Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
2answers
22 views

Ubuntu 14.04 LTS - Why can User bypass password at Unity Login?

We've had Ubuntu on my wife's computer at home for several years now and as far as I am aware, she has always had to use her password to login. However, a couple of days ago, she pointed out to me ...
-9
votes
2answers
284 views

I think my PC is being hacked. What should I do? [on hold]

I'm afraid I'm being hacked: My Ubuntu is receiving inbound traffic while my PC is disconnected from Ethernet and WIFI, so my question is, how am I receiving inbound traffic? I even have a firewall ...
0
votes
2answers
17 views

Installed version 12.04 and it worls. Do I really need a new version…?

I was unable to install 14.04 and need not receive assistance with solving it; there, I was able to install 12.04. But, I was advised to install 14.01/14.10. Do I really need to install a newer ...
1
vote
2answers
20 views

mitigation of grub attacks

I want to disable the sing user mode attack performed at the grub level by passing kernel parameters. I know a solution that is putting the grub password & bios password.but I want to know ...
1
vote
1answer
46 views

Am I part of a botnet?

I have Ubuntu 14.10. How do I check if my Ubuntu is part of a botnet? These are the addresses I found with netstat: tcp ESTAB 0 0 192.168.5.122:33195 213.199.179.157:40016 ...
1
vote
1answer
36 views

Why system accounts given login shell on Ubuntu 12.04.5 Desktop

I did a fresh install of Ubuntu 12.04.5 64-bit Desktop from ubuntu-12.04.5-desktop-amd64.iso and was shocked to find the login shell of numerous system accounts was set to /bin/sh instead of ...
0
votes
1answer
15 views

Is there a resource which lists Ubuntu Security Notices?

Every week, I check the Ubuntu Security Notices page, to see what's going on in the world of vulnerabilities. Is there anywhere the information from these posts is kept in a more reviewable format? ...
1
vote
2answers
32 views

Which is actual difference between package update and security updates?

This is probably a real noob question... I would like to understand what the "updates" alerts I get when logging onto my Lubuntu box actually mean. When I read: 35 packages can be updated. 22 ...
0
votes
0answers
10 views

What protocol does the system-wide proxy use?

I'm writing a SOCKS5 proxy (hoping to integrate native encryption options (4096 bit GPG encrypted exchange for the 256 bit AES communications cypher) because I'm bored and need something to do). When ...
0
votes
0answers
15 views

12.04 auditd will not record user login and logoff to audit.log

Auditd only logs events of types CWD, PATH and SYSCALL. It never seems to detect events of type USER_LOGIN for example. I have enabled rules to catch these login/logout events but they do not seem ...
1
vote
2answers
31 views

how to prevent sudo from executing a non root file?

I want to prevent sudo from executing files not owned by root. so, to allow sudo run such file, I want the file to be: chown root:root filename chmod go-w filename Is it possible to limit sudo ...
1
vote
2answers
58 views

permanent terminal with root

Is it bad to have at all times (one) terminal logged in as root? If so, why? (I leave the window with root terminal usually opened because it's much more comfortable than writing sudo before ...
0
votes
1answer
25 views

linux detect interface promiscuous mode in my network

how can detect and get the name or mac adress or ip adress of any device in my network that the mode of its interface is promiscous script python. I need help, thanks.
-1
votes
1answer
38 views

what is the best way to upgrade security patches on ubuntu 14.04

I am trying to upgrade security patches on production boxes. Need to know how can i plan this activity. I also need to make sure that in case something is wrong then how do i roll the updates.
0
votes
1answer
38 views

make my machine invisible for ping [duplicate]

I search solution to pevent my machine form the attack arp poisoning. I believe to make my device invisible for this haker If they want to ping my machine they have any reply. I don't khnow how I ...
1
vote
1answer
76 views

Prevent Skype resolvers getting your IP on Ubuntu

I am running Skype version 4.3.0.37 on Ubuntu 14.10, and I know that on the Windows version there is an option to only allow direct connections to your machine through Skype for Skype contacts, which ...
0
votes
0answers
14 views

Is it true that all of updates are pgp signed?

