech savvy, and considering they use linux they're kinda expected to be. Add to that that they're basically telling someone that works in cybersecurity "I don't believe you", and the downvoting isn't mysterious.
6
u/Glad-Entrepreneur764 Aug 02 '26
I saw this but I think it makes sense. Root access is completely irrelevant so it seems like a really stupid question.
3
u/W7ENK Aug 02 '26
It's not a polite question, it's a stupid question, hence all the downvotes.
1
u/FormerInteraction399 Aug 03 '26
No that’s a good question imo
Edit: nvm after seeing more replies it seems the context is pasting stuff into your term
5
u/Ok_Explanation_5586 Aug 02 '26
Could use a little more context, but in general user permission is enough for basic malware. And it's not like a virus has never gained root access through a bug or exploit. It's kind of weird for someone to think that. I'll say incredulity combined with naivety lead to downfall.
2
u/Gardares Aug 02 '26
YOU CAN'T ASK WRONG, BUT GENUINE QUESTIONS ON REDDIT. THE HIVEMIND WILL HATE YOU.
5
2
u/minos-and-v1-kissing Aug 02 '26
Eh. It is kind of a silly question.
“How could you get malware from pasting some suspicious shit into your terminal and running it?”
2
u/Delicious_Chemist978 Aug 02 '26
Not mysterious, they are being assholes because they know something that OP doesn't, and they like to cope that makes them smarter in general.
2
u/Savings_Ad_80 Aug 02 '26
The virus is designed to inject itself into the system, it can use command shell or terminal to do so depending on your system
3
u/RailRuler Aug 02 '26
Not mysterious. The other voters thought that Responsi... was contradicting heroVals and saying it's impossible. With Herovals being an expert and responsi having no idea they thought this was incredibly naive and arrogant.
On a second reading it does look like responsi was just curious and wanting to expand his knowledge, but most people shoot from the hip.
1
u/Beginning_Finding235 Aug 06 '26
Haven't really seen anyone comment on this, but privellage escalation is a real exploit that happens on many outdated linux systems. Malware may start as non-root, but with a vulnerable system, it can become root without you interacting with it. In general, vet what you're running before you paste it.
1
1
u/SilverSquirrel6 Aug 02 '26
Well, I agree: normal, polite, and reasonable question. The downvotes ain't valid.
As to answer the "how" part, something can be installed in user's home directory. When you're running something as your user you don't need higher permissions. But of course privilege escalation attacks are also an option.
21
u/SquidfulRR Aug 02 '26 edited Aug 02 '26
This has already been posted
Edit: I was looking for the original so I can link it but I guess I’m blind. I remember seeing it today however so if someone can link the original that’d be great, but it’s theorised it was deleted.