Ubuntu Forums Archive Viewer

How Secure is Ubuntu..?

Archived thread 1049131 from Recurring Discussions. Markdown source: Recurring_Discussions/thread_1049131_How_Secure_is_Ubuntu...md

Original URL About this archive
#1

How do you know if your Ubuntu-804 install isn't being snooped in while you type and do things on the desktop..? Are there any tests you can run..?

Are there Ubuntu viruses..?

The firewall's settings says that your machine might not work if you accept the firewall's settings..? How do you know it won't kill the OS..?

How do you know if you aren't running the computer on root admin..?

How safe from bully-gorillas is a new install of Ubuntu..?

What are the ways a bully-gorilla can destroy Ubuntu..?

What is done to fully block them..? (besides pulling the power cord from the wall)...

Can bullies install root-kits in Ubuntu without you knowing it..?

Are there keyloggers that work in Ubuntu..?

What are the common target areas of the Ubuntu OS that Ubuntu destroyers generally target..? Is there software that protects those vulnerable soft underbellies, and plugs any holes..?

Is there a website that you can log into, to test your PC's Ubuntu OS strengths and weaknesses in its security structure..?

What does Window's Natas-bug do to Ubuntu..?

#2

What the hell is this all about? What are you exactly asking? Are you deliberately being a tool?

#3

Too many questions for me. But I think you may find those links useful: Ubuntu security forum Ubuntu Security Introduction to AppArmor Intrusion Detection

#4

I asked the questions I want answers to... To ensure that this OS is secure.. and to find out how I can secure it if it isn't... Why do you ask?.. Which planet are you on..? If you don't know, then just skip the thread... If you think the answers to my questions might break some secrets, then just say that.. or PM me with some data that helps me understand how safe this OS is, or isn't.. but don't you be getting cramps and a hernia from it...

#5

KIAaze said: Too many questions for me.

But I think you may find those links useful: Ubuntu security forum Ubuntu Security Introduction to AppArmor Intrusion Detection

Thanks dude... I'm on it...

#6

This answers your last question: https://www.grc.com/x/ne.dll?bh0bkyd2

#7

I've never heard the term "Bullies" used in IT. Anyway, Ubuntu is pretty secure... and no one is going to have made backdoors in it considering that wouldn't work out well for the software. I'd say not to worry about it. If you were happy to use Windows for ages without worrying about how secure it is then you should be good.

#8

I knew I read some article about paranoid setups once. I think I found it again, as well as lots of other potentially fun stuff: http://www.hermann-uwe.de/blog/towards-a-moderately-paranoid-debian-laptop-setup--part-1-base-system

http://paranoidlinux.org/ http://www.securityfocus.com/infocus/1414 http://www.linuxjournal.com/article/4547 http://selinuxproject.org/page/Main_Page

Have fun. But be careful, the international secret service community is watching you. 8)

#9

Lets go down the list:

How do you know if your Ubuntu-804 install isn't being snooped in while you type and do things on the desktop..? Are there any tests you can run..?

Being used to windows I can understand this paranoia, but I can tell you that Ubuntu is very secure by default. You dont need any fancy addware tools, no spyware, or anything of that sort. But your list is long so lets get this out of the way.

Are there Ubuntu viruses..?

No, at least none that work without being root... and Ubuntu disables root by default.

The firewall's settings says that your machine might not work if you accept the firewall's settings..? How do you know it won't kill the OS..?

Ubuntu has a built in firewall, its pretty good on its own and if you need to you can install firestarter too for an extra boost if you are that paranoid.

How do you know if you aren't running the computer on root admin..?

Ubuntu disables root by default, to use admin privileges ubuntu uses sudo that enables root access but only for short periods of time. sudo has a 5 minute or so time limit, after that it goes off. There are ways to decrease this time too on this forum.

How safe from bully-gorillas is a new install of Ubuntu..?

Very safe

What are the ways a bully-gorilla can destroy Ubuntu..?

None

What is done to fully block them..? (besides pulling the power cord from the wall)...

Boy you are paranoid...

Can bullies install root-kits in Ubuntu without you knowing it..?

No

Are there keyloggers that work in Ubuntu..? Well prbably just in firefox, but this depends on your browsing habits.

What are the common target areas of the Ubuntu OS that Ubuntu destroyers generally target..? Is there software that protects those vulnerable soft underbellies, and plugs any holes..?

What, who??? Really Ubuntu doesnt have such things if you are careful...

Is there a website that you can log into, to test your PC's Ubuntu OS strengths and weaknesses in its security structure..?

No, as its not needed

What does Window's Natas-bug do to Ubuntu..?

NOTHING

But really the best way to keep any computer safe: Dont use the net :p

#10

CLomax said: This answers your last question: https://www.grc.com/x/ne.dll?bh0bkyd2

Thank you your purple majesty..

I did that..

I sees in that web-page: "Note also that reverse DNS may disclose your geographic location."

How do you know you aren't running "reverse DNS"..?

What is bad about "reverse DNS" as compared to "forward DNS", or "neutral DNS"..?

(there probably isn't a "neutral DNS".. it's just how I think things out... I look at all the angles, with 54 viewpoints... Some views of some things are intelligible, whilst others are portions of breakthrough technologies...

#11

Ubuntu has a built in firewall, its pretty good on its own and if you need to you can install firestarter too for an extra boost if you are that paranoid.

Firewall is set to ACCEPT all by default.

#12

madverb said: Firewall is set to ACCEPT all by default.

Thats why I suggested firestarter, a little boost :D

#13

I started writing a thorough, point-by-point reply to this message, but in the end I was just repeating myself.

Ubuntu comes with no openable ports, by default. This means no malicious people can just connect to your computer. Bam, this stops 99.99% of threats. If you install server software, this will listen on a particular port; so unless you need a web/ftp server, don't install one! If you do need it, make sure you look at tutorials on how to securely configure your chosen server software.

Don't turn on remote desktop, as this opens a port. Exception: If you have an ADSL/cable router providing your internet service, then this probably already has a firewall built-in. This will close all ports that lead outside your network, but allow those that only travel inside it. Therefore, you can run server software and remote desktop safely, if your ADSL router has a firewall built-in.

Setting your firewall settings will not stop the operating system from booting.

Unless you logged into Ubuntu using the username "root", then you are not running as root.

Windows malware does nothing on Ubuntu. There are no viruses or malware for Ubuntu.