Is it true that all of updates (auto-updates) are pgp-signed so hackers cant replace them by some type of attacks? Also does a pgp-signed downloaded soft from Muon Software Center and Ubuntu Software ...
1
vote
1answer
14 views

Which Ubuntu Source file implements the management of the nx bit?

As I understand it, Ubuntu has a feature to set the nx bit to prevent stack smashing attacks. What source code file implements this, and during normal operations what process/data structure handles ...
1
vote
0answers
38 views

Initramfs suddenly speaks IPv6 but no SSH login

I have been running a configuration with an encrypted root partition and network unlock via Dropbear in initramfs for some time on my Utopic Xubuntu Mediacenter. Since I am actively using IPv6 to ...
-1
votes
2answers
36 views

Help with an assignment please [closed]

I have 2 questions I'm having trouble finding info for. Q1 what are names of 2 main editions for ubuntu? Q2 name 4 security features for ubuntu.
0
votes
1answer
48 views

why does not IPv6 (RFC 4941) privacy work?

I've followed instructions on https://docs.menandmice.com/pages/viewpage.action?pageId=6361024 It simply does not work, I have no Ipv6 starting with 2001::: , only the same as before. ...
0
votes
0answers
10 views

webapps control and transparency review

there is a lack of information about this, most people just want to disable, for example what Amazon WebApp is doing ? does add referrals cookies ? does it sends any data like mouse pointer ...
0
votes
0answers
9 views

Best way to execute script from another linux user on the same system

I've set a script to be running on subdomain.domain.com mostly for security by isolation reasons. I need to include some output of it at domain.com. The thing is it uses ajax and hence cross-domain ...
16
votes
7answers
3k views

What non malicious uses are there for ping's flood (-f) option? [closed]

I have been reading up on common ways in which people attack each other on the internet through things like DDOS attacks etc, and how one would defend oneself from such attacks, and I have come across ...
-6
votes
0answers
46 views

how I can scan the entire ip the 172.16.2 . * without using loops

I want to know how I can scan all the possible ip for 172.16.2 . * without writing a ball 0-256 . is there a way to write like 192.186.2 . * / 24 to scan all possible byte last field. I need help ...
1
vote
2answers
51 views

Is there a place to check for security of repositories?

I wanted to add some themes from sudo add-apt-repository ppa:noobslab/themes. How do I ensure these are safe repos? They are listed in many blogs and answers, however is there an official place I ...
0
votes
1answer
69 views

Macbuntu noobslab security

Is this site safe? Being sort of a security nut, im Wondering if it is safe to install Macbuntu theme, and icon pack from noobslab.com.I have would not be installing any of the other things (lightdm, ...
2
votes
1answer
144 views

How can I be sure that I'm using NTP version 4.2.8p1 or equivalent?

I've recently read about the vulnerabilities within ntp, here which can be closed by installing ntp version 4.2.8p1. However, I've used apt-get to install the latest version of ntp, on an Ubuntu ...
0
votes
1answer
38 views

Cannot install Kernel Security updates in 14.10

I cannot install some security updates to Ubuntu 14.10 (Utopic Unicorn) 64bit, which are kernel updates. Those are the updates. I cannot install them. In settings, I have everything ticked. ...
1
vote
0answers
70 views

Is there a VPN Monitor/Kill Switch application for Ubuntu?

Hi I am looking for a VPN Monitor/Kill Switch application that will ensure my VPN connection is always connected. Should my secured connection drop, the application will drop the applications that ...
1
vote
0answers
14 views

Ubuntu server File copy detect

I have a customer who has experienced data file theft (copied filed) is there software or a way to detect this copying of multiple files Or do i have to write something?
0
votes
1answer
20 views

Keyboard / usb detachment alert?

I'm in a fun security-battle with a co-worker, where we each try to attach each others system in order to send out an email to all other co-workers in which they are invited to come and have a sweet ...
1
vote
1answer
26 views

apparmor aa-logprof not asking about all dependencies

In trying to write an apparmor profile for my python-flask app (which executes via gunicorn) I can't get aa-logprof to ask me about all the dependencies. If in complain mode the application works as ...
1
vote
2answers
55 views

Is it possible to restrict a program from reading anything outside what they need?

