LinuxQuestions.org
Have you listened to LQ Radio?
Go Back   LinuxQuestions.org > Forums > Linux > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Thread Tools
Old 01-06-2009, 06:30 PM   #1
Present
Member
 
Registered: Jan 2004
Distribution: suse/slack/gentoo/lfs (not-in-that-order)
Posts: 281
Thanked: 0
erase all surfing data


[Log in to get rid of this advertisement]
how do i ensure all surfing data is erased? I have most in my home directory erased, but are there log files in /var or elsewhere that i need to worry about? network ip address logs?

Thanks
Present is offline     Reply With Quote
Old 01-06-2009, 07:59 PM   #2
bsdunix
Senior Member
 
Registered: May 2006
Distribution: CTOS, FreeBSD, Mac OS X, Minix, OpenBSD, Slackware
Posts: 1,127
Thanked: 29
Not knowing what distro your using or how your system is setup, the most common place where system logs are kept is /var/log/messages. But, generally no web surfing activity is logged there. If you really want to make sure your system is clean of your activity, you could always reinstall your OS.

If your paranoid about your surfing activity have you considered your ISP network logs and the web site HTTP logs you've visited?
bsdunix is offline     Reply With Quote
Old 01-06-2009, 08:14 PM   #3
OlRoy
Member
 
Registered: Dec 2002
Posts: 167
Thanked: 2
You should focus on preventing the data from getting on the hard drive in the first place, instead of wiping all traces of it (which is difficult). I suggest you use a LiveCD like Knoppix.
OlRoy is offline     Reply With Quote
Old 01-06-2009, 08:28 PM   #4
bsdunix
Senior Member
 
Registered: May 2006
Distribution: CTOS, FreeBSD, Mac OS X, Minix, OpenBSD, Slackware
Posts: 1,127
Thanked: 29
Quote:
Originally Posted by OlRoy View Post
I suggest you use a LiveCD like Knoppix.
Good call.
bsdunix is offline     Reply With Quote
Old 01-11-2009, 04:29 PM   #5
Present
Member
 
Registered: Jan 2004
Distribution: suse/slack/gentoo/lfs (not-in-that-order)
Posts: 281
Thanked: 0

Original Poster
lol, thx. Can you turn logging off in /var/log/messages ? Using Ubuntu and Zenwalk. Don't even know if its on, don't see any recent info there. Does it affect performance to disable? Is there an advantage to troubleshoot with it on?
Present is offline     Reply With Quote
Old 01-11-2009, 07:42 PM   #6
larryhaja
Member
 
Registered: Jul 2008
Distribution: Slackware 13.0
Posts: 190
Thanked: 27
Quote:
Originally Posted by OlRoy View Post
You should focus on preventing the data from getting on the hard drive in the first place, instead of wiping all traces of it (which is difficult). I suggest you use a LiveCD like Knoppix.
Yes, prevention is the way to go going forward. A LiveCD will work either as a standalone boot CD/DVD or VM. For the ultra-paranoid there is JanusVM. It takes security and privacy to the extreme. From the their website it looks like they only have a VMware image but I think I read somewhere that there is a standalone LiveCD version.
larryhaja is offline     Reply With Quote
Old 01-11-2009, 08:15 PM   #7
John VV
Senior Member
 
Registered: Aug 2005
Location: Ann Arbor Mi.
Distribution: Arch Linux ,CentOS 5.4
Posts: 2,147
Thanked: 124
you DO NOT want to turn off logging for /var/log/messages !!!
well if firefox 2 cleaning the web history is one way
if firefox 3 it is different
if seamonkey still a diff. way
if konqueror it is one more diff way
-- added --
if opera still diff

so what browser are you using ??
also micromedia flash sets it's own cookies in ~/.macromedia/Flash_Player
you might want to link ~/.macromedia/Flash_Player to /dev/null

Last edited by John VV; 01-11-2009 at 08:16 PM..
John VV is offline     Reply With Quote
Old 01-24-2009, 05:30 AM   #8
Admiral Beotch
Member
 
Registered: Sep 2007
Location: Las Vegas, NV
Distribution: Fedora / CentOS
Posts: 670
Blog Entries: 3
Thanked: 104
If you want to wipe your browsing traces, try this:

1) create a new browsing user account
2) configure your browser the way to like it
3) copy newAccount/.mozilla to say newAccount/.mozillaMaster

When you want to browse, open a shell and 'su - newAccount' and fire off the browser with 'firefox &'

When you need to clean things up, use 'shred' to destroy everything in newAccount/.mozilla and recopy the folder from newAccount/.mozillaMaster.

On my machines, I've got this scripted to actually create a user account from a skeleton and destroy it when I'm done so there's never really any trace of the user anymore - except the account event logging stuff that happens in /var/log.

And everyonce in awhile, run 'dd if=/dev/zero of=/tmp/cleaner; rm -f /tmp/cleaner' to clean up any leftovers.
Admiral Beotch is offline     Reply With Quote
Old 01-24-2009, 09:54 AM   #9
Present
Member
 
Registered: Jan 2004
Distribution: suse/slack/gentoo/lfs (not-in-that-order)
Posts: 281
Thanked: 0

Original Poster
does that last command clean up left overs from the skeleton accounts?
Present is offline     Reply With Quote
Old 01-24-2009, 10:06 AM   #10
Admiral Beotch
Member
 
Registered: Sep 2007
Location: Las Vegas, NV
Distribution: Fedora / CentOS
Posts: 670
Blog Entries: 3
Thanked: 104
off the top of my head, it does something like:

newUser="user$RANDOM"
useradd $newUser -k <skeletonDir>
firefox
find ~$newUser/* -exec shred {} \;
rm -Rf ~$newUser
userdel ~$newUser
Admiral Beotch is offline     Reply With Quote
Old 01-25-2009, 08:07 PM   #11
internetSurfer
Member
 
Registered: Jan 2008
Location: w3c
Distribution: Slackware 12 Zenwalk 5.2
Posts: 71
Thanked: 0
Browser configuration info:

_
internetSurfer is offline     Reply With Quote

Reply

Bookmarks


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
format / erase data in tape ust Linux - Newbie 1 12-05-2008 07:30 AM
Does resising partitions erase data? Jorophose Linux - General 5 01-08-2007 01:57 AM
Did using LVM commands erase existing data? laxisusous Fedora 13 06-08-2006 01:37 PM
web surfing Seith Linux - Networking 4 01-28-2006 02:18 AM
Surfing without KDE etc. sourceman Linux - General 12 06-26-2002 05:26 PM


All times are GMT -5. The time now is 02:57 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
RSS2  LQ Podcast
RSS2  LQ Radio
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: @linuxquestions
Open Source Consulting | Domain Registration