LinuxQuestions.org
Latest LQ Deal: Linux Power User Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 10-06-2015, 03:15 PM   #1
gillsman
Member
 
Registered: Mar 2014
Location: UK
Distribution: Mint 18.1
Posts: 109

Rep: Reputation: Disabled
Browser security


I use Firefox & I have a couple security add-ons namely Csycon phishing protection & Avira browser safety both of which can recognise sites compromised by malware & various other dodgy stuff, but I got to thinking I'm still doing things from a Windows user's point of view which is something I'm trying to leave behind, so my question is simply this ~ Do I really need add-ons like this in Linux or is it still wise to steer clear of infected sites?
I realise of course that in the case of viruses I am much safer than our Windows friends but are there still things out there that can harm my security which these security measure can protect me from.
 
Old 10-06-2015, 05:29 PM   #2
Emerson
LQ Guru
 
Registered: Nov 2004
Location: Saint Amant, Acadiana
Distribution: Gentoo ~arch
Posts: 5,959

Rep: Reputation: Disabled
Infecting Linux is possible via social engineering, if they tempt you to install something and you fall for it.

I've been using Linux exclusively since 2003, I visit all the sites I want, I open all the email attachments I want. This is the way one should use his/her computer, without fear. I'm behind NAT router, never used a firewall behind router, why put unnecessary load on your hardware.
 
Old 10-06-2015, 05:34 PM   #3
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.9, Centos 7.3
Posts: 17,356

Rep: Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367
I highly recommend noscript for firefox
 
Old 10-06-2015, 05:53 PM   #4
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Debian, Mageia, and whatever VMs I happen to be playing with
Posts: 12,140
Blog Entries: 14

Rep: Reputation: 3071Reputation: 3071Reputation: 3071Reputation: 3071Reputation: 3071Reputation: 3071Reputation: 3071Reputation: 3071Reputation: 3071Reputation: 3071Reputation: 3071
If these add-ons guard against malware intended for Windows. the kind that some dodgy websites are known to drop, they are likely superfluous in a wholly Linux environment. If they are designed to protect against attacks on the browser itself, there may be some utility in them, though I must say I've not used (nor even heard of) either one.

I second chrism01's recommendation of noscript and echo what Emerson said: Getting entrapped by social engineering or phishing is the bigger danger on Linux. The biggest security threat in any system is PeBCAK (person between chair and keyboard). Noscript and good careful browsing are your best defense.
 
Old 10-07-2015, 11:49 AM   #5
gillsman
Member
 
Registered: Mar 2014
Location: UK
Distribution: Mint 18.1
Posts: 109

Original Poster
Rep: Reputation: Disabled
Thanks to all for the input, I will investigate noscript, thanks.
 
Old 10-07-2015, 07:39 PM   #6
XdarkXanarchyX
LQ Newbie
 
Registered: Apr 2005
Distribution: Linux Mint Debian Edition, Ubuntu LTS
Posts: 6

Rep: Reputation: Disabled
You definitely need to protect your browser. That's the new target as it's what everyone uses. Flash, Java, Javascript, etc.

Check out:
NoScript or SafeScript
Bluhell Firewall
uBlock
Self-Destructing Cookies
HTTPS Everywhere
 
Old 10-07-2015, 07:50 PM   #7
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.9, Centos 7.3
Posts: 17,356

Rep: Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367Reputation: 2367
Yeah, actually I use :

NoScript
HTTPS-Everywhere (NB you have to go to eff.org for this)
Ghostery
Flashblock
AdblockPlus

but there are loads of options/add-ons to choose from.

I also only allow pop-ups (see menu Preferences-> Content) and cookies (Privacy->History & select 'Custom...) by exception ie use the built-in FF menus for those.


--------------
Just came across this by coincidence - really good write-up of safe browsing HOWTO : includes recommendations of which tools+addons to use and why(!)

==================================
Edit ... sigh - yes indeed there was supposed to be a link
https://gist.github.com/atcuno/3425484ac5cce5298932

Thanks to this article I've now swapped AdBlockPlus out for uBlock instead; read the article to see why
Also added PrivacyBadger ...