I understand that running programs as a non-root user is done in order to restrict the programs from writing system files, which prevents malware from compromising the system security. But in most ...
0
votes
0answers
35 views

How to make firefox ask for master password only when trying to show passwords

I have set up a master password on firefox and the browser asks for it at unexpected time. Not every time in the start (so it isn't useful to "lock" the browser. Someone may auto-login to a website ...
1
vote
1answer
32 views

ODD update possible hacking? [closed]

I installed the latest Ubuntu 32 bit version yesterday, then pulled up terminal and ran apt-get update this didnt work so I ran sudo apt-get install update eventually it worked but it downlanded ...
0
votes
1answer
19 views

Are there DNS leaks with the system proxy setting?

I'm using a system-wide proxy to browse the Internet. Are there any DNS leaks with that?
1
vote
0answers
53 views

tcpd[3674]: connect from unknown (unknown) - Am I being hacked?

Earlier today I had 7 tcpd processes on my server running at 100% cpu for a long period of time. Looking into syslog I found a lot of lines like this: tcpd[11447]: connect from unknown (unknown) ...
0
votes
1answer
40 views

Using 12.04 LTS network manager mixing up login and wifi passwords

I've been using 12.04LTS on my laptop for a while now, with automatic security patches etc. etc. I use wired ethernet at work, and wifi at home. Until recently both worked seamlessly and without any ...
0
votes
0answers
51 views

Ubuntu for the paranoid

Would it be possible to create an encrypted installation and use an SD card (or I can make a hardware key with a UART converter+microprocessor and keyboard. 1 key=1 password) as the decryption HW key ...
-1
votes
1answer
26 views

Information and updates [closed]

I would like to know what are the first steps for a new user of ubuntu. What is most useful for an inexperienced user of Linux, mainly one that arrived from Windows. Is it important to use the ...
-1
votes
2answers
55 views

What is MAC spoofing in the internet connections manager and does it have any benefit in terms of security? [closed]

What is MAC spoofing in the internet connections and does it have any benefit in terms of security? What is the purpose of cloning the mac or spoofing it? Does it help protect against hackers at ...
1
vote
0answers
30 views

New System account created automatically [closed]

This is weird. Last night, I started to download a movie from a torrent site, and I fell asleep. When I woke up, the download was finished and There is another user account created in my system named ...
0
votes
2answers
64 views

Will support for 14.10 stop this year? [duplicate]

A month back I have transitioned from Windows to Linux and I have utopic installed in my system. No complaints till now! :D What I wanted to know was as this is not an LTS release, will I face ...
0
votes
0answers
30 views

Using seahorse generated password files from command-line

Seahorse (aka Passwords and Keys) is a pretty cool application for general password management. It stores the keys in ~/.local/share/keyrings/. Is there some way for me to easily read/modify this ...
0
votes
2answers
49 views

Home folders accessible to other users and should not be, how to fix?

Why are my home folders accessible by other users on the same system by default? I understand that I can change the permission of the home folders but want to know why this happened? I have done ...
0
votes
2answers
95 views

ubuntu antivirus [duplicate]

Why I need to use anti virus like clam-av clam-tk or commodo anti virus or any free anti virus in Ubuntu ? Note: if I've root login enabled.and I am running few windows programs inwine1.6. will ...
0
votes
0answers
20 views

How force Logcheck to report fail2ban bans?

I'm using Logcheck to take care of my logfiles and suspicous activites. I also installed fail2ban and get sometimes... I would like to be informed then fail2ban blocks an ip.. but logcheck is not ...
0
votes
0answers
19 views

Can't access IRC on WiFi

I had been away from Ubuntu for quite a while, but now I fully migrated to it, and I'm quite happy with it. However, after a year or so, when I tried to login to Freenode, I saw that I can not connect ...
0
votes
1answer
19 views

So I used fixubuntu as a privicy measure, what other precations should I take using Ubuntu Linux?

Yes, I just want a privacy preserving OS, I know it's not 100% possible but I'd like to get as close as I can. Thanks