Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

2
votes
1answer
29 views

Is there a way to work with files without leaving any trace of them? No showing up in recent lists in editors for example

I need to work with some files without leaving any long term trace of their existence - within reason. I don't care particularly if they could be pulled off the drive with recovery software, although ...
16
votes
3answers
2k views

What's the difference if I use Windows 7 as a Standard User vs if I use ubuntu?

Ubuntu is secure for various reasons, one of them, a major one I believe, is that when you try to install a software/app via terminal/store an authentication box pops up asking you for your password. ...
0
votes
1answer
358 views

I found the chromoting viewer in my chromium addons is that supposed to be there on a default install?

So I found chromoting viewer in my add-ons for chromium. Is that supposed to be there? I just installed chromium and only installed the pepper flash player. I disabled chromium and got an error is ...
0
votes
2answers
99 views

Firefox keeps going unresponsive and crashing

Ubuntu 14.04 32 bit up to date. I was recently hacked. Had to clean install from a live usb made off my network and network computers. Since clean installing firefox keeps going unresponsive and ...
0
votes
0answers
29 views

Most secure way to install node?

Should I install node as root and then add user permissions to run it, or add a sudo user to the sudoers file and install and run it that way? It seems to me that adding the user to sudo would be a ...
0
votes
1answer
72 views

CVE-2014-0196 and grs kernel [closed]

my client is renting a server in OVH. Everyone knows about OVH and their default kernel from GRS (( Can anybody say if the kernel 3.2.13-grsec-xxxx-grs-ipv6-64 is affected to CVE-2014-0196 (not ...
6
votes
1answer
807 views

How did this exploit allow write access to root owned files?

For a computer security assignment at my university I need to find and understand an exploit that works on ubuntu 10.04. I have already found and tested one on an Ubuntu 10.04 machine (that I own) ...
0
votes
0answers
17 views

Can I use Ubuntu as a front end in my network to help add security? [duplicate]

I still have a few XP machines that I need to keep on my network, I was told I can use Ubuntu as a machine to route all my network traffic thru to give the XP systems some added security. Can this be ...
0
votes
1answer
34 views

Made an ubuntu live usb on a compromised system. How to make sure the usb isn't compromised and how to securely reinstall ubuntu

I finally made an ubuntu live usb on a compromised ubuntu desktop laptop. Startup disk creator told me the usb was 7.2 gb, instead 7.8 gb and I believe the original hack involved my flash drive. Is ...
0
votes
0answers
25 views

Error in decrypting WEP-encrypted .pcap file

I got a pcap file containing captured WEP packets, and a WEP key to decrypt it. I tried using both Wireshark and airdecap-ng to decrypt the packet. The key is correct, so the decryption was done ...
5
votes
1answer
108 views

How do the security features in Ubuntu differ from Debian? [closed]

I am on the Debian Security Mailing list, and recently there has been a lot of traffic going back and forth about the security (particularly package updates) of Ubuntu vs Debian stable. A guy on the ...
0
votes
0answers
30 views

Weird error message and installation failure

I'm trying to create Live USB, and I think my 14.04 distro may be compromised. I just plugged in a new flash drive and an error popped up saying unable to mount usb as it's already open in another ...
3
votes
2answers
95 views

Will an upgrade of Ubuntu to a new LTS change SSH host key

I have recently upgraded my computer from ubuntu 12.04 to 14.04 LTS (in one step). After the upgrade, however, I got well-known warnings like ...
0
votes
1answer
34 views

Can 3rd-party package repositories be trusted? (Are there criteria to test if they're trustworthy?) [duplicate]

(Note: no disrespect whatever to the hard work people that people who run 3rd-party repositories put in.) I came across a package repository, a ppa, that was suggested for getting php5.5 on Ubuntu ...
0
votes
1answer
87 views

“Your Java version is out of date.” on Ubuntu 2014.04

With fully updated Ubuntu 2014.04, Firefox tells me: Your Java version is out of date. How to update Java? Typing java -version in a terminal tells me: java version "1.7.0_51" Java(TM) SE ...
0
votes
1answer
63 views

Enabling SSL on Squid

I installed Squid server and I am trying to secure it. In many searches, I see that is possible to enable SSL for squid. Is there any security benefits for squid server to enable SSL on it?
0
votes
0answers
55 views

Why am I getting Runtime Error in browser?

