LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 08-13-2017, 11:55 AM   #1
gordie1969
Member
 
Registered: Jan 2013
Posts: 53

Rep: Reputation: Disabled
Ubuntu 16.04


Hey guys kicked W10 off my desktop did not like it at all now using Ubuntu 16.04 how secure is Linux these days with new malware out there and antiviruses I tried to install comodo but didn't let me I use the UFW Firewall and do my updates everyday
 
Old 08-13-2017, 02:32 PM   #2
ChuangTzu
Senior Member
 
Registered: May 2015
Location: Where ever needed
Distribution: Slackware/Salix while testing others
Posts: 1,718

Rep: Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857
Quote:
Originally Posted by gordie1969 View Post
Hey guys kicked W10 off my desktop did not like it at all now using Ubuntu 16.04 how secure is Linux these days with new malware out there and antiviruses I tried to install comodo but didn't let me I use the UFW Firewall and do my updates everyday
Good for you!

Linux is very secure, more so then Windows, however, the weakest link in the chain is still the person using the device.

antivirus is not necessary, unless you are running an email server etc..., however, if you want to feel better you can install:
Code:
apt install rkhunter chkrootkit
https://help.ubuntu.com/community/RKhunter

after running rkhunter then run chkrootkit as root:
chkrootkit

false positives may come up, and may require further research/investigation.

ClamAV may be beneficial as well. https://help.ubuntu.com/community/ClamAV

Make sure you use browser addons for firefox, something like: NoScript, uBlock Origin, HTTPS
Everywhere etc...

Since youre using Ubuntu this may be worth a look over: https://wiki.ubuntu.com/BasicSecurity

Last edited by ChuangTzu; 08-15-2017 at 01:12 PM. Reason: removed questionable phrase
 
Old 08-13-2017, 02:55 PM   #3
gordie1969
Member
 
Registered: Jan 2013
Posts: 53

Original Poster
Rep: Reputation: Disabled
ubuntu 16.04

Thanks guys I don't do much on my desktop online banking facebook youtube surf an shop but I use firefox for that and chromium for my bank needs
and thunderbird as my email client
 
Old 08-13-2017, 05:56 PM   #4
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
Quote:
Originally Posted by ChuangTzu View Post
false positives may come up, unless they come up on both then probably no reason to be alarmed.
So, worst advice ever.
 
2 members found this post helpful.
Old 08-13-2017, 07:15 PM   #5
ChuangTzu
Senior Member
 
Registered: May 2015
Location: Where ever needed
Distribution: Slackware/Salix while testing others
Posts: 1,718

Rep: Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857
Quote:
Originally Posted by Habitual View Post
So, worst advice ever.
So propose something better, otherwise of what value was your comment?

YMMV,perhaps.
 
Old 08-13-2017, 08:22 PM   #6
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 10,662
Blog Entries: 4

Rep: Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941
Frankly, you shouldn't have to be thinking about "rootkits" or anything such as that, because you should be closing your system off from any attempt(!) at unauthorized access.

As I describe in my LQ Blog, you can create a "Dwarvish Door" (think: Mines of Moria, Lord of the Rings), using OpenVPN with the tls-auth feature. To gain access, one must possess two one-of-a-kind digital certificates, and the second must not have been revoked. Only after passing through this first gantlet can you reach ssh or anything else ... and those who do not possess the necessary certificates cannot detect(!) that the secret door even exists, let alone open it. There are no "open ports," and the OpenVPN service will not reveal its existence. (If you don't show that you probably possess the first certificate, it won't even talk to you.)

Authorized users pass swiftly through, and you know every user by name because of the unique credentials that they bear. Whereas, L33T H4X0RZ can't even find you. Their 'bots pass silently by, detecting nothing.

"Number of Unauthorized Access Attempts: Zero."

Even though ssh encrypts its communications ... who cares? It's just as insecure as telnet, because it gives the entire world a login: prompt.

Last edited by sundialsvcs; 08-13-2017 at 08:26 PM.
 
Old 08-13-2017, 08:26 PM   #7
gordie1969
Member
 
Registered: Jan 2013
Posts: 53

Original Poster
Rep: Reputation: Disabled
What's with the root kit advice
Ė
 
Old 08-14-2017, 09:25 AM   #8
jeremy
root
 
Registered: Jun 2000
Distribution: Debian, Red Hat, Slackware, Fedora, Ubuntu
Posts: 13,602

Rep: Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084
Habitual, you've been a member of LQ long enough to know that posts such as #4 aren't acceptable here.