Last edited by chrism01; 10-08-2015 at 07:59 PM. Reason: added link & note
 
Old 10-08-2015, 12:37 PM   #8
gillsman
Member
 
Registered: Mar 2014
Location: UK
Distribution: Mint 18.1
Posts: 109

Original Poster
Rep: Reputation: Disabled
chrism01 was there meant to have been a link to something in the line ~
Just came across this by coincidence - really good write-up of safe browsing HOWTO : includes recommendations of which tools+addons to use and why(!)

Thanks
 
Old 10-08-2015, 01:51 PM   #9
D.wyatt1
LQ Newbie
 
Registered: Oct 2015
Posts: 16

Rep: Reputation: Disabled
I would like to add, don't surf the web as the root user.

Install trusted plugins/extensions. If unsure, do a google search on the plugin/extension you want to use.

Don't saturate your browser with tons of them.

You may want to read this article from howtogeek.com

Warning: Your Browser Extensions Are Spying On You
 
Old 10-08-2015, 01:54 PM   #10
John VV
LQ Muse
 
Registered: Aug 2005
Location: A2 area Mi.
Posts: 17,090

Rep: Reputation: 2474Reputation: 2474Reputation: 2474Reputation: 2474Reputation: 2474Reputation: 2474Reputation: 2474Reputation: 2474Reputation: 2474Reputation: 2474Reputation: 2474
it really depends on what YOU!!! consider a "virus" or "malware"

i call tracking cookies MALWARE!!!
and FB a virus

an example

if you already post EVERYTHING on Facebook and twitter and vine and ( fill in the blank)

then you really do not care about having anything out of the hands of Big-DATA and the NSA/CIA/FBI/FSB/GCHQ / and so on

then do not install anything - it will not make a bit of difference

you already have EVERYONE in the WORLD already tracking you
( and yes tracking your porn sites as well as your FB/G+ and everything you type to your SO - including your "naughty bits" )
 
Old 10-09-2015, 01:14 AM   #11
gillsman
Member
 
Registered: Mar 2014
Location: UK
Distribution: Mint 18.1
Posts: 109

Original Poster
Rep: Reputation: Disabled
I heard that Ghostery collections information on your browsing habits & then sells it on, if that's true it would mean I'm being protected by Spyware, can anyone confirm or reject this?
 
Old 10-09-2015, 01:28 AM   #12
Captain Pinkeye
Member
 
Registered: Oct 2012
Location: The Czech Republic
Posts: 280

Rep: Reputation: 97
Quote:
Originally Posted by gillsman View Post
I heard that Ghostery collections information on your browsing habits & then sells it on, if that's true it would mean I'm being protected by Spyware, can anyone confirm or reject this?
https://www.ghostery.com/en/faq/exac...stery-collect/

https://www.ghostery.com/en/faq/how-...l-you-collect/

I personally like Ghostery a lot, to me it is much less troublesome than noscript, for example.
 
Old 10-09-2015, 02:24 AM   #13
Hasek39
Member
 
Registered: Jul 2015
Location: Moscow, Russia
Distribution: Slackware
Posts: 93

Rep: Reputation: Disabled
To be honest, if you are an ordinary user you don't need any special security addons for your Firefox. I will give just this two simple advices:
1. Don't browse web and start GUI applications from root. Also if it's possible use https when connecting to web at public networks.
2. Don't post any private information about yourself in social networks and forums. You must understand that in majority of cases user manually upload to web a lot of information about himself and it can be easily found without any hacking.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
question on browser ssl security mtdew3q Linux - Security 3 03-01-2009 12:41 PM
LXer: Browser Security From Google LXer Syndicated Linux News 0 12-13-2008 03:50 AM
Browser password security concern i_nomad Linux - Security 5 09-16-2008 09:12 AM
Browser Security Question Echo Kilo Linux - Software 3 10-17-2004 04:18 AM


All times are GMT -5. The time now is 09:29 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration