Security covers a wide-ranging set of topics including Users, Permissions, Authentication, Authorisation, Upgrades, Firewalling, Hardening, etc.

learn more… | top users | synonyms

0
votes
1answer
36 views

Ubuntu virtual machine guest-only internet

Disconnecting internet is a great security advise but i want to check my emails. is that possible to use Ubuntu as host without internet connection while in a guest OS in Virtualbox is able to browse ...
1
vote
4answers
1k views

cryptsetup - LUKS vs. Truecrypt [closed]

this question may already been made but I'd like to know how secure LUKS / cryptsetup is compared to TrueCrypt. What is the advantage and what is the disadvantage?
1
vote
1answer
204 views

File Permission In www/html Directory For Security

How can I give permission to directories and files in www/html for security. This files have an .js , .php , .sh extensions.They execute in www/html by apache's user(mine is www-data). When I give ...
0
votes
1answer
26 views

Since the touch command can set an arbtrary time, Is there a way to get the real modified time of a file?

My title pretty much says it all: Since the touch command can set an arbtrary time, Is there a way to get the real modified time of a file?
0
votes
1answer
178 views

Ubuntu 14 - unable to use sudo echo to overwrite files [duplicate]

For ubuntu 12.04 bash scripts, I used to be able to run commands like the example below to overwrite files: sudo echo 'line1 line2 line3' > /etc/some/config/file.conf Ever since Ubuntu 14.04, ...
1
vote
1answer
910 views

Contain Docker Engine with AppArmor

In face of the reminders that the Docker Engine should be run contained with AppArmor or SELinux, how to run Docker under AppArmor on Ubuntu 14.04? The Docker Security documentation and the LXC ...
0
votes
0answers
159 views

Is Enabling UPnP in Transmission Worth the Security Risk?

I'm wondering if enabling UPnP so that Transmission can select a random port on start worth the security risk. I am not asking if having a listening port is worth the risk but instead is it worth the ...
1
vote
1answer
1k views

changed permitrootlogin to no, but I can still login as root

I just created a new server (VM) and I setup SSH, I can login fine. I created another user account, added it to the admin group and sudo works fine. Now I want tried to disable the root login, so I ...
0
votes
1answer
50 views

Unknown Micropohne can hear unknown person (weird)

I tried to capture a video using webcam and VLC. On Menu I select "open capture device". VLC then presents my webcam and 4 audio devices named hw:0,0, hw:0,2, hw:1,0 and hw:10. Because I don't know ...
1
vote
0answers
29 views

Why isn't Bastille in Ubuntu 14.04 [duplicate]

Bastille is missing from the Ubutnu 14.04 universe repository. The main question - what should I do to replace the security provided by Bastille? There must be a reason it was removed so how do I ...
1
vote
0answers
146 views

I am unable to generate a gpg key through the keyring program

Whenever I try to generate a gpg key through the system's GPG program, it asks for my name, email, and password then everything except for the GPG program's main window disappears. Upon using gpg ...
-2
votes
3answers
155 views

Penetration and Security of ubuntu operating system and it's working

I was reading about ubuntu and linux systems that they are immune to malware and virus attacks due to their well managed and good architecture. So the question is how much secure a ubuntu system is ...
-1
votes
1answer
100 views

How do I remove GPG private keys from memory? [closed]

When I do the following: gpg --decrypt somefile.pgp I see a graphical dialog come up asking me for the passphrase for my private GPG key. After that, subsequent runs don't require a passphrase, as ...
-1
votes
1answer
32 views

rpm -q --verify --nouser --nogroup --nomode --nomtime PACKAGENAME

What is equivalent to following line in Ubuntu / Debian world ? Note: I have original .deb files and i want to check which files differs from original zimbra-*.deb for Z in $(rpm -qa | grep ...
0
votes
1answer
22 views

Why is each security update file size so large?

The 'Software Updater' just asked me to download a security update which has a filesize of 62MB. And these updates are quite frequent. My questions are: Why are they this big, if, by the frequency ...
0
votes
0answers
79 views

How to create a fake packet that can be used in Ettercap filters

I am working on Ettercap filters and came across inject(file) function provided by it. This function simply injects the contents of file specified in the current packet. We can also drop the entire ...
5
votes
3answers
5k views

How to patch the Vulnerability [CVE-2014-0224] in OpenSSL?

