Tag Info

New answers tagged

2

In fact, a whole VM just for Skype would be a good sandbox. The greatest sandbox that you could get is to use another computer. If you don't want to use any of the methods mentioned, you still have another choice but I wouldn't call it "sandboxed" even when it is a good security step. If you're running over an admin account, you may consider running it ...


1

Do you need access to this host from multiple locations? Or can you use a jumpbox that has a static IP? If this is the case, you can set an iptables rule that only allows SSH access to a specific IP(s). This will give you implicit deny to anyone except the static IPs. The other recommendations would be to change the service to listen on a non-standard ...


-1

Like david6 mentioned in the comments you should use 14.04 LTS. If your laptop has a 64bit CPU (x64) the 64-Bit version of Ubuntu otherwise the 32 Bit version. That way you will ensure that you've always got the newest version and don't have to worry that much about security issues.


1

Iptables is not the best tool for packet capturing and I am not sure that capturing packets will answer your (routing) questions. You can use one of many tools, wireshark, snort, or tcpdump (to name a few). Your router may be able to track / log this as well. The details of packets is moderately complex and somewhat lengthy to expalain. Take a look at the ...


0

Your question needs to be answered with NO. For it to become an issue: someone first needs to gain access to your machine. If there is no way for someone to gain access exploiting it will be impossible. You do not mention having a web server active. You do not mention this machine being connected to the internet. So the answer is no. Still ... WHY would ...


0

I doubt if Java has any relation to your login problem, unless it was heavily used by the site. The browsers are culprits and, of course, a website. I can guess the following possibilities: * new browsers had dropped some SSL protocols that the website is using (there was big shock recently, so-called POODLE SSL attack); * or maybe their web site has ...


5

What you're looking for are Ubuntu Security Notifications and they are not clearly listed in the repositories. This page is the main Ubuntu Security Notifications listing. As for individual packages, updates which address security fixes are in their own special repository, the -security pocket. Using Synaptic, you can switch to the "Origin" view, and see ...


0

If you run those commands, you'll get any fixes that are in the repositories -- but those might not be, yet. If you have Update Notifier enabled (a tray widget), you'll get a notification whenever there are system or security updates (and security updates will be noted as such). Then you'll get the patches as soon as they're out for Ubuntu, without having ...


0

I think you're talking about checking a package's changelog? To see what's new, major big fixes, etc? Synaptic has an easy way to try & download changelogs. Or if the changelog isn't available or is too brief, the best way might be to note the available version, and go to the developer website & see hopefully more detailed changes.


1

You could just test it in a virtual box of Ubuntu. That way you would have full control of network seting and there is also minimal risk of corruption


0

This problem stopped happening after a couple updates. It looks like the ca-certificates file provided in the Ubuntu repos was missing an intermediate cert for GeoTrust.


0

Just store it anywhere. Make duplicates of it. You can upload it every where BUT make your key file common file. For example. a picture of your pet. just like that. That picture can be mixed with other picture or file. Then upload it in your facebook or in dropbox. Who know that picture is your key file. It is better to be like that. and the best way to ...


6

If you mean a KeePass password file, there are several arguments to decide where to store it. In my opinion, if the passwords are really, really important to you, you should make the decision based on: The risk of the file being hacked Assuming you have a strong password to open the file, you may assume the KeePass file is rather safe (also see the tip of ...


0

Try changing your sshd port to 1000+. Fail2ban helps too. For example i have some servers running sshd on 1919 or 905 and I barely get these chinese IPs trying to bruteforce my servers.


0

The utilities for setting data and time work differently depending on getting a list by right clicking on the desktop which shows "Users" and "Date and Time", neither of which do not give me access for editing, and clicking on "Activities which provides a list of utilities including "Users and Groups" and "Time and Date" which I can edit. Strange.


2

Terminal At first you have to update the virus definitions with: sudo freshclam Then you can scan for viruses. clamscan OPTIONS File/Folder If necessary start with root permissions: sudo clamscan. Examples: To check all files on the computer, displaying the name of each file: clamscan -r / To check all files on the computer, but only display ...


0

OpenVPN won't assign server's DNS resolver(s) if you run it from terminal. This is a known behavior and until OpenVPN developers fix it, you have to run an external script to assign the DNS resolvers once the tunnel is connected, and revert when disconnected. This should work on Ubuntu, Debian, and any Debian based distros. Step 1 First, ...


0

apt-key update did not do anything. apt-get update did. Note these lines: Get:1 http://dl.google.com stable Release.gpg [198 B] Get:2 http://dl.google.com stable/main i386 Packages [1210 B] apt has found updated package information, and this information now matched the new version of google-chrome-stable. How ...


0

Copy the following Kali repositories deb http://ppa.launchpad.net/wagungs/kali-linux2/ubuntu YOUR_UBUNTU_VERSION main deb-src http://ppa.launchpad.net/wagungs/kali-linux2/ubuntu YOUR_UBUNTU_VERSION main deb http://ppa.launchpad.net/wagungs/kali-linux/ubuntu YOUR_UBUNTU_VERSION main deb-src http://ppa.launchpad.net/wagungs/kali-linux/ubuntu ...


0

The LTS in 12.04 LTS is supposed to mean Long Term Support, so it should get important updates like security updates for a "Long Term" (currently 5 years). You should be safe keeping 12.04 and just updating it, no need to upgrade to 12.10 or a newer version. That said, the newer versions could offer newer features that 12.04 LTS may not have, like newer ...


0

I'd expect that review from "Ray" could be a false-positive from an over-zealous heuristic anti-virus scanner (likely run from windows). There are lots of anti-virus programs of wildly varying quality, I've read that some of them will even pop up false positives just to make it look like they're actually doing something. Lots of malware disguises itself as ...


2

I couldn't find another way to locate the review rather than hack into the raw review api for the ruby package. Here's that review (I've trimmed some of the metadata): "rating": 1, "reviewer_username": "JmHGnMf", "usefulness_total": 7, "usefulness_favorable": 0, "summary": "Warning Virus (PUA)", "review_text": "Warning This Program Has A ...


0

I think that I managed to disable SMB1 protocol with these two lines in the [global] section: min protocol = LANMAN2 max protocol = SMB3 I'm still not completely sure about the order of protocols in Samba, but I'm quite confident that LANMAN2 is after SMB1.


1

It is due to the fact that the message is repeated x number of times. You will see the time stamp of the first message, which apparently is repeated 14 times with 6 seconds in between, thus showing up 84 seconds (and a bit) later in the log.Generally, if you look at the output of grep -a3 -b3 repeated /var/log/syslog you will see that the repeated message ...


0

Yes, you will need encryption if you want to stop the average user. The past has proven encryption can also be bypassed through backdoors. There was a newsitem back in 2013 that the NSA paid for a backdoor in the RSA encryption. But it is unlikely that the NSA or someone who knew how this backdoor works is the person mounting your disk. You will not have ...


0

Yes, they would be able to access the data. If you want to avoid that, you have to encrypt the data. Here is some information how to use the encrypted "Private" folder or to encrypt your home folder: https://help.ubuntu.com/community/EncryptedHome Here you can find how to encrypt any folder or partition: ...



Top 50 recent answers are included