Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

2
votes
1answer
13 views

Does Kubuntu have GPG keys?

Does a Kubuntu have a GPG keys to prove the authenticity of OS image? I saw the Ubuntu have, but didn't see anything for [K]ubuntu.
3
votes
0answers
15 views

Find Kali Security tester tools after installation

I'm a 'beginner' with Ubuntu. I tried it already a few times. I also tried Kali, etc already. I think Ubuntu is very useful, and has many possiblities. But I missed one thing from Kali. The Security ...
2
votes
1answer
18 views

Can PGP keys in Ubuntu be replaced?

If some attackers compromised an ISO image of Ubuntu and replaced inner PGP keys , then I will not to able get & install security updates. Is it right? I'm asking it because I possible may meet ...
0
votes
0answers
7 views

DropbBox suddenly restarted with “Killed” message

I have installed DropBox with: cd ~ && wget -O - "https://www.dropbox.com/download?plat=lnx.x86_64" | tar xzf - And it normally works fine, but today when I was syncing with my online ...
1
vote
1answer
14 views

Encrypt second hard disk with same password

I installed Ubuntu 14 LTS with disk encryption (selected during installation). I have two questions: 1- What is encryption algorithm of current encrypted disk? 2- I have a second hard disk and I ...
0
votes
2answers
24 views

Was my SSH server compromised? If so, how, and what steps should I take?

I recently enabled ssh access to my machine to work on a group project with my classmates. I read the guide for setting up ssh on ubuntu and tried to follow good security practices. I disabled ...
2
votes
0answers
20 views

What's up with the sudden appearance of .AppleDouble folders all over my filesystem?

Something I have never seen on my Ubuntu machine before now- .AppleDouble folders have appeared in many different folders all over my filesystem. It creeped me out- like someone on a Mac was looking ...
0
votes
1answer
28 views

UFW blocking connection every minute at home [duplicate]

I'm using a router to connect to the internet at home. I used a long password with WPA2/AES, changed the SSID and changed the default password. But strangely, even if I disconnect the router from the ...
-3
votes
1answer
40 views

need to check if my ubuntu 14.10 has been hacked [closed]

I have a Ubuntu 14.10 machine and I would like to check if my security is OK. I doubt that some one accessed my machine from internet and remotely controlled it. so what are the suitable tools I need ...
0
votes
0answers
14 views

Tiger Warns and Alerts

I am using Plesk 11 and have installed Fail2Ban, RKHaunter and Tiger. Tiger and Fail2Ban sends me emails, but Tiger shows a lot of warnings and alerts. # Checking for known intrusion signs... # ...
0
votes
1answer
43 views

Can an unmounted USB be infected my malware?

Yesterday, I went on a dark creepy site whose js freezed my system/firefox (Ubuntu 14.04 up to date, Firefox 37.0.1 up to date). Now I tried, from the same system, to find any malware with: sudo ...
1
vote
0answers
40 views

Start programming [closed]

I am a beginner ubuntu user, and I am interested in learning a programming language. My demands are that I would like it to help me master the command line, and be a good base voor learning future ...
0
votes
1answer
13 views

gnuPG encrypt and decrypt folder

I use this command to compress and encrypt a directory: tar zcvf - /tmp/directory | gpg -c > /tmp/directory.tar.gz.gpg What is the command to decrypt and unpack at the same time?
2
votes
1answer
21 views

OSSEC HIDS reports “Interface entered in promiscuous(sniffing) mode”

I have installed the latest version of OSSEC HIDS (2.8.1), and I keep now getting these email notifications from it: OSSEC HIDS Notification. 2015 Apr 08 11:26:17 Received From: ...
0
votes
1answer
54 views

someone is using may sendmail to spam other

I have an Ubuntu (14.04.1 LTS) install on AWS with sendmail. I keep getting messages from mail servers that are unable to deliver some of my messages (I did not send) and all are about sex. So I ...
10
votes
1answer
148 views

Do I need to install Security updates for Ubuntu base?