I get the following Error message in my browser: Server Error in '/' Application. Runtime Error Description: An application error occurred on the server. The current custom error settings for this ...
0
votes
0answers
1k views

Update to Clamav 0.98.3

I'm running Ubuntu 12.04 LTS. Upon updating clam definitions with sudo freshclam I got the message that my current clam software (0.98.1) was outdated and that I should upgrade to 0.98.3., which I ...
0
votes
0answers
32 views

Modifying the Ubuntu login process

I am looking to write an alternative implementation of the Ubuntu login to take advantage of an external device that supplies the login password. What are good pointers to get started? Are there ...
1
vote
2answers
407 views

How can I open Java's Control Panel?

How can I open Java's Control Panel to change the security settings?
-2
votes
1answer
62 views

Found viruses on my machine by clamTK. Need help catching hackers

I ran clamTK on my 14.04 laptop and found 3 PUA's including one for phishing. I found them in /home/Draeko/.cache/mozilla/firefox/jsobiwpi.default/Cache/9/08/64101d01 .../Cache/4/2C/BS149d01 ...
0
votes
1answer
39 views

Proxy server security

I installed Squid, and in this server guide, there are some security configurations. Is there any risks when using a proxy server? What are Squid security threats?
3
votes
1answer
199 views

Why do I have new and strange networks (_not wifi_) in my network manager? 14.04

Ok, so I updated my system to 14.04 last week (running on a Dell XPS13 ultrabook- but I'm not a developer, not particularly technically minded). Some strange things happened with network manager. ...
0
votes
2answers
36 views

ppa and System Security

I have been installing all my software from the Ubuntu Software Center. Recently, I had been installing software from PPAs. Can adding PPAs and installing software from them compromise the security of ...
2
votes
0answers
84 views

Tiger: `rtm` is listening on socket XXXX

On my Ubuntu serve 12.04 LTS, Tiger is reporting a lot of stuffs like this: OLD: --WARN-- [lin002i] The process `rtm' is listening on socket 60404 (UDP) on every interface. NEW: --WARN-- [lin002i] ...
0
votes
0answers
31 views

Uninstall core fonts leads to install of Flash?

I was installing ubuntu-restricted-extras and the install didn't finish, I got a warning that the core fonts and something else were not installed properly. So I uninstalled, but didn't like that it ...
-4
votes
3answers
165 views

Can someone please clear up the haziness regarding security in Ubuntu and the other recognised distros?

I was using Ubuntu, but after updating to 14.04 LTS the Unity Desktop did not perform particularly well. So after research, I switched to Xubuntu, a recognised version of Ubuntu running the Xfce ...
1
vote
1answer
35 views

Some way to block access to certain directories for tech support?

I'm about to ship my laptop to tech support and I started thinking, I don't want them going through my downloads or family photos, etc, however they require the administrator password. The problem ...
1
vote
1answer
49 views

File access control mechanism in Ubuntu 13.10

Can someone tell me where I can find detailed description about file access control mechanism used in Ubuntu 13.10 desktop. I already tried Ubuntu documentation, thank you.
0
votes
1answer
83 views

Software center shows that Google Docs has been installed [closed]

I made a Gmail to message the owners of a blog I follow because some of their recent posts seemed like personal attacks. After I messaged them I have no reply and they deleted my disqus post on their ...
0
votes
2answers
305 views

When will Flash Player 11.2.202.356 security update will be available

Adobe Systems released emergency security updates for Flash Player in order to fix a vulnerability that has been exploited in attacks against users since earlier this month. Software center provides ...
2
votes
0answers
77 views

How can I use a Verbatim Secure'n'Go USB key?

I have purchased a 4Gb USB key from Verbatim. How can I use it under Ubuntu? I do not need the "secure data" feature, and have still not saved anything on it, so formatting at low level would be OK. ...
0
votes
1answer
39 views

How do you connect to a network that IS broadcasting but DOES NOT have an SSID?