--jeremy
 
Old 08-14-2017, 09:39 AM   #9
jsbjsb001
Senior Member
 
Registered: Mar 2009
Location: Earth, unfortunately...
Distribution: Currently: OpenMandriva. Previously: openSUSE, PCLinuxOS, CentOS, among others over the years.
Posts: 3,881

Rep: Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063
Quote:
Originally Posted by gordie1969 View Post
Hey guys kicked W10 off my desktop did not like it at all now using Ubuntu 16.04 how secure is Linux these days with new malware out there and antiviruses I tried to install comodo but didn't let me I use the UFW Firewall and do my updates everyday
While I'm not too clear on what your asking here... but, if it's about viruses on Linux, NO system is 100% secure (that includes Linux).

But having said that, Linux is a LOT more secure than other systems (like Windows). You have to make your own judgement, as to whether or not, you need anti-virus software. If your also using Windows PC's and/or running servers, that deal with Windows machines then, yes, I would recommend you install some.

A lot of the major AV vendors DO support Linux, like Sophos (that I use myself) for one, but far from limited to.

You can also use rkhunter (that I also have installed) as well, in addition to whatever AV software (if any), you decide to go with.

I suggest you do more research and based on that research, make your own judgement.

Best of luck!
 
1 members found this post helpful.
Old 08-14-2017, 07:20 PM   #10
AwesomeMachine
LQ Guru
 
Registered: Jan 2005
Location: USA and Italy
Distribution: Debian testing/sid; OpenSuSE; Fedora; Mint
Posts: 5,524

Rep: Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015
You can install tripwire.
 
Old 08-15-2017, 05:23 AM   #11
//////
Member
 
Registered: Nov 2005
Location: Land of Linux :: Finland
Distribution: Arch Linux && OpenBSD 7.4 && Pop!_OS && Kali && Qubes-Os
Posts: 824

Rep: Reputation: 350Reputation: 350Reputation: 350Reputation: 350
i recommend installing adblock and noscript and getting rid of flash plugin for w/e browser.

why? because i was browsing football stream sites and my browser got infected with ad-malware, it downloaded porn pop-ups etc.
 
Old 08-15-2017, 06:58 AM   #12
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
Quote:
Originally Posted by ChuangTzu View Post
So propose something better, otherwise of what value was your comment?

YMMV,perhaps.
Been proposing for about 5 years now.
I apologize for my insensitive post.
Quote:
Originally Posted by ChuangTzu View Post
probably no reason to be alarmed.
just rubbed me the wrong way.
All the other suggested items (noscript/adblock) are spot-on.

Quote:
Originally Posted by jeremy View Post
Habitual, you've been a member of LQ long enough to know that posts such as #4 aren't acceptable here.

--jeremy
It won't happen again.

John
 
Old 08-15-2017, 11:34 AM   #13
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 10,662
Blog Entries: 4

Rep: Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941
I agree with the advice about ad-blockers. (Sorry, LQ!)

Internet advertisements are Java or JavaScript programs, and as such they represent one of the best and fastest ways to distribute malicious or vexatious programming.
 
Old 08-15-2017, 01:05 PM   #14
ChuangTzu
Senior Member
 
Registered: May 2015
Location: Where ever needed
Distribution: Slackware/Salix while testing others
Posts: 1,718

Rep: Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857
Quote:
Originally Posted by Habitual View Post
Been proposing for about 5 years now.
I apologize for my insensitive post.
just rubbed me the wrong way.
All the other suggested items (noscript/adblock) are spot-on.



It won't happen again.

John
Hi Habitual, and I have generally enjoyed your posts and benefited from them as well. I removed that section and changed it (see above post). I find that alot of new people to Linux that have Windows hard wired in their nervous system can be a bit overzealous about Malware/Virus/Trojans etc...,so I tend to er on the side of caution and patience with them. I can see a new person running rkhunter for example and freaking out when they see some warnings, before reading the log and figuring out that the warning is ok and not Armageddon.
 
Old 08-15-2017, 01:48 PM   #15
ChuangTzu
Senior Member
 
Registered: May 2015
Location: Where ever needed
Distribution: Slackware/Salix while testing others
Posts: 1,718

Rep: Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857
OP I found this thread for you: https://ubuntuforums.org/showthread.php?t=510812?
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Ubuntu GNOME and Ubuntu Flavors Unite Into a Single Distro for Ubuntu 18.04 LTS LXer Syndicated Linux News 0 04-14-2017 03:03 AM
LXer: Hereā??s Two Method That is Helping Ubuntu User to Upgrade Ubuntu 11.10/10.04 to Ubuntu 12.04 LT LXer Syndicated Linux News 0 05-12-2012 06:50 PM
LXer: Ubuntu live CD will let you upgrade to newer Ubuntu versions Ubuntu 11.04 Development LXer Syndicated Linux News 0 03-01-2011 03:20 PM
LXer: Ubuntu Restricted Extras - Lets Ubuntu Play Everything [Ubuntu for Beginners Sc LXer Syndicated Linux News 0 04-20-2010 12:10 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 02:14 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration