Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

7
votes
3answers
900 views

What non malicious uses are there for ping's flood (-f) option?

I have been reading up on common ways in which people attack each other on the internet through things like DDOS attacks etc, and how one would defend oneself from such attacks, and I have come across ...
-4
votes
0answers
29 views

Sniffer: Request ARP

I need your help. How can I detect if there are several ARP REQUEST coming from the same machine "sniffer" in my local network, I need a source code example in python and not tools. thanks,
2
votes
2answers
35 views

Is there a place to check for security of repositories?

I wanted to add some themes from sudo add-apt-repository ppa:noobslab/themes. How do I ensure these are safe repos? They are listed in many blogs and answers, however is there an official place I ...
135
votes
4answers
156k views

How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)?

After the BEAST attack and Heartbleed bug, now I've heard about a new vulnerability in SSL/TLS called POODLE. How do I protect myself against being exploited? Are only servers or also clients ...
116
votes
6answers
80k views

How can I install just security updates from the command line?

sudo apt-get upgrade installs all updates, not just security updates. I know that I can use Update Manager to select only important security updates, but is there a way to do this from the command ...
-2
votes
2answers
44 views

Can't log on to secure websites!

I believe I may have a bug in my Ubuntu 12.04.5 LTS program that won't allow me to log into SOME HTTPS accounts. When I try to view personal information online it says "Your connection is not private. ...
-1
votes
0answers
9 views

How to generate log in SNORT? [on hold]

please explain how generate Google chrome log activity file in snort? and how generate alert msg any software install in snort?
0
votes
0answers
23 views

Macbuntu noobslab security

Is this site safe? Being sort of a security nut, im Wondering if it is safe to install Macbuntu theme, and icon pack from noobslab.com.I have would not be installing any of the other things (lightdm, ...
0
votes
1answer
24 views

Cannot install Kernel Security updates in 14.10

I cannot install some security updates to Ubuntu 14.10 (Utopic Unicorn) 64bit, which are kernel updates. Those are the updates. I cannot install them. In settings, I have everything ticked. ...
2
votes
1answer
100 views

How can I be sure that I'm using NTP version 4.2.8p1 or equivalent?

I've recently read about the vulnerabilities within ntp, here which can be closed by installing ntp version 4.2.8p1. However, I've used apt-get to install the latest version of ntp, on an Ubuntu ...
1
vote
0answers
25 views

Is there a VPN Monitor/Kill Switch application for Ubuntu?

Hi I am looking for a VPN Monitor/Kill Switch application that will ensure my VPN connection is always connected. Should my secured connection drop, the application will drop the applications that ...
-2
votes
1answer
23 views

GUFW and BitDefender [closed]

I have a pc that I want to use only for scanning and disinfecting usb sticks. I don't want it to browse the internet or receive mail or any kind of traffic inbound or outgoing except the updates of ...
1
vote
0answers
12 views

Ubuntu server File copy detect

I have a customer who has experienced data file theft (copied filed) is there software or a way to detect this copying of multiple files Or do i have to write something?
6
votes
4answers
18k views

How to verify the SSL fingerprint by command line? (wget, curl, …)

Using a command line website downloader, such as wget, curl or any other one... In a script... I have the SHA-1 and the SHA-256 certficate fingerprint of a website. Due to security concerns (1) (2), ...
86
votes
18answers
22k views

Why is it bad to login as root?

I've often come across posts on forums or other websites where you see people joking in such a manner about running/logging in as root as if it's something awful and everyone ought to know about it. ...
0
votes
1answer
19 views

Keyboard / usb detachment alert?

I'm in a fun security-battle with a co-worker, where we each try to attach each others system in order to send out an email to all other co-workers in which they are invited to come and have a sweet ...
1
vote
0answers
15 views

apparmor aa-logprof not asking about all dependencies

In trying to write an apparmor profile for my python-flask app (which executes via gunicorn) I can't get aa-logprof to ask me about all the dependencies. If in complain mode the application works as ...
1
vote
2answers
50 views

Is it possible to restrict a program from reading anything outside what they need?

