Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

4
votes
1answer
2k views

How to use Secure Erase and is it on the install CD?

Supposedly there is some built in hard drive magic called "Secure Erase" which is wildly faster and more secure than "dd if=/dev/zero..." I am most excited about the speed increase. There seems to ...
4
votes
1answer
2k views

Wireless with WEP extremely slow on an Acer Timeline 4810T with a Centrino Wireless-N 1000

I've upgraded an Acer Timeline 4810T to Ubuntu 11.10. Everything works fine except for the darn wireless interface (network manager). I just tested the wireless interface over a non-encrypted signal ...
1
vote
1answer
802 views

How to run any program but prevent it from accessing the Internet

I see a nice tutorial on the subject from 2009: http://ubuntuforums.org/showthread.php?t=1188099 But wanted something that will (more likely) work on Ubuntu 11.10. This is a flavor of an ...
16
votes
1answer
3k views

Update Manager does not ask for password anymore [duplicate]

I have realized this behaviour recently. Before that each time the update manager poped up to tell me there are updates and I tell it to install them it will ask me for a password. But since recently ...
1
vote
1answer
280 views

Wine Security - Improvement by second user account?

Team, I'm considering installing wine - but still hesitant for security reasons. As far as I found out, malicious code could reach ~/.wine and all my personal data with my user-priviledges - but not ...
10
votes
4answers
20k views

What antivirus programs are available?

What antivirus programs are available for Ubuntu? We previously used Symantec Endpoint Protection but it does not work in Ubuntu.
3
votes
3answers
2k views

Disable usb mass storage

I want to disable usb mass storage on Ubuntu desktop 10.04, 11.04 and 11.10. As security policy to avoid data leakage. But in case of emergency there easy way getting usb mass storage back.
1
vote
4answers
284 views

Secure my root account

i want to know how to change the user name of my root account from root to xyz. Also I want to know how to remove the option of boot into rescue mode from grub option at the boot time.
42
votes
3answers
7k views

When to use pkexec vs. gksu/gksudo?

There are two general ways to run applications graphically as root (or, more generally, as another user). Programs like gksu, gksudo, and kdesudo are graphical frontends for sudo. In contrast, pkexec ...
1
vote
2answers
247 views

Will I be prone to viruses? [duplicate]

Possible Duplicate: Do I need to have 'antivirus software' installed on Ubuntu? I replaced windows because of the viruses and such. I was wondering if I had to worry much about them ...
4
votes
2answers
1k views

What is the best way to secure my EC2 server in regards to the SSH?

I have a Amazon ec2 instance, and was curious on if I should change the username (the default is ubuntu) or not? Since you need a public SSH key in order to access the server, I don't think you do, ...
8
votes
2answers
495 views

Why is Ubuntu default to allow everyone access to other users folders, Admin or Standard?

Why can other users see all my files by default, admin or standard users? Surely only the Public folder should have a default share, with the option to share other folders with users and groups as ...
38
votes
5answers
4k views

How can I prevent someone from resetting my password with a Live CD?

Recently one of my friends came over to my place, within 15 minutes he hacked my account using a Live CD and reset the password in front of me. I was baffled to see such a thing. Please guide me to ...
29
votes
8answers
11k views

How can I encrypt data in Ubuntu One or Dropbox?

I'd love to use Ubuntu One or Dropbox features, like file storage and so on, but I don't want anyone else to access my data, USA Patriot act etc.. I want things to be encrypted so that the only place ...
2
votes
2answers
334 views

No user name/password required when exploring from live USB?

A few months back when I buggered up my netbook and then booted into it to get information from it using a live USB. (Thinking that was 10.10) When I was copy/pasting this to another USB at no time ...
0
votes
3answers
843 views

new dyndns server at home needs more security

I have just setup an ubuntu web server to use at home as a backup and development server for a website i have. I am using dyndns so my colleges can access this also and test new code. This works well ...
2
votes
2answers
726 views

How can I make Deja Dup use AES 256 as the encryption algorithm?