I installed Lubuntu 14.04 LTS from a disc and have added updates.System info shows 14.04.2 LTS. Software updater >security updates offers Ubuntu base 103MB. Do I need to install this?
1
vote
1answer
40 views

Why the attack's ip address has a string 'dia'

This is a record from netstat –lnt | grep ^tcp: tcp 0 0 xx.xxx.xx.72:ssh 106.49.174.61.dia:55983 ESTABLISHED "x" is hidden by me :) my questions are: why does the address have ...
1
vote
1answer
56 views

How do I prevent webcam hacks [closed]

I have read on many websites that there is an increasing number of attacks on webcams, based on viruses and similar software that allow third parties to gain control of the webcam of an attacked ...
1
vote
2answers
24 views

Is an application in Ubuntu allowed to open other applications if it does not have elevated privileges?

Let's assume an application in Ubuntu is compromised. Since, by default, downloaded applications do not have root privileges, no major damage can occur. The worst a malicious hacker can possibly do ...
-2
votes
3answers
35 views

Does Ubuntu accept purely random incoming connections outside the LAN by default (meaning ufw is disabled)? [closed]

By "purely random," I mean that the connection was not initiated by the Ubuntu user. EDIT: For example, think of a malicious SSH connection from a source outside the LAN.
0
votes
1answer
38 views

Automatically installing security updates on desktop system more than once per day

I see that the GUI configuration for update-manager has a maximum check interval of once per day. I'm sure Canonical thought about this carefully, but these days I don't want to be without a ...
0
votes
1answer
20 views

OSSEC user accounts disabled

I have recently installed OSSEC (2.8.1), and during the installation I noticed that it created some extra user accounts. But when viewing those user accounts in my System Settings > User Accounts ...
0
votes
1answer
40 views

How to get a program to startup at start if it requires sudo to start

I have got a program which to start needs to be started with sudo, but as it would be very useful for this program to start up at startup without me having to manually start it, is there a way to get ...
5
votes
2answers
136 views

Why doesn't chkrootkit test syslogd?

When I scan my machine with chkrootkit I notice that it always says for one of them: Checking `syslogd'... not tested Why is this not tested for? Should this ...
0
votes
2answers
64 views

Ubuntu 14.04 LTS - Why can User bypass password at Unity Login?

We've had Ubuntu on my wife's computer at home for several years now and as far as I am aware, she has always had to use her password to login. However, a couple of days ago, she pointed out to me ...
-10
votes
2answers
664 views

I think my PC is being hacked. What should I do? [closed]

I'm afraid I'm being hacked: My Ubuntu is receiving inbound traffic while my PC is disconnected from Ethernet and WIFI, so my question is, how am I receiving inbound traffic? I even have a firewall ...
0
votes
2answers
18 views

Installed version 12.04 and it worls. Do I really need a new version…?

I was unable to install 14.04 and need not receive assistance with solving it; there, I was able to install 12.04. But, I was advised to install 14.01/14.10. Do I really need to install a newer ...
1
vote
2answers
23 views

mitigation of grub attacks

I want to disable the sing user mode attack performed at the grub level by passing kernel parameters. I know a solution that is putting the grub password & bios password.but I want to know ...
1
vote
1answer
50 views

Am I part of a botnet?

I have Ubuntu 14.10. How do I check if my Ubuntu is part of a botnet? These are the addresses I found with netstat: tcp ESTAB 0 0 192.168.5.122:33195 213.199.179.157:40016 ...
1
vote
1answer
40 views

Why system accounts given login shell on Ubuntu 12.04.5 Desktop

I did a fresh install of Ubuntu 12.04.5 64-bit Desktop from ubuntu-12.04.5-desktop-amd64.iso and was shocked to find the login shell of numerous system accounts was set to /bin/sh instead of ...
0
votes
1answer
18 views

Is there a resource which lists Ubuntu Security Notices?

Every week, I check the Ubuntu Security Notices page, to see what's going on in the world of vulnerabilities. Is there anywhere the information from these posts is kept in a more reviewable format? ...
1
vote
2answers
39 views

Which is actual difference between package update and security updates?

This is probably a real noob question... I would like to understand what the "updates" alerts I get when logging onto my Lubuntu box actually mean. When I read: 35 packages can be updated. 22 ...
0
votes
0answers
10 views

What protocol does the system-wide proxy use?