I understand that running programs as a non-root user is done in order to restrict the programs from writing system files, which prevents malware from compromising the system security. But in most ...
3
votes
1answer
10k views

HOWTO: run Tor and Vidalia on Ubuntu easily, browse and IM anonymously

You may have noticed that the Tor package in the repos doesn't work well with the Vidalia pakcage in the same repos. Funny, huh? So I did a little bit of research to find out how to easily run Tor on ...
16
votes
9answers
11k views

Access Prompt keeps asking for GMail password

A pop up keeping appearing in Ubuntu (running 12.10), asking for the password to my gmail account. The icon has a silver shield, and it is labeled Access Prompt. The actual window has an image of ...
0
votes
0answers
24 views

How to make firefox ask for master password only when trying to show passwords

I have set up a master password on firefox and the browser asks for it at unexpected time. Not every time in the start (so it isn't useful to "lock" the browser. Someone may auto-login to a website ...
1
vote
0answers
42 views

tcpd[3674]: connect from unknown (unknown) - Am I being hacked?

Earlier today I had 7 tcpd processes on my server running at 100% cpu for a long period of time. Looking into syslog I found a lot of lines like this: tcpd[11447]: connect from unknown (unknown) ...
1
vote
1answer
31 views

ODD update possible hacking? [closed]

I installed the latest Ubuntu 32 bit version yesterday, then pulled up terminal and ran apt-get update this didnt work so I ran sudo apt-get install update eventually it worked but it downlanded ...
0
votes
1answer
12 views

Are there DNS leaks with the system proxy setting?

I'm using a system-wide proxy to browse the Internet. Are there any DNS leaks with that?
0
votes
0answers
39 views

Ubuntu for the paranoid

Would it be possible to create an encrypted installation and use an SD card (or I can make a hardware key with a UART converter+microprocessor and keyboard. 1 key=1 password) as the decryption HW key ...
0
votes
0answers
22 views

Using seahorse generated password files from command-line

Seahorse (aka Passwords and Keys) is a pretty cool application for general password management. It stores the keys in ~/.local/share/keyrings/. Is there some way for me to easily read/modify this ...
0
votes
1answer
28 views

Using 12.04 LTS network manager mixing up login and wifi passwords

I've been using 12.04LTS on my laptop for a while now, with automatic security patches etc. etc. I use wired ethernet at work, and wifi at home. Until recently both worked seamlessly and without any ...
0
votes
2answers
48 views

Home folders accessible to other users and should not be, how to fix?

Why are my home folders accessible by other users on the same system by default? I understand that I can change the permission of the home folders but want to know why this happened? I have done ...
-1
votes
1answer
24 views

Information and updates [closed]

I would like to know what are the first steps for a new user of ubuntu. What is most useful for an inexperienced user of Linux, mainly one that arrived from Windows. Is it important to use the ...
-1
votes
2answers
39 views

What is MAC spoofing in the internet connections manager and does it have any benefit in terms of security? [closed]

What is MAC spoofing in the internet connections and does it have any benefit in terms of security? What is the purpose of cloning the mac or spoofing it? Does it help protect against hackers at ...
1
vote
0answers
27 views

New System account created automatically [closed]

This is weird. Last night, I started to download a movie from a torrent site, and I fell asleep. When I woke up, the download was finished and There is another user account created in my system named ...
32
votes
1answer
1k views

How to find my lost Ubuntu laptop?

I am running Ubuntu on my laptop. In case if I lose my laptop or it gets stolen, is there any way to locate it? Do I have to install any application beforehand to find my laptop?
18
votes
5answers
9k views

Package denyhosts in Ubuntu Trusty Tahr is deleted: temporary or forever?

