Hot answers tagged

17

This is not a security risk at all, because you can always only set environment variables for your current environment (e.g. current Bash session) and, using the export command, its child environments (scripts you launch, subshells, etc.). It's impossible to escalate an environment variable created or modified into the parent environment. This includes that ...


13

In the URL bar of Firefox, go to about:config. In the search box of the about:config page, enter the following: Network.http.sendRefererHeader Double click on Network.http.sendRefererHeader and change the value from 2 to 0 to disable the referrer header. The following values are accepted: 0 – Disable referrer. 1 – Send the Referer header when ...


12

There are Firefox Addons that can accomplish this. They tend to make it easy to toggle on/off sending the referrer header, and do not require manual modification of Firefox's configuration. For example, Smart Referer: Send referers only when staying on the same domain. You can whitelist domains with wildcards and configure other things, look in ...


4

The 1st URL. Both locations hold the same software though so in the end it won't matter. As soon as Xenial reaches end of life only "archive" will be useable but it wont get any security updates anyways.


4

Canonical has Ubuntu Security Team, which is a paid group, that professionally reviews and supports software submitted to Ubuntu archives, as well as releasing fixes (aka the security updates) . From the Ubuntu Wiki: The Ubuntu Security Team often performs audits on software before it is to be officially supported. Once vulnerabilities are found, ...


3

This can be solved in two steps: Find security related packages that need to be updated: I am running a modified version of the update-notifier's apt-check script which takes an additional switch: --security-package-names, and outputs only the security related package names Look up CVE's against those packages: The ubuntu-cve-tracker project on launch pad ...


3

I think you're spending your effort on trifles. If Bad Guy can attach a terminal, Bad Guy can boot from his USB. But, since man securetty says securetty - file which lists terminals from which root can log in it implies that you could comment out all but TTY1. Commenting out (or not) lines for hardware you don't have makes no difference. Since, if you ...


2

The Firefox add-on RefControl allows you to set a global Referer behaviour, which can be overwritten for specific domains. The behaviours are: Normal (like Firefox works by default) Block (send no Referer at all) Replace (sends the root address of the current domain as Referer) Specific (allows you to define a string yourself which should be sent as ...


2

Yes, it is a security risk When you are using a root user, all the applications run with root privileges too. There are not that many viruses for Linux OS (at least compared to Windows), but every single vulnerability in apps now pose a bigger risk than with limited privileges. In the worst case scenario, those vulnerabilities may result in destruction of ...


2

I have no fear of hackers because I'm such a discrete/boring internet user welcome to the botnet. ;) Having limited privileges while using the system is a part of the security concept implemented with access rights. If some part of software is overtaken e.g. by using a buffer overflow, the attacker will have the privileges of the process he overtook. So ...


2

Take a look at the xtrlock package, available in the Ubuntu repositories. I think it will accomplish what you're looking for. You can view its manual page online here: http://manpages.ubuntu.com/manpages/trusty/en/man1/xtrlock.1x.html While xtrlock is running, the mouse and keyboard are grabbed and the mouse cursor becomes a padlock. Output displayed ...


1

All personal files are stored under /home/$USER/ inside hidden directories. For Thunderbird that could be 2 locations... /home/$USER/.thunderbird/ /home/$USER/.mozilla-thunderbird/ Ubuntu uses the 1st nowadays. There will be a subdirectory named after your profile. All of the messages for an account are stored in a subdirectory named after the mail ...


1

If you can use another network, I'd suggest the Signal Desktop alternative. It's a similar Android app and now is more developed. Since April, end-to-end encryption was added. SIGNAL DESKTOP https://github.com/WhisperSystems/Signal-Desktop



Only top voted, non community-wiki answers of a minimum length are eligible