Live CD security issues

[justme11]

Hi

I am curious if there is any known way to hack into a live cd externally. Let's say I am using a live cd for simple web surfing and someone knows my ip address, could they access my live cd and start up some services so they could see what I am doing on my computer?

As far as I know the live cd is read only which would negate any hacker installing anything to it. I was just wondering if it could be compromised in any other way, while in use.

Thanks in advance

[impert]

I don't see how they could write to your live CD, and anyway, what would you lose? The price of a blank CD? More of a worry would be if they could write to a hard disc if you have one mounted. You could try the Shields Up site (you'll have to Google it because this forum doesn't trust me to post a link) (!!!) where you can test your port status. Most Linux distros will give all green (ports all closed and "stealthed" ie your machine doesn't even exist as far as the baddies are concerned). I've never tried it with a live CD though.

[justme11]

I guess I am just wondering if there is any way a live cd can be compromised remotely to where someone could see what websites you are visiting etc.

I'm pretty sure services and such can still be hacked into and started although I don't know how far a hacker could get with this, there's still no way for them to install a keylogger or any spyware in a live environment.

Using kiwi linuc live cd by the way which is basically the same as ubuntu.

[impert]

Unless you have a more interesting past than most of us, it's most unlikely that some evil genius will single you out to wreak havoc on your machine. Most nasty stuff is directed at any system that is poorly protected, which is why Windows holds a monopoly of infected machines.
Run a test using the Shields Up site. It should give you peace of mind.

[jayd512]

Hello and Welcome!

You actually can install software while running a LiveCD. Good example would be Knoppix, and installing Flash plugins or some such. But these changes are not persistent, meaning they will be un-done with a reboot.
Worst case scenario... Somebody logs in remotely, starts a service or installs something on you, restart the computer and call it clean.

However, depending on your level of paranoia, you might consider checking for remote login access when running live.