While doing a test-upgrade of our Ubuntu server to 14.04, I found that the package DenyHosts is no longer available. Installing it gives following error: apt-get install denyhosts Reading package ...
0
votes
2answers
47 views

Will support for 14.10 stop this year? [duplicate]

A month back I have transitioned from Windows to Linux and I have utopic installed in my system. No complaints till now! :D What I wanted to know was as this is not an LTS release, will I face ...
-1
votes
0answers
11 views

Returning from a sleep the desktop displays shortly (before entering password), privacy issue [migrated]

OS: Linux mint 17.1 Cinnamon 64-bit Cinnamon version 2.4.6 Intel Celeron: 900 @ 2.20Ghzx1 Memory 2 Gb Graphics Card: Intel Mobile 4 series integrated When I return to my computer after it has been ...
3
votes
1answer
2k views

CVE-2015-0235 How to update eglibc to 2.15-0ubuntu10.10

I followed these instructions and found that my glibc version was 2.15-0ubuntu10.9. How do I update it to 2.15-0ubuntu10.10? It is also mentioned here that services have to be restarted after the ...
0
votes
2answers
65 views

ubuntu antivirus [duplicate]

Why I need to use anti virus like clam-av clam-tk or commodo anti virus or any free anti virus in Ubuntu ? Note: if I've root login enabled.and I am running few windows programs inwine1.6. will ...
0
votes
0answers
15 views

How force Logcheck to report fail2ban bans?

I'm using Logcheck to take care of my logfiles and suspicous activites. I also installed fail2ban and get sometimes... I would like to be informed then fail2ban blocks an ip.. but logcheck is not ...
0
votes
0answers
17 views

Can't access IRC on WiFi

I had been away from Ubuntu for quite a while, but now I fully migrated to it, and I'm quite happy with it. However, after a year or so, when I tried to login to Freenode, I saw that I can not connect ...
0
votes
3answers
211 views

How to remove malware?

I use ubuntu 32 bit and chrome's infected with the softwareupdaterlp virus. I don't really know what steps I should take aside from resetting/re-installing chrome. Would really appreciate any tips on ...
1
vote
1answer
265 views

“Your Java version is out of date.” on Ubuntu 2014.04

With fully updated Ubuntu 2014.04, Firefox tells me: Your Java version is out of date. How to update Java? Typing java -version in a terminal tells me: java version "1.7.0_51" Java(TM) SE ...
0
votes
1answer
19 views

So I used fixubuntu as a privicy measure, what other precations should I take using Ubuntu Linux?

Yes, I just want a privacy preserving OS, I know it's not 100% possible but I'd like to get as close as I can. Thanks
2
votes
1answer
57 views

How can I prevent people to see what application(s) I have opened?

I don't want people to see what applications I have opened. I would like to be able to instantly hide the windows with a shortcut key combination, so I can save my work afterwards. I also want to hide ...
0
votes
1answer
54 views

How can I use public-key encryption for luks?

I have been running luks with the following commands: $ sudo dd if=/dev/urandom of=/keyfile bs=1024 count=4 $ sudo cryptsetup luksFormat /dev/XXX keyfile $ sudo cryptsetup luksDump /dev/XXX And it ...
0
votes
0answers
33 views

minimal data showing in auth.log

I have locked my server down and to help troubleshoot any holes, I look in the logs, especially auth.log. In the logs, it shows that there are attempts to log in but no data shows. I am not able to ...
28
votes
2answers
2k views

Should security updates always be installed?

We are a small shop, with no real sysadmin. So developers (Java EE) also try to maintain Ubuntu server 12.04. When I login a terminal and I see messages like: 6 packages can be updated. 6 updates ...
45
votes
6answers
19k views

What is the best way to restrict access to adult content?

I bought my kids a PC and installed 12.04 (Unity) on it. The bottom line is, I want my children to use the computer unsupervised while I have confidence they cannot access anything inappropriate. ...
1
vote
2answers
270 views

How to backup encrypted home in encrypted form only?

I want to backup the encrypted home of a user who might be logged in at backup time. Which directories should I backup if I want to ensure that absolutely no plaintext data can be leaked? Are the ...
21
votes
3answers
12k views

How to block internet access for wine applications?

How can one prevent specific or any wine applications from accessing the internet? When using certain applications under Windows, they were trying to access the internet from time to time without ...
1
vote
0answers
53 views

How to config PORT KNOCKING on CSF ubuntu server and access it by linux?

I'm trying to run port knocking work on a CSF on a small VPS, i setup this: 1 - the result of csf first test ok 2 - TCP_IN = "53,80" TCP_OUT = "53,80,113,443" UDP_IN = "53" UDP_OUT = "53,113,123" ...