Tag Info

New answers tagged

1

You are most probably being targeted with a MITM attack. From the Wikipedia article: In cryptography and computer security, the man-in-the-middle attack (often abbreviated to MITM, MitM, MIM, MiM or MITMA) requires an attacker to have the ability to both monitor and alter or inject messages into a communication channel. This attack is common on ...


0

sudo apt-get dist-upgrade done. fixed.


0

The "fix" for courier disables tls 1.1 and tls 1.2. There does not appear to be a way to run courier with tls 1.1 or higher. A PCI scan on your server may come back with the recommendation: Configure SSL/TLS servers to only use TLS 1.1 or TLS 1.2 if supported. Configure SSL/TLS servers to only support cipher suites that do not use block ciphers.


5

From usn-2497-1 it is stated you need to upgrade to ntp 1:4.2.6.p5+dfsg-3ubuntu2.14.04.2. To me that is the same as your 4.2.6p5 though yours is shortend. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 14.10: ntp 1:4.2.6.p5+dfsg-3ubuntu2.14.10.2 Ubuntu 14.04 LTS: ntp ...


0

If I were to do the same, I would: Disable all hardware in the BIOS that you don't need. (less is better) Use ClamAV Remove all software that you don't need (obviously not stuff like Python, but applications like FireFox, LibreOffice, ...) Set a mirror in software updates that only uses FTP Use GUFW to block everything but FTP and DNS Allow the machine to ...


1

If he is plugging in a USB, whether is is set up U3 or as a HID device, I believe it will always show up in dmesg. As far as an unplug alert, you would essentially follow these udev rule instructions, substituting "add" for "remove"


2

The method to restrict access on Ubuntu is with apparmor. https://wiki.ubuntu.com/AppArmor Firefox comes with an apparmor profile for Firefox which has been specifically developed with security in mind. as pointed out by Rinzwind , ro access is not necessarily a security problem. Large programs such as firefox is not the best of examples as firefox has ...


1

Yes, there is: it is called the chroot environment (see http://en.wikipedia.org/wiki/Chroot).


0

Your "Password was incorrect" problem is because "GMail" identifies "Evolution" as a less secure app, so doesn't provide authentication to the app. You can change this feature if you want, https://www.google.com/settings/security/lesssecureapps But if you don't want to allow your email access to evolution, you can remove your gmail account in evolution by ...


1

To remove Remmina, our default remote desktop search for it in Ubuntu Softwar Center or type on a command line ... sudo apt-get purge remmina Same for samba ... sudo apt-get purge samba Mind though: samba is used for cross platform file and printer sharing and is only installed if you have Windows partitions. When you remove this you will not be ...


1

Yes, there are. However the leaks are coming from the proxy server and not from your computer. If the proxy server is being used by many people it would be somewhat harder (although not impossible) to link the DNS leaks back to you.


0

I think there is a simple answer to this. When you open the browser have you ever been prompted to insert you user password to unlock the keyring? To me this happens quite often. It's also possible for NM to prompt asking for Wifi password (probably due to failed Wifi authentication ), and I can tell you the prompts are very similar in look. So, maybe, ...


1

I usually like to start with Google. When I install something new and want to find out how to interact with it I'll search for something like "Things to do after installing Ubuntu", or "Top Ubuntu Apps", or "Ubuntu for beginners". After a while I start to get the hang of new things and eventually become more and more proficient. Ubuntu is a great OS for ...


1

MAC spoofing is what you do when you tell your NIC (Network Interface Card, which can be wireless too) to use a different address for communication on the local network (the segment before the first router). This MAC address is not (at least with IPv4) visible on the outside, so you will not gain any security from spoofing it. The main reason for spoofing ...


0

Mac addresses can be useful in setting up certain network configurations. Mac addresses are individual to devices, ie network cards and can be used to filter allowed connections in a network. One example of use would be in the use of a WAP. A WAP can be setup to rebroadcast, or repeat the information from another WAP, typically identified to each other by ...