There are keyloggers, but none of them are malicious and you need to install them yourself, if you want one.

In short: Ubuntu is safe out-of-the-box. If you install server software and have it visible to the world, then you could possibly get some problems if you don't have the software securely configured.

It sounds like you've worried yourself more than anyone else here on the Ubuntu platform. Relax.

#14

Almost forgot BackTrack! If you want to do some "penetration testing" against your own PC/network: http://www.remote-exploit.org/backtrack.html

#15

DonaldJ said:

I sees in that web-page: "Note also that reverse DNS may disclose your geographic location."

The person who runs the website you just visited, knows what city you are currently in. He doesn't know anything else about you. Big deal.

I don't mean to feed paranoia, but your mobile phone company can triangulate your position any time they want, with much more accuracy.

#16

DonaldJ said: Thank you your purple majesty..

I did that..

I sees in that web-page: "Note also that reverse DNS may disclose your geographic location."

How do you know you aren't running "reverse DNS"..?

What is bad about "reverse DNS" as compared to "forward DNS", or "neutral DNS"..?

(there probably isn't a "neutral DNS".. it's just how I think things out... I look at all the angles, with 54 viewpoints... Some views of some things are intelligible, whilst others are portions of breakthrough technologies...

I honestly haven't the foggiest but I do know that you can't stop it happening so it's the same for everyone. Thankfully my geolocation is always in the wrong place when I check those things. It always seems to think I live in Norwich or something, might be the same for you.

However, click 'Proceed' and select 'Common Ports' and you can see who secure your network is. If the ports are stealthed, you are highly unlikely, if not at all, to get "bullied".

#17

madverb said: I've never heard the term "Bullies" used in IT. Anyway, Ubuntu is pretty secure... and no one is going to have made backdoors in it considering that wouldn't work out well for the software.

I'd say not to worry about it. If you were happy to use Windows for ages without worrying about how secure it is then you should be good.

I had a little argument with Gates and with the creators of Storm and Produkey... And my Routered, AVS'd, Firewalled, W2000, got infiltrated right through all that security like it wasn't even there... The bugger, whomever it was, did things on my desktop that I can't do on my desktop, and trashed the PC's OS four times in a week... I must have really upset the monsters... The last time it destroyed the OS, I was writing a note to the one who was snooping in my machine... The moment I suggested he "Get Pullups!".. that very second the OS crashed permanent... Not a problem.. I maintained my backups, hourly, in a hub of four flash-drives.. When the OS got hit, I pulled the hub's wire from the tower...

Windows is Not safe.. is why I opted to give Ubuntu a try.. so I wouldn't be formating the hd so often... Four times in one week is a bit thick and much.. = "bully-gorilla"...

I'm asking questions to learn about this OS... And thanks to you bunch, I'm learning stuff about Ubuntu very fast... You don't get this treatment in Windows forums... In those Windows forums it's like they are waiting for victims to bash, to chew-up, and to spit out... I dislike the Windows scene... I used it, but I grinned and bared it, with lots of grains of salt, cuz it was all I had, all I knew about computers, along with this goofy iMac chunk o junk... I'd only go into Windows forums if I needed someone to try to pee on my head...

I still don't know how secure this Ubuntu is, but I'm beginning to learn about it... So far it hasn't been attacked and damaged... That's a good thing...

But there's one wee tiny thing I can't figure out..? When I decided to try Ubuntu, I couldn't get the 804 download to start.. And four times in a row, the moment I clicked to download Ubuntu 710 image CD, my W2000 PC crashed... So I pulled the hd, and installed another hd, and managed to download Ubuntu, and make the CD...

What could or would crash the PC the moment I clicked to download Ubuntu..?

I have enemies... I've been bitching to all the world's great authorities, that they should wake-up, and stop destroying the planet for money.. and some of them are defending their damaging the planet for money... They sometimes hit my PC with their expert computer guys... I've had to format-C about 200-times in five years... Not a prob!.. I'm getting good at formating and installing.. and when the big shots slam a computer's OS, it's sort of a "treat" to see how they do it... and it allows me the op to test my skills again st their bombs... But the six-hour install isn't fun... But that's all I get with Windows.. is I'm forever installing it... I only hope that the mindless bully-gorillas don't run Linux, and if they do, that there are ways to secure Linux from their excremental-class personalities...

#18

A lot of good answers but perhaps I can contribute with this to anyone reading this thread:

What Ubuntu has as a Linux OS is a strong security scheme based on permissions and users. You can't toy with the system unless you have administrative/root permissions, and the same rules applies to all the apps and software, that means, NO app can write information anywhere outside the user home folder without being prompted for a permission (experienced users please clarify this if necessary).

Microsoft got two main security schemes. Wide open as on Win95/98, and secured by file permissions and roles as in 2000/XP. The first prove to be outdated, so MS jumped over NT technology, sadly, most 2000/XP users work as admins (without restrictions) and apps still can write everywhere they want on the system. For a virus thats like a holiday, it can spread everywhere without any prompt on the user side.

On Vista, MS started to implement a system somehow similar to *nix. An user can't be admin by default (and the profile is well hidden), and to perform any disk operation outside the users folder you need a password. Thats why Vista have so many problems with outdated apps that still insist on write crap on the install folder. Users get annoyed about the prompt asking for confirmation here and there, but thats the way should be from start.

So, Windows and Linux are starting to be in par, but historically Linux was way better than Windows on this matter.

#19

CLomax said: I honestly haven't the foggiest but I do know that you can't stop it happening so it's the same for everyone. Thankfully my geolocation is always in the wrong place when I check those things. It always seems to think I live in Norwich or something, might be the same for you.

However, click 'Proceed' and select 'Common Ports' and you can see who secure your network is. If the ports are stealthed, you are highly unlikely, if not at all, to get "bullied".

Maybe they get your geo from the data in your initial settings..? Maybe if I set the country as Greenland, they would see that my geo is Greenland..? I wonder if they get the name I chose for this PC..? that being "Thht"...

"Stealthed" is a good plan... How do you steath Ubuntu?.. What's the best Linux steather..?

#20

Sorry if you're not doing this but DonaldJ, it sounds like you're spurting random jibberish in an attempt to get a normal response. "What's the best Linux stealther?" either this whole thread is a joke or there's something up with you.

For example:

".. and some of them are defending their damaging the planet for money... They sometimes hit my PC with their expert computer guys..."

