New answers tagged

0

This model is called trust on first use. You are required to manually verify the identity of the server you are connecting to for the first time. Once you verify, SFTP client will store the value locally and on subsequent connections, verify the sever's identity automatically be comparing it to the stored value. If it changed, it will display a warning of a ...


0

I’m using Elastic Firewall …worked like a breeze so far! Plus it works on multiple machines. You can go with a free account with them or try one of the paid plans for enhanced power. either way, the thing does a pretty good job at very reasonable rates. Unfortunately editing the rules in a terminal is a bit complicated and dangerous (those who ever did ...


2

Take a look at the xtrlock package, available in the Ubuntu repositories. I think it will accomplish what you're looking for. You can view its manual page online here: http://manpages.ubuntu.com/manpages/trusty/en/man1/xtrlock.1x.html While xtrlock is running, the mouse and keyboard are grabbed and the mouse cursor becomes a padlock. Output displayed ...


17

This is not a security risk at all, because you can always only set environment variables for your current environment (e.g. current Bash session) and, using the export command, its child environments (scripts you launch, subshells, etc.). It's impossible to escalate an environment variable created or modified into the parent environment. This includes that ...


1

If you can use another network, I'd suggest the Signal Desktop alternative. It's a similar Android app and now is more developed. Since April, end-to-end encryption was added. SIGNAL DESKTOP https://github.com/WhisperSystems/Signal-Desktop


0

Using RKHUNTER for rootkit and malware checking After a hacker attack, we should search for rootkits and malwares in our machine. These malicious software can corrupt files and compromise our control over the machine. There are some softwares to help us searching for these malicious softwares, and one of them is RKHUNTER. Whats is rootkit? From Wikipedia:...


2

The Firefox add-on RefControl allows you to set a global Referer behaviour, which can be overwritten for specific domains. The behaviours are: Normal (like Firefox works by default) Block (send no Referer at all) Replace (sends the root address of the current domain as Referer) Specific (allows you to define a string yourself which should be sent as ...


13

In the URL bar of Firefox, go to about:config. In the search box of the about:config page, enter the following: Network.http.sendRefererHeader Double click on Network.http.sendRefererHeader and change the value from 2 to 0 to disable the referrer header. The following values are accepted: 0 – Disable referrer. 1 – Send the Referer header when ...


12

There are Firefox Addons that can accomplish this. They tend to make it easy to toggle on/off sending the referrer header, and do not require manual modification of Firefox's configuration. For example, Smart Referer: Send referers only when staying on the same domain. You can whitelist domains with wildcards and configure other things, look in ...


0

One option is to rename your wine executable, ex: sudo mv /usr/bin/wine /usr/bin/wine.disabled or the like. Just remember to remove that or rename it if you remove the wine package :) Sometimes configure scripts will still use "wine64" if it's present (and update-binfmts might not be enough of a work around), so you may need/want to rename that as well....


3

This can be solved in two steps: Find security related packages that need to be updated: I am running a modified version of the update-notifier's apt-check script which takes an additional switch: --security-package-names, and outputs only the security related package names Look up CVE's against those packages: The ubuntu-cve-tracker project on launch pad ...


3

I think you're spending your effort on trifles. If Bad Guy can attach a terminal, Bad Guy can boot from his USB. But, since man securetty says securetty - file which lists terminals from which root can log in it implies that you could comment out all but TTY1. Commenting out (or not) lines for hardware you don't have makes no difference. Since, if you ...


4

Canonical has Ubuntu Security Team, which is a paid group, that professionally reviews and supports software submitted to Ubuntu archives, as well as releasing fixes (aka the security updates) . From the Ubuntu Wiki: The Ubuntu Security Team often performs audits on software before it is to be officially supported. Once vulnerabilities are found, ...


2

Yes, it is a security risk When you are using a root user, all the applications run with root privileges too. There are not that many viruses for Linux OS (at least compared to Windows), but every single vulnerability in apps now pose a bigger risk than with limited privileges. In the worst case scenario, those vulnerabilities may result in destruction of ...


2

I have no fear of hackers because I'm such a discrete/boring internet user welcome to the botnet. ;) Having limited privileges while using the system is a part of the security concept implemented with access rights. If some part of software is overtaken e.g. by using a buffer overflow, the attacker will have the privileges of the process he overtook. So ...


4

The 1st URL. Both locations hold the same software though so in the end it won't matter. As soon as Xenial reaches end of life only "archive" will be useable but it wont get any security updates anyways.


0

I found a great tool to install pentest tools on Ubuntu. It's name is Pentesters Framework (ptf). You can install It from this link , and see this link for a description.


0

alternative to old truecrypt is Veracrypt. Supposedly continuing where truecrypt left off. As Veracrypt can encrypt folders, you can have a LUKS volume with a Veracryt container with your photos of the president's wife naked, and they probably won't get to them. However, since the government pays Intel for backdoors into your PC with the firmware chips, who ...


0

No you are not. They are all run in a different wineprefix (Minimal Windows system) and if anything goes wrong only the wineprefix will be changed. You can just remove and reinstall the wineprefix.



Top 50 recent answers are included