-1

It appears that a fork is now being maintained at https://github.com/denyhosts/denyhosts and the current version is 2.9.


0

This question comes up infinitely and has been answered many times. We should probably create a canonical question for this. After a release goes End of Life, there are zero updates to the repositories. Eventually after End of Life, the repositories for that release get migrated to oldreleases, which only holds the archive state as it was at the EOL ...


0

Ubuntu 14.10 will ends life on July 2015, link. After EOL, may be you will not face any security issues. But after that you will not get any support from Ubuntu community. You can not get any updates(including security updates) for your system. So you will miss latest technologies which will be develop by Ubuntu community. So after end of life, move to ...


3

The default umask is 022, which allows group and others read permissions (and execute, where applicable) (or 002 if User Private Groups are enabled). If you have a problem with that being the default, file a bug. If you want to change the default, edit /etc/login.defs and change UMASK 022 to UMASK 077 And then do: chmod og-rx -R ~


2

If using the graphical interface or the adduser command to create the users, you can modify this in the file /etc/adduser.conf as explained in the manpage, by changing DIR_MODE from 0755 to 0700 or whatever you want. Also, for useradd, see this answer in SuperUser's forum.


0

Why I need to use anti virus like clam-av clam-tk or commodo antivirus in Ubuntu You do not. Anything with Ubuntu is optional. The only reason to install the software you mention is when your Ubuntu is the system in a network where software and mails are sent to Windows machines. So for normal desktop users there is no need whatsoever. Can those ...


1

It is a lot harder to get a virus on Linux than Windows as the kernel code for each machine with Linux installed is different, even if you use the same CD or .iso image on another machine. With Windows the kernel code is the same. You can install an antivirus if you want for added security. There are many FREE antivirus programs out there for Linux. Just be ...


0

Removing the *.source file(s) from ~/.config/evolution/sources did the trick for me - those dialogs are gone for good. Source: http://ubuntuforums.org/showthread.php?t=2131506&p=12759547#post12759547 Though, in my case, this was probably due to a combination of the other answers (Google 2-factor auth) and the fact that I had upgraded from an earlier ...


1

All computers can suffer from viruses and viruses, including Linux. Very few viruses exist for Linux so, users sometimes don't install antivirus software. Personally, I like to recommend antivirus software or antivirus protection for servers and necessary and business computer systems. For private computers, it is up to the user to determine if they want ...


2

Privacy Indicator lets you change some privacy related settings in Unity and remove some automatically collected data. But it's likely far more important to configure your web browser to protect your privacy and to be careful where you enter what kind of information on the web.


5

IMPORTANT EDIT With the commands: xdotool windowunmap <window_id> and xdotool windowmap <window_id> it turns out there is a way to completely mask the presence of application windows temporarily. Even the wmctrl -l command will not list the windows any more. I will post the new answer below and leave the first answer as a second option. ...


2

Public key encryption is really only useful if you want to have other people encrypt messages to you, and you don't want to go to the trouble of secretly giving them your secret encryption key. So you post your public key for the world to see and encrypt messages to you, that only you can read. It would be of no benefit to you personally encrypting your ...


0

Here are couple of suggestions. When I mention commands, those are to be issued in command-line aka terminal , which you can access by pressing CtrlAltT Remove google-chrome related folders, e.g. /home/username/.config/google-chrome and /home/username/.cache/google-chrome. You can find others with locate google-chrome command. Remove google-chrome ...


0

My first guess would be to install and run ClamAV. I've been using it for a few months now and it does a pretty good job at detecting malware. I use the GUI version of ClamAV which is called ClamTK. Hope this has helped you out.


0

To harden Ubuntu servers, there are a number of packages that can be found with: apt-cache search harden- to install all of them, simply use: apt-get install harden-* ans start reading the hardening documentation now installed on your system in /usr/share/doc/harden-doc For more information, visit: ...



Top 50 recent answers are included