"I suggested he "Get Pullups!".. that very second the OS crashed permanent... Not a problem.. I maintained my backups, hourly, in a hub of four flash-drives.. When the OS got hit, I pulled the hub's wire from the tower..."

I hope this is a joke :)

#21

DonaldJ said: Maybe they get your geo from the data in your initial settings..?

Maybe if I set the country as Greenland, they would see that my geo is Greenland..? I wonder if they get the name I chose for this PC..? that being "Thht"...

"Stealthed" is a good plan... How do you steath Ubuntu?.. What's the best Linux steather..?

Setting a different country won't affect anything since the geolocation is according to your ISP. Like someone else mentioned, your phone company can locate you with much more accuracy.

I'm not sure how I managed to 'stealth' my ports. The test just came out that way :p. It could be my router.

If your tinfoil hat is a bit tight you could give TOR a try ;). http://www.torproject.org/

#22

DonaldJ said: Maybe they get your geo from the data in your initial settings..?

Maybe if I set the country as Greenland, they would see that my geo is Greenland..? I wonder if they get the name I chose for this PC..? that being "Thht"...

You could help yourself by reading a book on how the internet works, TCP/IP networking and DNS. You are probably using an Internet account with an ISP (Internet Service Provider). Such ISP has been assigned range(s) of IP-adresses, and they use a number of routers. The combination of the two can tell somebody where you are. Google on the traceroute command and you'll discover how. No magic.

Whatever you have entered as your location only tells your OS which keyboard settings, time display etc. to use. You give away some of that every time you use a browser, because that browser uses e.g. a specific characterset. Suppose you would use a cyrillic charset, that would place you somewhere east, provided you aren't using your computer on business in the EU or US.

#23
#24

forgive me but isn't the geo location limited to the dns server your connection passes through? only your ISP will know your address. its the trick the adds use on the bit torrent sites to get you to subscribe to dating services and meet people in your area.. no one but your ISP really knows where you live.

#25

SunnyRabbiera said: Thats why I suggested firestarter, a little boost :D

I got FireStarter a couple days ago.. When I tried to start it, I got a message that this action might kill the OS, but I just checked firestarter's settings, and this time it was running, and it let me save the settings without any messages about hurting the OS.. so I suppose firestarter is in there doing its thang... I suppose that means this OS is safe from the creeps, the numbs, and the ookooks..

How do you know what's connecting to the Net when Ubuntu is booting up..?

I found with Windows, if I made a copy of the install CD, to keep the original safe from scratches, by using the copy, that if the PC ever connected to microsoft for an update, the update would see the install as pirate, and would load something which would progressively kill the OS.. is why on every new install, I would do all the installing with the Internet wired unplugged from the tower, then add the firewall, and block everything updatish, and everything microsoft.. before connecting to the Net... For a Windows install I'd format with a W98 CD, then pull the battery for 30-minutes, replace the battery, and reformat with the W2000 CD and floppies... It was the only easy way I could ensure that every microsoft bit of craziness was out of this machine... It was that, or run the crappy "steam-powered wood-burning" obsolete iMac...

#26

DonaldJ said: How do you know if your Ubuntu-804 install isn't being snooped in while you type and do things on the desktop..? Are there any tests you can run..?

Are there Ubuntu viruses..?

The firewall's settings says that your machine might not work if you accept the firewall's settings..? How do you know it won't kill the OS..?

How do you know if you aren't running the computer on root admin..?

How safe from bully-gorillas is a new install of Ubuntu..?

What are the ways a bully-gorilla can destroy Ubuntu..?

What is done to fully block them..? (besides pulling the power cord from the wall)...

Can bullies install root-kits in Ubuntu without you knowing it..?

Are there keyloggers that work in Ubuntu..?

What are the common target areas of the Ubuntu OS that Ubuntu destroyers generally target..? Is there software that protects those vulnerable soft underbellies, and plugs any holes..?

Is there a website that you can log into, to test your PC's Ubuntu OS strengths and weaknesses in its security structure..?

What does Window's Natas-bug do to Ubuntu..?

3.Most of the time you dont want to, being root opens up some security holes as you can do (in theory) whatever you like.

  1. NO There are no viruses like there are for windows. There is malfunctioning software which is coded poorly that may damage your system but these in linux are 99.9% accidental.
  2. The firewall does not have the power to kill the os. Nor do u unless you are root.
  3. WTF are bully-gorillas
  4. Although i dont know what they are it is very unlikely something can completely destroy ubuntu.
  5. There are no ubuntu root-kits.
  6. There are no websites that offer you a security check.
  7. No windows bug will EVER effect ubuntu as they are different systems.

You seem very cautious about security almost paranoid half of these things will almost never happen to you... but Ubuntu can not install the windows .exe because the structure of the systems is very different. Linux does not have a registry that windows has it uses the file system to organize itself. The reason windows is insecure is because of the market dominance microsoft hold do for that reason developers code malware and viruses for windows. Because Linux only has about 1% of the os market share it is not worth develpopers time or effort to make linux viruses.

If you want to use windows programs you can install WINE it allows windows programs to be run on linux but creating a compaibility layer. If any virus infects wine it will only affect the wine programs not ubuntu. If you need to you can just un-install wine and it is all gone.

Linux is far more secure that windows so dont worry be happy.

#27

I would think that if you use primarily software from trusted repos and update regularly then you aren't going to have any issues.

You certainly aren't going to have any issues or concerns as if you were running a PC in the Windows world.

Ubuntu and Linux in general is a very secure operating system. If there is an issue, one of the thousands of devs worldwide would catch it before it becomes a huge issue.

Look at how fast things are updated here. As soon as you read about it on the internet on a news or tech site, I go home at night, turn on my lappie, and lookie there, it's a new update ready to download and install. And it's the same one I read about at work today.

How often do you read about Windows having an issue and sometimes it's months before anyone even fixes it?

After a nightmare of virus invading Windows PC's, the last four years on Linux have been a relief. I can say that I have not had one virus or trojan related PC issue since moving my entire household to a Linux environment.

#28

Lots of good links. If you need security there are two things to start with. When you install make your first start up account with a very strong password. Go to one of the web sites that generate random paswords and choose one about 60 characters long. Don't lose it you will need it toinstall the security software you decide to use later on. Then open a user account with a simple password for every day use. Then don't use wireless and make sure it is turned off. That right there will stop anyone from entering any more that the home folder of your everyday account. It just can't happen. Then spend a year or two studying how to harden your system and what tools you need to use to protect it and see if in intruder is messing around trying to get in. Your problem is not virus or rootkits. Your problem could be intruders. You can encrypt everything in the home folders. I think you can even encrypt the whole drive. This is what the IT guys at the big companies should be doing for a living. All the software is in the repositories you just have to learn to use it.