I have access to the MAC address and signal strength. He's not jamming my network, but he is bridging my wireless network. I want to connect to his network and figure out what he's doing. Any advice ...
0
votes
1answer
47 views

Preventing Déjà Dup from attempting a backup when out of my network

I’ve set Déjà Dup to back up daily to my home network’s Synology NAS (by WebDAV, if you’re curious). The problem is that my laptop comes with me to many places. My laptop does not seem to realise ...
1
vote
2answers
289 views

How can I stop my server being an “open DNS resolver”?

This morning I got a letter from my ISP saying that my Ubuntu Server (13.10) can be used as an "open DNS resolver". They propose 3 possible solutions to fix this problem: Limit access to recursive ...
0
votes
0answers
319 views

Create x11vnc password file with both admin and viewonly password on 12.0.4LTS

Using Ubuntu 12.0.4 LTS and need to enable x11vnc access with admin and viewonly access based on which vnc password is supplied. The x11vnc server gets started out of /etc/lightdm/start via: ...
3
votes
1answer
70 views

Kernel security settings

What is the right security setting for the net.ipv4.conf.all.secure_redirects option in sysctl.conf? Here it sets to 1 and Here sets to 0. Is net.ipv4.conf.default.secure_redirects related to ...
3
votes
1answer
79 views

Juju security model issues

What plans are there to extend the security model in Juju? We see two significant issues with the current model - no internal firewalling within an environment, and the inability to expose ports to ...
0
votes
0answers
25 views

Ubuntu Repository Security [duplicate]

I notice that Ubuntu repositories is not HTTPS, all links in /etc/apt/source.list in http links. This is a peace of my repository links: deb http://archive.ubuntu.com/ubuntu saucy main restricted ...
0
votes
1answer
25 views

Can I secure a webpage with something other than username/password

I want to secure a webpage, but I want something better than username and password. Is there any public key style authentication for a webpage? I'm not concerned with the usability / convenience of a ...
0
votes
1answer
32 views

LOIC to work in ubuntu

i have been wondering on using LOIC(Low Orbit Ion Cannon) in ubuntu,but the problem is will it work in ubuntu 13.10 because LOIC is developed in .Net. how to get LOIC working in ubuntu?
0
votes
1answer
54 views

Remove SUID/GUID bits

SUID and SGID files on system are a potential security risk, and should be monitored closely. Is there any file in ubuntu server that recommended to remove SUID/GUID bits from it?
3
votes
1answer
244 views

basic security tools and packages that should be installed on a public facing web server

I'm a newbie in this world and I do not have a lot of knowledge about how security works on Linux systems. I recently created a droplet on DigitalOcean with Ubuntu 13 and I've been setting it up by ...
0
votes
2answers
52 views

Security Objectives [closed]

New to Linux New to Ubuntu Objective: Better understanding security Ubuntu 12.04 LTS Hello, I am going through the security guide on Ubuntu documentation, and I am getting demotivated fast. I ...
0
votes
0answers
146 views

What does the Heartbleed bug mean for Ubuntu? Is Ubuntu not as secure as I thought? [duplicate]

I hope this question isn't closed for being subjective because I think there is a correct answer somewhere, even if it's a wiki-style explanation answer. One reason for using open source software for ...
0
votes
0answers
34 views

SELlinux security domains

I am studying SELinux, but I can't find any clear definition for security domains. What is a security domain and what is its difference with security context?
1
vote
1answer
138 views

Ubuntu security: “antivirus” in official statement?

I use current (and vanilla) Ubuntu in a work environment. (It is, in the main, a Windows-orientated outfit.) A question has come up about antivirus, and I see this on the official Ubuntu website: ...
3
votes
0answers
58 views

How to auto restart services when you get security updates?

That's related to the heartbleed bug. While my server (12.04 LTS) was configured to perform unattended install of all security updates, it seems that nginx was not restarted so it was still affected ...
10
votes
2answers
10k views

Patch OpenSSL CVE-2014-0160 on ubuntu 12.04?

NO, this is not a duplicate of How to patch the Heartbleed bug (CVE-2014-0160) in OpenSSL?. So, read on. I am seeing conflicting information with respect to Ubuntu 12.04: The Heartbleed page claims ...
2
votes
1answer
2k views

Problem updating OpenSSL in 13.10 - How to diagnose or work around?

Following the instructions in the existing question on the OpenSSL bugs, I've run apt-get update and upgrade, and rebooted. Now when I check the version, I do not have the version mentioned in the ...