I've received a warning from the authority that generated my certificate, it says that there is bug in OpenSSL and it has been found affecting versions 1.0.1. As I understand, I have to upgrade to ...
0
votes
2answers
210 views

Is it safe to alias rm to safe-rm?

We are happy to use safe-rm as a replacement to rm, but is it considered safe to alias it? e.g. alias rm='safe-rm'
-1
votes
1answer
41 views

Problem to current security

I have install ubuntu in my lap . But after restarting my lap there is a message that " ubuntu has blocked by current securty policy" what can i do?
0
votes
1answer
61 views

How to temporarily block network access to root user?

Just want to temporarily block network access sometimes, even to the root user. How can I do this?
0
votes
0answers
388 views

how to disable usb storage in ubuntu 13.10?

I want to block my all my USB mas storage and allow only devices like keyboard and mouse . I'm able to do so by following the KB. But the issue is that when I connect devices like mobile phones & ...
0
votes
0answers
43 views

Does the network proxy run after the VPN connection, no leakage whatsoever?

I'm inside a Ubuntu 12.04 Virtualbox guest (Bridged Adapter) and by finding 'Network' in the GUI, I can access three things, a VPN which I've configured to be an OpenVPN to a VPN, a 'Wired' connection ...
1
vote
0answers
72 views

does ubuntu 14.04 use ascii-armor and how to turn it on/off?

does ubuntu 14.04 use ascii-armor and how to turn it on/off? the purpose is to test some exploit and knowing that would help, I'm still in the learning process. I'm already aware of the stack ...
1
vote
2answers
57 views

Enable to connect to remote server using ssh but i can connect one remote server

When I am connecting to remote server using ip address, I can connect to 192.168.12.141, but I cannot connect to any another remote server. Example: 192.168.12.12, 13, 18 etc... How can I get ...
0
votes
1answer
138 views

Help writing server script to ban IP's from a list

I have a VPS that I use as an openvpn and web server. For some reason, my apache log files are filled with thousands of these hack attempts: "POST /xmlrpc.php HTTP/1.0" 404 395 These attack attempts ...
1
vote
1answer
74 views

What is the different between an Normal and Admin account?

What is the different between an Normal user account and the Admin account in Ubuntu? You must always enter your password if you want do something. Can you give a Normal account "limitations" to do ...
3
votes
1answer
74 views

How can I delete private information in a bug report?

If I report a bug to launchpad using ubuntu-bug it usually adds a bunch of files about my system to the bug, it also adds a automatic generated bug summary to my bug report text. Both the summary and ...
2
votes
1answer
31 views

Is there a way to work with files without leaving any trace of them? No showing up in recent lists in editors for example

I need to work with some files without leaving any long term trace of their existence - within reason. I don't care particularly if they could be pulled off the drive with recovery software, although ...
16
votes
3answers
2k views

What's the difference if I use Windows 7 as a Standard User vs if I use ubuntu?

Ubuntu is secure for various reasons, one of them, a major one I believe, is that when you try to install a software/app via terminal/store an authentication box pops up asking you for your password. ...
0
votes
1answer
539 views

I found the chromoting viewer in my chromium addons is that supposed to be there on a default install?

So I found chromoting viewer in my add-ons for chromium. Is that supposed to be there? I just installed chromium and only installed the pepper flash player. I disabled chromium and got an error is ...
0
votes
2answers
170 views

Firefox keeps going unresponsive and crashing

Ubuntu 14.04 32 bit up to date. I was recently hacked. Had to clean install from a live usb made off my network and network computers. Since clean installing firefox keeps going unresponsive and ...
0
votes
0answers
36 views

Most secure way to install node?

Should I install node as root and then add user permissions to run it, or add a sudo user to the sudoers file and install and run it that way? It seems to me that adding the user to sudo would be a ...
0
votes
1answer
90 views

CVE-2014-0196 and grs kernel [closed]

my client is renting a server in OVH. Everyone knows about OVH and their default kernel from GRS (( Can anybody say if the kernel 3.2.13-grsec-xxxx-grs-ipv6-64 is affected to CVE-2014-0196 (not ...
6
votes
1answer
1k views

How did this exploit allow write access to root owned files?