#29

I left the PC on all night and day, connected to the Net, to a blog.. and nothing has changed.. The desktop doesn't have any warning pop-ups.. and the OS wasn't destroyed my mindless Intel-gorillas... It was a good test, for me.. given that if I had have left a Windows PC on and connected for 24-hours, it's OS would probably be destroyed by now...

I bet the gorillas who have been tormenting me, are now cussing me, and biting the skin off their wrists, and punching holes in walls, things, and friends & family, whist running around control-rooms, swinging off things attached to ceilings, whilst screaming "Hoohoo's, Ookook's, and IEeeeee's", at the top of their lungs.. "WhooH!"...

It's like the Net is the sun burn... The pain of the burn is microsoft... Peeling the dry sunburned skin is like dumping Windows and downloading and installing Linux... Linux is the new skin, and the sunblock.. and finally I'm free of the mindless gorilla's attacks... I bet those gooey mindless monkeys are cussing at me big-time for switching to Linux...

Linux core-people are honest, intelligent, caring, realistic, loving, humans.. Yay Linux... The Linux community is the remnants of the future's brotherhood of man... Eliminating Windows was like surgically-removing a vile attacking evil little demon off my back, what was clawing and biting at my flesh...

I have a box full of 4-gig hd's ... Is there a way to install a complete U-804 to a 4-gig hd?..

I wonders which Ubuntu will be called "Dragon"..? Maybe Ubuntu-1000..?

#30

"spend a year or two studying how to harden your system and what tools you need to use to protect it and see if in intruder is messing around trying to get in. Your problem is not virus or rootkits. Your problem could be intruders.

What are Ubuntu's vulnerable areas, which educated intruders typically exploit..? I want to be sure that I've closed those doors...

What about visiting bad web-pages..? I clicked up an email link to a website, and got a pop-up warning me that it was a dangerous and banned web-site... If I went into a warez site, what damage would one expect them to do to the Ubuntu-hd..?

I like to dismantle things, to determine what they are made of, and what makes things tick.. like when I bought a macdoodoo's burger, uncooked, claiming it was for the doggie in my car.. The babe told me it was against their rules, but I convinced her that my doggie ate only raw beef... I spread the raw pattie out the size of a plate to examine what was in that burger, like those bits of ground-up blue veins, white tendons, animal muscles, fat, and such... In that same inquisitive mind, I would like to see the breakdown of what a warez website does to a visitor's PC.. as in how many electronic nasties does warez hit a visitor's computer's OS with..? Why do they do that..? What's in it for them to damage people's computers..?

#31

I first tried ubuntu about 6-7 months ago, maybe even more. Within the 1st week on Vista I had 7 bluescreens of eath from updates and it took till last week to dig out my ubuntu cds since I couldnt find them. So no more viruses, blue screens or a/v software

#32

DonaldJ said: How do you know if your Ubuntu-804 install isn't being snooped in while you type and do things on the desktop..? Are there any tests you can run..?

Open a terminal, and type :


w
who
last|head
sudo apt-get install ttysnoop
man ttysnoop

Can bullies install root-kits in Ubuntu without you knowing it..?

I don't know what you mean by "bullies", but if you are very very careless, and let someone break in via your normal user account, *and* your system has a local root exploit because you didn't update your Ubuntu box, then the attacker could possibly install some advanced root kit using some compiled kernel module hiding itself.

This is a theoretical weakness of the modular Linux kernel. You are theoretically safer with a static Linux kernel without modules. I call this theoretical because the chances are not so high that this will happen.

There's a lot more script-kiddies than sophisticated crackers out there.

And.. nothing personal, but it sounds like MS-Windows made you ... paranoid.

Apart from all this I suggest trying Firefox with the cool noscript add-on. The WOT add-on is also pretty cool.

#33

Erm... why has noone figured out he's taking the piss. Stop replying with serious replies when it's blatantly obvious by his past 6 posts that he's taking the piss out of you all.

It's funny only because everyone is replying with serious posts. Read DonaldJs entire posts and you'll figure out why I'm saying this.

#34

DonaldJ said: I left the PC on all night and day, connected to the Net, to a blog.. and nothing has changed.. The desktop doesn't have any warning pop-ups.. and the OS wasn't destroyed my mindless Intel-gorillas... It was a good test, for me.. given that if I had have left a Windows PC on and connected for 24-hours, it's OS would probably be destroyed by now...

I bet the gorillas who have been tormenting me, are now cussing me, and biting the skin off their wrists, and punching holes in walls, things, and friends & family, whist running around control-rooms, swinging off things attached to ceilings, whilst screaming "Hoohoo's, Ookook's, and IEeeeee's", at the top of their lungs.. "WhooH!"...

It's like the Net is the sun burn... The pain of the burn is microsoft... Peeling the dry sunburned skin is like dumping Windows and downloading and installing Linux... Linux is the new skin, and the sunblock.. and finally I'm free of the mindless gorilla's attacks... I bet those gooey mindless monkeys are cussing at me big-time for switching to Linux...

Linux core-people are honest, intelligent, caring, realistic, loving, humans.. Yay Linux... The Linux community is the remnants of the future's brotherhood of man... Eliminating Windows was like surgically-removing a vile attacking evil little demon off my back, what was clawing and biting at my flesh...

I have a box full of 4-gig hd's ... Is there a way to install a complete U-804 to a 4-gig hd?..

I wonders which Ubuntu will be called "Dragon"..? Maybe Ubuntu-1000..?

One of the funniest new Ubuntu user testimonies I've ever heard. :lolflag:

4GB seems a bit small to install Ubuntu. Xubuntu would be better. cf: https://help.ubuntu.com/community/Installation/SystemRequirements

Or use one of the small distros like http://www.puppylinux.org/ or http://damnsmalllinux.org/ (50MB) Those are rather for small USB keys.

DonaldJ said: "spend a year or two studying how to harden your system and what tools you need to use to protect it and see if in intruder is messing around trying to get in.

Your problem is not virus or rootkits. Your problem could be intruders.