I'm writing a SOCKS5 proxy (hoping to integrate native encryption options (4096 bit GPG encrypted exchange for the 256 bit AES communications cypher) because I'm bored and need something to do). When ...
0
votes
0answers
28 views

12.04 auditd will not record user login and logoff to audit.log

Auditd only logs events of types CWD, PATH and SYSCALL. It never seems to detect events of type USER_LOGIN for example. I have enabled rules to catch these login/logout events but they do not seem ...
1
vote
2answers
33 views

how to prevent sudo from executing a non root file?

I want to prevent sudo from executing files not owned by root. so, to allow sudo run such file, I want the file to be: chown root:root filename chmod go-w filename Is it possible to limit sudo ...
1
vote
2answers
69 views

permanent terminal with root [closed]

Is it bad to have at all times (one) terminal logged in as root? If so, why? (I leave the window with root terminal usually opened because it's much more comfortable than writing sudo before ...
0
votes
1answer
38 views

linux detect interface promiscuous mode in my network

how can detect and get the name or mac adress or ip adress of any device in my network that the mode of its interface is promiscous script python. I need help, thanks.
-1
votes
1answer
44 views

what is the best way to upgrade security patches on ubuntu 14.04

I am trying to upgrade security patches on production boxes. Need to know how can i plan this activity. I also need to make sure that in case something is wrong then how do i roll the updates.
0
votes
1answer
40 views

make my machine invisible for ping [duplicate]

I search solution to pevent my machine form the attack arp poisoning. I believe to make my device invisible for this haker If they want to ping my machine they have any reply. I don't khnow how I ...
1
vote
1answer
104 views

Prevent Skype resolvers getting your IP on Ubuntu

I am running Skype version 4.3.0.37 on Ubuntu 14.10, and I know that on the Windows version there is an option to only allow direct connections to your machine through Skype for Skype contacts, which ...
0
votes
0answers
15 views

Is it true that all of updates are pgp signed?

Is it true that all of updates (auto-updates) are pgp-signed so hackers cant replace them by some type of attacks? Also does a pgp-signed downloaded soft from Muon Software Center and Ubuntu Software ...
1
vote
1answer
16 views

Which Ubuntu Source file implements the management of the nx bit?

As I understand it, Ubuntu has a feature to set the nx bit to prevent stack smashing attacks. What source code file implements this, and during normal operations what process/data structure handles ...
1
vote
0answers
41 views

Initramfs suddenly speaks IPv6 but no SSH login

I have been running a configuration with an encrypted root partition and network unlock via Dropbear in initramfs for some time on my Utopic Xubuntu Mediacenter. Since I am actively using IPv6 to ...
-1
votes
2answers
36 views

Help with an assignment please [closed]

I have 2 questions I'm having trouble finding info for. Q1 what are names of 2 main editions for ubuntu? Q2 name 4 security features for ubuntu.
0
votes
1answer
58 views

why does not IPv6 (RFC 4941) privacy work?

I've followed instructions on https://docs.menandmice.com/pages/viewpage.action?pageId=6361024 It simply does not work, I have no Ipv6 starting with 2001::: , only the same as before. ...
0
votes
0answers
11 views

webapps control and transparency review

there is a lack of information about this, most people just want to disable, for example what Amazon WebApp is doing ? does add referrals cookies ? does it sends any data like mouse pointer ...
0
votes
0answers
10 views

Best way to execute script from another linux user on the same system

I've set a script to be running on subdomain.domain.com mostly for security by isolation reasons. I need to include some output of it at domain.com. The thing is it uses ajax and hence cross-domain ...
16
votes
7answers
3k views

What non malicious uses are there for ping's flood (-f) option? [closed]

I have been reading up on common ways in which people attack each other on the internet through things like DDOS attacks etc, and how one would defend oneself from such attacks, and I have come across ...
1
vote
2answers
56 views

Is there a place to check for security of repositories?

I wanted to add some themes from sudo add-apt-repository ppa:noobslab/themes. How do I ensure these are safe repos? They are listed in many blogs and answers, however is there an official place I ...
0
votes
1answer
83 views

Macbuntu noobslab security

Is this site safe? Being sort of a security nut, im Wondering if it is safe to install Macbuntu theme, and icon pack from noobslab.com.I have would not be installing any of the other things (lightdm, ...