For a computer security assignment at my university I need to find and understand an exploit that works on ubuntu 10.04. I have already found and tested one on an Ubuntu 10.04 machine (that I own) ...
0
votes
0answers
17 views

Can I use Ubuntu as a front end in my network to help add security? [duplicate]

I still have a few XP machines that I need to keep on my network, I was told I can use Ubuntu as a machine to route all my network traffic thru to give the XP systems some added security. Can this be ...
0
votes
1answer
41 views

Made an ubuntu live usb on a compromised system. How to make sure the usb isn't compromised and how to securely reinstall ubuntu

I finally made an ubuntu live usb on a compromised ubuntu desktop laptop. Startup disk creator told me the usb was 7.2 gb, instead 7.8 gb and I believe the original hack involved my flash drive. Is ...
0
votes
0answers
57 views

Error in decrypting WEP-encrypted .pcap file

I got a pcap file containing captured WEP packets, and a WEP key to decrypt it. I tried using both Wireshark and airdecap-ng to decrypt the packet. The key is correct, so the decryption was done ...
5
votes
1answer
128 views

How do the security features in Ubuntu differ from Debian? [closed]

I am on the Debian Security Mailing list, and recently there has been a lot of traffic going back and forth about the security (particularly package updates) of Ubuntu vs Debian stable. A guy on the ...
0
votes
0answers
58 views

Weird error message and installation failure

I'm trying to create Live USB, and I think my 14.04 distro may be compromised. I just plugged in a new flash drive and an error popped up saying unable to mount usb as it's already open in another ...
3
votes
2answers
146 views

Will an upgrade of Ubuntu to a new LTS change SSH host key

I have recently upgraded my computer from ubuntu 12.04 to 14.04 LTS (in one step). After the upgrade, however, I got well-known warnings like ...
0
votes
1answer
43 views

Can 3rd-party package repositories be trusted? (Are there criteria to test if they're trustworthy?) [duplicate]

(Note: no disrespect whatever to the hard work people that people who run 3rd-party repositories put in.) I came across a package repository, a ppa, that was suggested for getting php5.5 on Ubuntu ...
0
votes
1answer
221 views

“Your Java version is out of date.” on Ubuntu 2014.04

With fully updated Ubuntu 2014.04, Firefox tells me: Your Java version is out of date. How to update Java? Typing java -version in a terminal tells me: java version "1.7.0_51" Java(TM) SE ...
0
votes
1answer
83 views

Enabling SSL on Squid

I installed Squid server and I am trying to secure it. In many searches, I see that is possible to enable SSL for squid. Is there any security benefits for squid server to enable SSL on it?
0
votes
0answers
82 views

Why am I getting Runtime Error in browser?

I get the following Error message in my browser: Server Error in '/' Application. Runtime Error Description: An application error occurred on the server. The current custom error settings for this ...
0
votes
0answers
2k views

Update to Clamav 0.98.3

I'm running Ubuntu 12.04 LTS. Upon updating clam definitions with sudo freshclam I got the message that my current clam software (0.98.1) was outdated and that I should upgrade to 0.98.3., which I ...
0
votes
0answers
49 views

Modifying the Ubuntu login process

I am looking to write an alternative implementation of the Ubuntu login to take advantage of an external device that supplies the login password. What are good pointers to get started? Are there ...
2
votes
2answers
4k views

How can I open Java's Control Panel?

How can I open Java's Control Panel to change the security settings?
-2
votes
1answer
94 views

Found viruses on my machine by clamTK. Need help catching hackers

I ran clamTK on my 14.04 laptop and found 3 PUA's including one for phishing. I found them in /home/Draeko/.cache/mozilla/firefox/jsobiwpi.default/Cache/9/08/64101d01 .../Cache/4/2C/BS149d01 ...
0
votes
1answer
59 views

Proxy server security

I installed Squid, and in this server guide, there are some security configurations. Is there any risks when using a proxy server? What are Squid security threats?
3
votes
1answer
224 views

Why do I have new and strange networks (_not wifi_) in my network manager? 14.04

Ok, so I updated my system to 14.04 last week (running on a Dell XPS13 ultrabook- but I'm not a developer, not particularly technically minded). Some strange things happened with network manager. ...