What are Ubuntu's vulnerable areas, which educated intruders typically exploit..? I want to be sure that I've closed those doors...

What about visiting bad web-pages..? I clicked up an email link to a website, and got a pop-up warning me that it was a dangerous and banned web-site... If I went into a warez site, what damage would one expect them to do to the Ubuntu-hd..?

[...] In that same inquisitive mind, I would like to see the breakdown of what a warez website does to a visitor's PC.. as in how many electronic nasties does warez hit a visitor's computer's OS with..? Why do they do that..? What's in it for them to damage people's computers..?

I don't know what vulnerable areas from Ubuntu are most exploited, but I would guess it's the user.

Yes, the user. -Because if you download some program from the net and run it on your PC, it can do a lot of damage whether it's run as root or not. -If you enter your credit card number on some warez site, they get the data no matter what OS you're using.

Most warez sites trying to upload software to your PC will probably target windows users. However malicious sites don't need to upload software to get information from you.

Visiting warez sites is always dangerous. The safest solution I know of is using Firefox + noscript. But then you might not be able to view the site correctly.

Another solution is simply to use a Live-CD. Since it runs from the CD, it can't do a lot of damage to your system. To be even safer, unmount your partitions after booting into the Live-CD.

Why do they damage computers? I have no idea. Maybe because they can and to prove that they can. Maybe because they are anarchists. Maybe they enjoy making other people suffer and have a twisted idea of fun. Why do some people vandalize public utilities, burn cars, run amok, bomb buildings, ... ?

However, putting spyware, trojans, etc on PCs, sending spam, getting credit card numbers, personal info, etc are apparently quite efficient ways of making money. Maybe some virus creators are paid by antivirus companies. Who knows?

#35

Facetious Falcon said: Erm... why has noone figured out he's taking the piss. Stop replying with serious replies when it's blatantly obvious by his past 6 posts that he's taking the piss out of you all.

It's funny only because everyone is replying with serious posts. Read DonaldJs entire posts and you'll figure out why I'm saying this.

Hmm. You might be right. But then again it's also possible that he's in a hyper active mood right now, and not trying to take the piss. I find the "I just talked to Gates" remark an indication for that. ... YMMV

#36

One of the funniest new Ubuntu user testimonies I've ever heard.

Im in bed & usually out for the count by now,just as the wife was...shes none too pleased about my laughing waking her up.

EDIT: Or the typing.

#37

DonaldJ said: How do you know if your Ubuntu-804 install isn't being snooped in while you type and do things on the desktop..? Are there any tests you can run..?

If you used an ISO from the official sources your not being snooped; you could monitor network traffic if you desire.

Are there Ubuntu viruses..? None that I am aware of.

The firewall's settings says that your machine might not work if you accept the firewall's settings..? How do you know it won't kill the OS..? I leave the firewall at its default settings, I don't use a gui to further restrict or liberate things; in otherwords, I don't know.

How do you know if you aren't running the computer on root admin..? On a default install there is no root account, and unless you deliberately run something with sudo or gksudo or gksu from a command line or a run dialog, then you are not running as root nor admin.

How safe from bully-gorillas is a new install of Ubuntu..? I have never felt safe around gorillas, the bully type nor the generic type. Bottom line is, if you are hanging out in the dangerous back alley's of the interwebs you should never consider yourself safe.

What are the ways a bully-gorilla can destroy Ubuntu..? If this question had an answer, then Canonical would issue a patch.

What is done to fully block them..? (besides pulling the power cord from the wall)... If this question had an answer, then Canonical would issue a patch.

Can bullies install root-kits in Ubuntu without you knowing it..? Anything is possible, you have to determine probability based upon the trust you give to said "bully-gorilla".

Are there keyloggers that work in Ubuntu..? Yes. Why you would install one is your own business.

What are the common target areas of the Ubuntu OS that Ubuntu destroyers generally target..? Is there software that protects those vulnerable soft underbellies, and plugs any holes..? Social viruses, that is to say, getting you to run commands under the pretense of help, when in fact it will destroy your install. The only known cure for ignorance is knowledge; unfortunately in my case, knowledge has come at a high price occasionally, your mileage may vary depending on the amount of knowledge you come into a given situation with.

Is there a website that you can log into, to test your PC's Ubuntu OS strengths and weaknesses in its security structure..? I don't know as I've never needed one (my logic is not pure /shrug)

What does Window's Natas-bug do to Ubuntu..?It does nothing to ubuntu; however it may fudge up a wine or virtual box setup.

#38

Facetious Falcon said: Erm... why has noone figured out he's taking the piss. Stop replying with serious replies when it's blatantly obvious by his past 6 posts that he's taking the piss out of you all.

It's funny only because everyone is replying with serious posts. Read DonaldJs entire posts and you'll figure out why I'm saying this.

I think, if he is not yanking our collective chain, that his main problem was he was running a pirated version of Windoze and trying to hide it. I would bet that one of his "procedures" to bypass the windows anti priracy bolcks did not work as well as he thought. Then every time he tried to run, within a few minutes he was detected and shut down.

#39

Facetious Falcon said: Erm... why has noone figured out he's taking the piss. Stop replying with serious replies when it's blatantly obvious by his past 6 posts that he's taking the piss out of you all.

It's funny only because everyone is replying with serious posts. Read now DonaldJs entire posts and you'll figure out why I'm saying this.

I am serious hun... I senses you have a migraine, because you've been reading my extreme anti-religious posts in female first, as "cosmicb", and you want to get into a flame war with me... Be my guest, in female first, and show me all the religious-hate you've got if you must, but not here hun... This is a computer forum where the best of the best meet and share intelligence and intellect and keen advice...

I'm getting a lot of serious good replies to my questions from these good folks here... I've learned a lot from these good people who've posted in this thread.. and others will learn too...

It's legal to have a little fun while you're learning hard to learn stuff about a new computer operating-system... Take a pill, have a little nappy, and a warm fresh bottle, and after you wake refresshed, enter the forum and share what you know, if you know anything pertaining to the topic, "How Secure is Ubuntu..?"... If you don't, then please move-on and find a thread that does itnerest you... But this isn't a good place to defend your belief structure hun.. nor a place to try to start a flame war... For a good flame war try "michael's flamewarriors".. and search for "CB"...

And in response to your "pissing" comment.. I pee only in a toilet hun...