I'm using Deja Dup on Oneiric Ocelot. How can I make it use AES 256 as the algorithm for encryption? Or for that matter, how can I control which encryption algorithm is used? Deja Dup uses ...
4
votes
2answers
3k views

Disable interactive SSH at user-level

I connect to a server I don't control via SSH. I use public key access and don't need to be able to connect with a keyboard-interactive password. I would like to disable keyboard-interactive access ...
3
votes
2answers
366 views

Use keyfile for encrypted swap [closed]

I installed Ubuntu 11.10 using the alternate CD and set up an ecrypted root and swap partition. Now, during boot, I have to enter a password for the root and a passwort for the swap partitition. I ...
1
vote
2answers
182 views

.passw hidden files in /etc

Rkhunter reported me that it found hidden files in /etc: Warning: Hidden file found: /etc/.group.48239632746: ASCII text Warning: Hidden file found: /etc/.passwd.13046384800: ASCII text Warning: ...
2
votes
1answer
95 views

Security exploits affecting login?

On ubuntu 10.04, I choose System > Disconnect > Swich User, then at the login screen I can click Ctrl+Alt+F4 to get a command line over a black screen, & then click Alt+F7 to redirect back to my ...
1
vote
1answer
2k views

How can I detect that my Ubuntu machine is part of a botnet?

Is there a simple way to check whether or not my Ubuntu machine is part of a botnet?
1
vote
1answer
1k views

Why there is no password to root under Recovery Mode?

I am trying to understand this situation... Today I got a problem with de sudoers file since I modified and got problem whit this modification. So the only way to solve the problem was to modify the ...
8
votes
1answer
2k views

How can one unlock a fully encrypted Ubuntu 11.10 system over SSH at boot?

In previous versions of Ubuntu, and current versions of Debian, you can unlock a fully encrypted system (using dmcrypt and LUKS) at boot time over SSH. It was as easy as: Installing the encrypted ...
2
votes
1answer
270 views

Enforce outgoing port for a machine inside LAN

I'm running Ubuntu Server (natty) in as a gateway/firewall in front of a private network. I have successfully enabled IP forwarding and NAT so the machines behind the firewall can connect to Internet ...
1
vote
3answers
2k views

Connecting to a secure webdav server through https

I'm trying to connect to a secure WebDAV server but I keep getting the error "org.freedesktop.DBus.Error.NoReply" DBus error org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible ...
3
votes
1answer
304 views

How can I block a range of IPv6 addresses?

Are there any IP blocking applications or firewalls that support IPv6? The ones I know about (pgld, moblock (sunset?) , nfblock, iplist (looks old)) are only for IPv4.
3
votes
1answer
751 views

How do I set up USB security key based authentication?

Is it possible to get Ubuntu to lock and unlock itself, if a particular USB stick is attached? For example; I sit down at my laptop; I plug the USB stick in and the system unlocks and presents ...
11
votes
1answer
728 views

Why doesn't Chromium get quicker updates?

I'm running 10.04 and i'm still only on v12 even though we've just had v14 pushed out by Google and on 3 Sept a big update to v13 that revoked the Diginotar certificates. I was running a ppa at one ...
0
votes
2answers
2k views

Wireless setting -WPA2 Enterprise

I'm setting my wireless environment. I have to use WPA2 Enterprise with PEAP and have to use AES encryption. But I can't find where encryption config is. (MS-Windows has the option) How can I config ...
2
votes
3answers
310 views

Is making a clean install enough to remove potential malware?

Is formatting the disk and reinstalling the system from scratch (to Ubuntu) enough to remove any potential hidden software spyware, keyloggers etc.? Or can something still persist installed in the ...
9
votes
1answer
767 views

Precautionary security measures for a home user? (firewall, antivirus, etc)

I just recently made the switch from Windows to Ubuntu, and I'm just a little paranoid when it comes to security measures. I've looked around and from what I've read, security is not as big a concern ...
4
votes
1answer
136 views

How do I make sure my IM client is using the right SSL certificate?