Thanks to those who have provided so much important Ubuntu data... In just a day , I've learned that Ubuntu is a very secure OS, and I've learned some ways to make it even more secure.. and how to defeat a few minor-glitches I've run into...

#40

Ok this thread is getting steered in the wrong direction. Lets stay on topic. :)

#41

Facetious Falcon said: Erm... why has noone figured out he's taking the piss. Stop replying with serious replies when it's blatantly obvious by his past 6 posts that he's taking the piss out of you all.

It's funny only because everyone is replying with serious posts. Read now DonaldJs entire posts and you'll figure out why I'm saying this.

I am serious hun... I senses you have a migraine, because you've been reading my extreme anti-religious posts in female first, as "cosmicb", and you want to get into a flame war with me... Be my guest, in female first, and show me all the religious-hate you've got if you must, but not here hun... This is a computer forum where the best of the best meet and share intelligence and intellect and keen advice...

I'm getting a lot of serious good replies to my questions from these good folks here... I've learned a lot from these good people who've posted in this thread.. and others will learn too...

It's legal to have a little fun while you're learning hard to learn stuff about a new computer operating-system... Take a pill, have a little nappy, and a warm fresh bottle, and after you wake refreshed, enter the forum and share what you know, if you know anything pertaining to the topic, "How Secure is Ubuntu..?"... If you don't, then please move-on and find a thread that does interest you... But this isn't a good place to defend your belief structure hun.. nor a place to try to start a flame war... For a good flame war try "michael's flamewarriors".. and search for "CB"...

And in response to your "pissing" comment.. I pee only in a toilet hun...

Thanks to those who have provided so much important Ubuntu data... In just a day , I've learned that Ubuntu is a very secure OS, and I've learned some ways to make it even more secure.. and how to defeat a few minor-glitches I've run into...

_________________________________

Don1500 said: I think, if he is not yanking our collective chain, that his main problem was he was running a pirated version of Windoze and trying to hide it. I would bet that one of his "procedures" to bypass the windows anti priracy bolcks did not work as well as he thought. Then every time he tried to run, within a few minutes he was detected and shut down.

I'm sure microsoft's updates security saw my copy of my registered W2000 as a pirate copy.. is why I got all my downloads from other than microsoft... I have this little habit ever since I accidentally scratched a new W98se install CD.. I always make a copy of a new software CD, and run only with the copies, and store the new CD's in a safe clean airtight dry box in the basement... Microsoft reads copied CD's as pirate.. so in a sense you are correct.. "I am using a pirate Windows CD", but I'm not... The original is registered to me...

Actually I found that no-matter whose PC I connected to microsoft for updates, it's OS would get trashed by microsoft... Seems they set my IP into a hate file... Not a problem.. I don't run Xpee, nor Vomista, nor Seven-poos... I run Ubuntu-Prime, hun.. but thanks anyway for the "psychic reading"...

#42

xpod said: Im in bed & usually out for the count by now,just as the wife was...shes none too pleased about my laughing waking her up..

I'm guilty to that too... Some of these silly things I write, just make me burst out laughing to tears... It's healthy to laugh... I hope I can make you laugh to tears... I make my lady laugh every day... Love and laughter go together like peas in a pod...

Please apologize to your wife for me, for being the cause of the reason she get untimely woke-up... I didn't mean to be bad...

#43

For one, Ubuntu does not give you access to root, and it is against forum policy for us to tell you how to do so. So you don't have to worry about accidentally being root. As for everything else, Ubuntu is secure for various reasons, so you don't need to worry. :)

#44

One of the funniest new Ubuntu user testimonies I've ever heard. :lolflag:

4GB seems a bit small to install Ubuntu. Xubuntu would be better. cf: ..

Thanks a bunch.. I'll try XUbuntu in a the 4-gigger... I'll get one of the many garage-sale towers from the shed, and I'll add a bunch of fake personal data, like fake bank cards with their fake pins, and fake corporate telephone numbers, and addresses, and a pile of fake credit card numbers, and show a fake bank-balance of a couple $million, and fake passwords to corporate computer systems... Then get on the Net and surf all the evil web-sites.. just to see what they do, and how fast they can destroy an XUbuntu OS... And to keep them busy trying to rob what I don't have... I think I have $13 in the real bank, in my real account.. and the other account, at royal bank, has had about 50 cents for about 5-years.. but I won't be providing any actual account numbers or data... HaH! when they first get my data they'll think they've found a criminal's goldmine...

#45

Sorry for the following, but I have a (common) genetic disorder that keeps me from letting non-sense go by unrefuted.

hyperdude111 said:

  1. NO There are no viruses like there are for windows. There is malfunctioning software which is coded poorly that may damage your system but these in linux are 99.9% accidental.Ridiculous. There ARE viruses for Linux. They just don't work.>

There are already cross-platform vulnerabilities that CAN affect linux boxes. Again, they don't generally work, and usually rely on social engineering to get anywhere.

  1. The firewall does not have the power to kill the os. Nor do u unless you are root.I guarantee you that iptables rules can be written that will render your shiny new Ubu O/S as useful as a rock. Most things in Linux/Unix are based on a client/server model, and as such, are controlled by iptables. Remember, there is no place like 127.0.0.1>
  2. There are no ubuntu root-kits.Hogwash. The term "rootkit" is one of few security issues that has it's origins in linux/Unix. Windows never got a rootkit until YEARS after the first rootkit was installed on a *nix system.>
  3. There are no websites that offer you a security check.Wow. You sure know a lot. To know slightly less, see www.grc.com >
  4. No windows bug will EVER effect ubuntu as they are different systems.

All that being said. I use linux because I got tired of fighting (and LOSING) the security battle with "Windoesn't". Ten years ago! Haven't had an issue since.

#46

Please apologize to your wife for me, for being the cause of the reason she get untimely woke-up... I didn't mean to be bad..

Dont worry about it,she`s used of me waking her up in the wee small hours for a bit of a laugh;)

4GB seems a bit small to install Ubuntu.

Xubuntu would be better.

My first ever Ubuntu(Dapper) install went on a tiny 3.2G hard drive i had spare for fear of damaging the XP install i had on the main drive. That was nearly 3 years ago now so i dont think i`d get away with it now.Besides,after a few days of updating the little space i did have vanished rapidly..... Then again,so did Windows from the main 40G i had so space was was never really an issue one week in.

#47

KIAaze said: One of the funniest new Ubuntu user testimonies I've ever heard. :lolflag:

<snip>

Though I'm sure it wasn't intended that way, and a lot of good security stuff has been posted, I have to agree with you. This whole thread is priceless.

:)

#48

Moved to Recurring Discussions.

#49

Like in Windows.. and with Linux, as I've just discovered, I find my best best last-ditch security option is to format the hd, and reload the system, the moment it twitches wrong.. like how I've run SeaMonkey since it happened... The moment it did something goofy, I uninstalled it, and reinstalled it...

I like this uninstall/reinstall MO and cure to diseased operating systems... Is there a way to make a bootable image CD of your loaded & tweaked Ubuntu OS?.. The OS twitches wrong, you format it, plug-in the image CD, slap the mouse a few times, take a break, and return to a freshly installed system, just like it was when you created it...

I maintain a hub of four flashes to save my work on as I do it, so whenever the Compaq's system needs be flushed down the toilet, I need only to save SeaMonkey's bookmarks on the SeaMonkey-flash, reboot with the install disk, smack the mouse.. and move to the Dell in the living-room, dragging the hub by its usb-tail...

#50

Frak said: For one, Ubuntu does not give you access to root, and it is against forum policy for us to tell you how to do so. So you don't have to worry about accidentally being root. As for everything else, Ubuntu is secure for various reasons, so you don't need to worry. :)

I don't recommend this kind of attitude. Security (on any OS) ultimately lies with you, the user.

#51

I loaded three hd's with Ubuntu... The 35-gig drive I can't get parts of the file browser to get out of root... I think it happened when I uninstalled Gimp, and installed PhotoPlus8 with Wine, then tried to install WinWall with Wine.. then the big doodoo hit the Ubuntu fan... So for this next install, I'll try a dual boot with W2000 and U804.. to see if it can stand-up to my particular brand of OS-terrorism... Sometimes I can kill a Windows OS in just minutes, trying new-things out... It's one of the ways I have fun...

#52

DonaldJ said: I loaded three hd's with Ubuntu... The 35-gig drive I can't get parts of the file browser to get out of root... I think it happened when I uninstalled Gimp, and installed PhotoPlus8 with Wine, then tried to install WinWall with Wine.. then the big doodoo hit the Ubuntu fan... So for this next install, I'll try a dual boot with W2000 and U804.. to see if it can stand-up to my particular brand of OS-terrorism... Sometimes I can kill a Windows OS in just minutes, trying new-things out... It's one of the ways I have fun...

Yeh if you remove gimp it takes the ubuntu desktop package with it. So it might be the root of some of your issues, next time keep gimp even if you wont use it that often.

#53

The problem I was trying to cure, was Gimp's file browser came up in PhotoPlus8 after a few minutes running PP8.. so I killed Gimp.. oops!..

It's Gimp's file browser I don't like about Gimp... It's so uni and slowwww, all around "the shids".. Not like PP8's file browser, which is quick like lightning...

_____________________________________________________________

So, if I set "sudo rm -rf" somewhere in the keys, will it format the hd..?

#54

I'm scrolling down the stuff in file browser, and I notice there's a "logos file... Orange and yellow are my least liked colors , and it's always on the screen, from boot, to the top of the desktop... I hates yellow!.. Can I delete the logos from that logo file without damaging the OS?..

Can I set a pix of choice in the login page?..

#55

I don't understand how a thread by someone who is most likely just screwing with everyone gets more thorough responses than a serious thread where someone has a real problem. Even if this guy isn't just messing around they are very lazy, it doesn't take that much effort to read up on the fundamentals of *nix. It also sounds like they kept installing Trojans on their windows install and took this as being the evil corporations out to get them.

#56

madverb said: I don't understand how a thread by someone who is most likely just screwing with everyone gets more thorough responses than a serious thread where someone has a real problem.

That's a very hasty conclusion. There's a lot of serious questions on this forum, and not every question can be properly answered by just anyone. Some questions are waiting for good answers from much more experienced users, and sometimes there are unanswered question, that's what the unanswered-questions-team is for.

Even if this guy isn't just messing around they are very lazy, it doesn't take that much effort to read up on the fundamentals of *nix. It also sounds like they kept installing Trojans on their windows install and took this as being the evil corporations out to get them.

You are keeping this thread alive like this ;-)

#57

Are there Ubuntu viruses..? No

The firewall's settings says that your machine might not work if you accept the firewall's settings..? How do you know it won't kill the OS..? You don't need a firewall, Ubuntu comes with iptables configured correctly for home users.

How do you know if you aren't running the computer on root admin..? Open a terminal and type

who

If you see "root" anywhere, that's how you would know.

How safe from bully-gorillas is a new install of Ubuntu..? I don't know what you mean with bully-gorillas.

If you mean from potential hackers or somethings, it's safe.

Update you system on a regular basis, leave the iptables setting alone, only download stuff from trusted sources.

What are the ways a bully-gorilla can destroy Ubuntu..? Without root access, not much.

If someone has physical access to your system, it's pretty easy.

Can bullies install root-kits in Ubuntu without you knowing it..?

If they are able to hack your system, yes.

http://linuxhelp.blogspot.com/2006/12/various-ways-of-detecting-rootkits-in.html

Are there keyloggers that work in Ubuntu..?

I suppose.

#58

DonaldJ said: I had a little argument with Gates and with the creators of Storm and Produkey... And my Routered, AVS'd, Firewalled, W2000, got infiltrated right through all that security like it wasn't even there... The bugger, whomever it was, did things on my desktop that I can't do on my desktop, and trashed the PC's OS four times in a week... I must have really upset the monsters... The last time it destroyed the OS, I was writing a note to the one who was snooping in my machine... The moment I suggested he "Get Pullups!".. that very second the OS crashed permanent... Not a problem.. I maintained my backups, hourly, in a hub of four flash-drives.. When the OS got hit, I pulled the hub's wire from the tower...

Windows is Not safe.. is why I opted to give Ubuntu a try.. so I wouldn't be formating the hd so often... Four times in one week is a bit thick and much.. = "bully-gorilla"...

I'm asking questions to learn about this OS... And thanks to you bunch, I'm learning stuff about Ubuntu very fast... You don't get this treatment in Windows forums... In those Windows forums it's like they are waiting for victims to bash, to chew-up, and to spit out... I dislike the Windows scene... I used it, but I grinned and bared it, with lots of grains of salt, cuz it was all I had, all I knew about computers, along with this goofy iMac chunk o junk... I'd only go into Windows forums if I needed someone to try to pee on my head...