Google's had fraudulent SSL certificates issued for their domains. So, the question I have is, "How do I make sure Pidgin/Empathy trust the correct certificate?"
0
votes
1answer
131 views

What kind of sensitive information gdm log files may contain?

ubuntu-bug warns me about including gdm log files since they may contain sensitive information. Can you be more specific what kind of sensitive information these files may contain?
2
votes
2answers
684 views

How to make secondary partition accessible to me (and root) only

I have workstation with 160GB HDD capacity. I have partitioned it with: 40GB -- for OS(Ubuntu) Installation 40GB -- for my personal data, and 80GB -- for all other (public) data. I have ...
9
votes
1answer
271 views

How can I protect my data when lending my computer to someone?

I'm going to lend an old PC with dual boot (Ubuntu and Win XP) to a friend for few days. Ubuntu contains a lot of data that I want to keep confidential. I have protected my session with a strong ...
2
votes
2answers
1k views

How to protect a computer name from being disclosed to network peers?

I'd prefer my hostname to be hidden (or a fake hostname to be shown - both variants are interesting actually) from my network peers (including routers ad DHCP servers). I believe my IP and MAC ...
8
votes
5answers
3k views

How safe is EU-based Ubuntu One cloud data?

At the Office 365 launch, Gordon Frazer, managing director of Microsoft UK, gave the first admission that cloud data — regardless of where it is in the world — is not protected against the USA PATRIOT ...
4
votes
3answers
949 views

Did I Somehow Get Infected with Spyware or Virus?

So I Was trying to Install Ubuntu restricted Extras, and well this poped up in the terminal. www.actingcareersnow.comCasting Calls For Kids & Teens. Audition Now! Ages 9 to 29. [1] 3241 ...
70
votes
8answers
32k views

How to delete file(s) in secure manner?

Is there a way to make sure that a deleted file can not be recovered? As you know, deleting a file by pressing shift-del or using trash doesn't mean that file is gone forever. It resides somewhere ...
9
votes
2answers
3k views

potential ufw and fail2ban conflicts

Will running both fail2ban and ufw cause problems? I noticed that fail2ban modifies iptables rules, but ufw already has a ton of iptables rules defined... so I'm not sure if fail2ban will mess these ...
20
votes
2answers
9k views

How do I detect if someone is stealing my broadband bandwidth?

I am very paranoid about wireless connections and someone stealing my broadband bandwidth, which could lead to worse things. My question is, how can I detect if my broadband bandwidth is being ...
6
votes
1answer
289 views

How do I investigate/confirm the identity of a PPA maintainer (e.g., Chromium Team)?

The Chromium Stable PPA (as found here: ppa:chromium-daily/stable) is maintained by Chromium Team (https://launchpad.net/~chromium-team). I assume this is "Google's" Chromium developers? If so, I ...
4
votes
4answers
606 views

Should I install unsigned packages?

Yesterday when I tried to update packages, I received a message asking me if I want to install an unsigned package. I clicked no and stopped the update. Today I updated all packages without the ...
2
votes
2answers
270 views

Ubuntu/Kubuntu LTS: longer support for server packages

I read that Ubuntu 10.04 LTS Desktop is supported till April 2013, but Server is supported till April 2015. If I install Ubuntu LTS Desktop, will the server packages of the system still be updated ...
9
votes
3answers
11k views

Security camera system server

I'd like to setup a Security Camera system which is captures and stores video streams into Ubuntu Server From 2 wireless Cameras. Which type of motion-detecting wireless camera you suggested? Are ...
6
votes
2answers
9k views

“allrequestsallowed.com”… Hack attempt?

I have many attempts on my (small, personal and absolutely unimportant) web server, and apache and fail2ban usually do their job right. But there's a log entry that worries me: xx.yy.www.zzz - - ...
2
votes
2answers
271 views

Which security features are disabled when I start wireshark?

I want to know which security features are disabled(if any) when i start wireshark in Ubuntu 10.10.
9
votes
2answers
1k views

What is the least insecure way to store a password that is used by a script?

I have a Bash script that automatically authenticates with a service using my username and password. The credentials are currently stored as plain text within the script. What precautions should I ...
8
votes
1answer
1k views

Why should I use gksudo for Gtk apps instead of sudo? [duplicate]

I read somewhere that people should use gksudo for applications that use the Gtk GUI instead of sudo? What's the reasoning for this?