I still don't know how secure this Ubuntu is, but I'm beginning to learn about it... So far it hasn't been attacked and damaged... That's a good thing...

But there's one wee tiny thing I can't figure out..? When I decided to try Ubuntu, I couldn't get the 804 download to start.. And four times in a row, the moment I clicked to download Ubuntu 710 image CD, my W2000 PC crashed... So I pulled the hd, and installed another hd, and managed to download Ubuntu, and make the CD...

What could or would crash the PC the moment I clicked to download Ubuntu..?

I have enemies... I've been bitching to all the world's great authorities, that they should wake-up, and stop destroying the planet for money.. and some of them are defending their damaging the planet for money... They sometimes hit my PC with their expert computer guys... I've had to format-C about 200-times in five years... Not a prob!.. I'm getting good at formating and installing.. and when the big shots slam a computer's OS, it's sort of a "treat" to see how they do it... and it allows me the op to test my skills again st their bombs... But the six-hour install isn't fun... But that's all I get with Windows.. is I'm forever installing it... I only hope that the mindless bully-gorillas don't run Linux, and if they do, that there are ways to secure Linux from their excremental-class personalities...

If you are willing to learn more about Linux (Ubuntu) I can highly suggest these tutorials:

http://www.linux.org/lessons

Very helpful, it will teach you pretty much everything you want to know on Linux and it's security, it's workings, ...

#59

I'm reading a few irate members claim I'm "screwing with you"...

I'm just trying to make sense of Linux... I've been using Linux for about a week.. I have a lot of questions which I haven't been able to find the answers to in the forums and in web searches...

I may be a little paranoid.. that's because all I've ever known in my life has been being bullied.. since I can remember, like when I was 2, my old-man picked me up by an arm and slugged my stomach as hard as he could several times.. While he was, I recall thinking, "I hope he doesn't damage this tiny body".. and before that at a few months old someone put tape over my mouth to silence my crying, unawares that the cold I had had fully blocked my nose.. probably him... All I've ever known is being bullied... except yesterday... I stayed home yesterday...

My experiences on the Internet has been a lot of jerks destroying my computers operating systems... Some jerk even found a way to off flash my machine's bios, destroying the tower, three times in a row...

I'm fed-up with being bullied, and now I'm fighting back as hard as I can.. even if it means my opponent's untimely death... I don't care anymore about people's morals coatings.. and "forgive & forget" isn't part of my equation anymore...

I stumbled into a lot of new thought processing that no one has ever touched... In it I found 14 untapped sciences, and 1400 unknown technologies... The first one is liquid-electricity engines... I asked the world to assist me with a lab, so I could build some it for them... All I get is flames from insane people, and corporate and federal intel remote viewers trying to invade my mind as I sleep, to steal scientific data that they couldn't even begin to grasp, them being mindless apes.. They attack almost daily, but they are unaware that I have the so-called "cosmic sword", and know how to use it... I cut them on approach... That cut tags them as dragon-kibbles, It tags them to you creature's precious insane hell anomaly.. Stealing is Wrong! Learn That! and Grow-up!.. I call those mind-burglars "Monkeys"... I've killed a few using magic and sorcery.. A few I've hit so hard that I pushed them nutcases into mental institutions, by ripping-out their mind' cosmic connections... I don't want to hurt life.. but they want to harm me.. they force me to defend myself with all I am... Their persistent attacks only make me stronger and meaner... I just want to secure a computer's OS strong enough so I don't need to fight the AH's in it too... All I'm asking is: "How safe is Ubuntu..?" What part of "how safe is Ubuntu" can you not understand?.. Hell! even when I was trying to download the Ubuntu image CD, my PC's OS was crashed moments after I started the downloads, four times in succession, till I changed the hd... Seems the AH's didn't want me to go Linux...

This series of blog posts might help you grasp where I'm coming from.. and where you are going to..

http://www.phxnews.com/fullstory.php?article=33523 http://www.phxnews.com/user.php?op=view&mname=cosmicbrat

I like Linux.. it seem it doesn't get damaged so easily, by the monkey-class and rectum-class humans, like Windows does...

They still attack my PC's, still unawares that I never put any new science in my connected computers... And when they don't find anything in my Internet PC's they trash the OS's in spite... I'm getting good at reloading...

How can I make Ubuntu secure from american intel-goonies..?

#60

DonaldJ said: I'm reading a few irate members claim I'm "screwing with you"...

I may be a little paranoid.. that's because all I've ever known in my life has been being bullied.. since I can remember, like when I was 2, my old-man picked me up by an arm and slugged my stomach as hard as he could several times.. While he was, I recall thinking, "I hope he doesn't damage this tiny body".. and before that at a few months old someone put tape over my mouth to silence my crying, unawares that the cold I had had fully blocked my nose.. probably him... All I've ever known is being bullied... except yesterday... I stayed home yesterday...

My experiences on the Internet has been a lot of jerks destroying my computers operating systems... Some jerk even found a way to off flash my machine's bios, destroying the tower, three times in a row...

I'm fed-up with being bullied, and now I'm fighting back as hard as I can.. even if it means my opponent's untimely death... I don't care anymore about people's morals coatings.. and "forgive & forget" isn't part of my equation anymore...

I stumbled into a lot of new thought processing that no one has ever touched... In it I found 14 untapped sciences, and 1400 unknown technologies... The first one is liquid-electricity engines... I asked the world to assist me with a lab, so I could build some it for them... All I get is flames from insane people, and corporate and federal intel remote viewers trying to invade my mind as I sleep, to steal scientific data that they couldn't even begin to grasp, them being mindless apes.. They attack almost daily, but they are unaware that I have the so-called "cosmic sword", and know how to use it... I cut them on approach... That cut tags them as dragon-kibbles, It tags them to you creature's precious insane hell anomaly.. Stealing is Wrong! Learn That! and Grow-up!.. I call those mind-burglars "Monkeys"... I've killed a few using magic and sorcery.. A few I've hit so hard that I pushed them nutcases into mental institutions, by ripping-out their mind' cosmic connections... I don't want to hurt life.. but they want to harm me.. they force me to defend myself with all I am... Their persistent attacks only make me stronger and meaner...

These quotes make user concern. This is not the place IMO.

#61

It's the only thing I figured might stop the "screwing" claims...

#62

Closed for review.