Linux Nerds: In here :)

[Horny Joe]

I have (again) said my Good bye to windows and went for a clean install of Ubuntu on my laptop. This is my main machine for now until I buy a new Mac ;) I do not have anything illegal on my machine, but I have a lot of private and very sensitive documents that I don't want anyone to get access to. I use TrueCrypt to protect them.

I am a bit paranoid these days and want to secure myself. Can you recommend some programs that will detect if anyone tries to get access to my laptop and also a firewall to keep them outside. If you have any other "must have" security programs, please share!

There are other programs I need advices with as well, but security first

Thanks!

[Randy West]

Watch your back, they are out for you!

[signupdamnit]

You probably already know this but you can use Truecrypt on Linux. Ubuntu also has a fairly easy option to encrypt your /home.

[chronig]

CP ALERT. Someone report him

[myneid]

there are a ton of different intrusion detection softwares out there that you can grab

[Randy West]

CP ALERT. Someone report him

What? Reported to the admins for seriously false accusations

[Horny Joe]

CP ALERT. Someone report him

Careful now

[Horny Joe]

You probably already know this but you can use Truecrypt on Linux. Ubuntu also has a fairly easy option to encrypt your /home.

Yes, I just installed TrueCrypt now, thanks!

Just to avoid more stupidity like chronig had to come with... I have tons of medical documents, journals, studies and so regarding myself and other mil. veterans, that can't risk any outsiders reading. They trust me to help them and they trust that I keep what I get safe. Simple as that, so no need for speculations.

[fuzebox]

You're already 100x more secure running a default Ubuntu install than you were with Windows

[Horny Joe]

there are a ton of different intrusion detection softwares out there that you can grab

Searched for "intrusion detection software" and installed "Snort". Will test it! Thanks!

What? Reported to the admins for seriously false accusations

Thanks!

You're already 100x more secure running a default Ubuntu install than you were with Windows

Yeah, I think you are right about that!

[MrDaniel]

I am a bit paranoid these days and want to secure myself. Can you recommend some programs that will detect if anyone tries to get access to my laptop and also a firewall to keep them outside. If you have any other "must have" security programs, please share!

Depending on distro you may already have firewall installed, in Linux iptables is often used, check to see if that is installed and turned on. If not read in your distro howto how to turn it on!

Snort as mentioned is nice to use, but can produce a lot of information in an non-firewalled environment. Also keep an eye on your system log files if you are paranoid, /var/log is often the place to look in.

//Daniel

[Barry-xlovecam]

$ iptables

for the manual:

$ man iptables

q exits the man

you can configure your own firewall rules

As far as IDS (Intrusion Detection Systems) ? they are out there for LINUX.

Tripwire is supposed to be a good one but the set up is very technical

for a virtual encrypted disk;

you should get root first:
open a terminal ...

$ sudo -i

Password:

to open:

$ encfs ~/encrypted ~/visible

to close:

$ fusermount -u ~/visible

you will get an apt-get reply to install encfs

install and follow the screen prompts

What this does is make a encrypted "stash bag" you can open with the above terminal commands.

I am not sure if there might be some conflict with TrueCrypt so backup you stuff unencrypted to a drive or portable storage device; CD, DVD, Flash Drive, etc

Ubuntu / Debian rocks (no more WinBloz)!

sudo apt-get install scopy

nice back up program, nightly backups w/an easy to use GUI Interface.

[Horny Joe]

Depending on distro you may already have firewall installed, in Linux iptables is often used, check to see if that is installed and turned on. If not read in your distro howto how to turn it on!

Snort as mentioned is nice to use, but can produce a lot of information in an non-firewalled environment. Also keep an eye on your system log files if you are paranoid, /var/log is often the place to look in.

//Daniel

I installed Ubuntu 10.10. As I see iptables is already installed, but I also installed "Firestarter". I am not so savvy when it comes to things like this, so I will try them both and see

Making a note of /var/log

Thanks!

[BestXXXPorn]

$ iptables

for the manual:

$ man iptables

q exits the man

you can configure your own firewall rules

As far as IDS (Intrusion Detection Systems) — they are out there for LINUX.

Tripwire is supposed to be a good one but the set up is very technical

for a virtual encrypted disk;

you should get root first:
open a terminal ...

$ sudo -i

Password:

to open:

$ encfs ~/encrypted ~/visible

to close:

$ fusermount -u ~/visible

you will get an apt-get reply to install encfs

install and follow the screen prompts

What this does is make a encrypted "stash bag" you can open with the above terminal commands.

I am not sure if there might be some conflict with TrueCrypt so backup you stuff unencrypted to a drive or portable storage device; CD, DVD, Flash Drive, etc

Ubuntu / Debian rocks (no more WinBloz)!

sudo apt-get install scopy

nice back up program, nightly backups w/an easy to use GUI Interface.

That's exactly what I was going to post however I will say this...

I would never use Linux as a Desktop but I run it on every server...

and

Security has nothing to do with the operating system and more about how you use it and secure it. Windows is every bit as secure as Linux if you know how to harden it. In fact, I would say that default installation... Windows is much more secure. Additionally, Windows patches all of the holes almost immediately and posts easy to get (and even automated) updates. You will not find the case to be true in Linux, just wait till you upgrade something that breaks a package dependency...

Now that you've moved away from Windows and onto Linux, you should check for security patches regularly to all of the core services that make Linux great

If you're worried about storing documents and encrypting them, the OS has nothing to do with it. You should be encrypting the files themselves...

[Horny Joe]

Barry-xlovecam - Good stuff!! Thanks!

[grumpy]

You probably already know this but you can use Truecrypt on Linux. Ubuntu also has a fairly easy option to encrypt your /home.

read, read and read

[oscer]

Good luck i got a friend that has used linux for his main computer for 8 years

[Horny Joe]

Good luck i got a friend that has used linux for his main computer for 8 years

I have been on and off Linux for the last few years, never really learned it. But, I wanted to learn
Just found that everything was easier with Windows, especially after Win7. But, my laptop is getting old AND slow. I also got some crap on it today - and I was sure that I was pretty good protected. Used NOD32, Spybot S&D, Firewall and then some.

I have tried to use Ubuntu as main OS before but found it... I don't know - depressing But the latest version seems very nice. And it is fast as hell!

I think I have gotten it all set up now. Just installed VirtualBox as well, just to be able to run NiftyStats

[Barry-xlovecam]

[I have] tried to use Ubuntu as main OS before but found it... I don't know - depressing But the latest version seems very nice. And it is fast as hell! ...

The 10.x Ubuntu has a very usable desktop I think ...

If you need a good spreadsheet that will save the work in lots of formats;

$ sudo apt-get install gnumeric

This program will even read old corel quatro.

A lot of Widows applications will run under WINE update the WINE and install WINE tricks.

The nice thing is that LINUX will self update without a new format and no license fee to Microsoft. It's not the license fee really ? it's all the data that has to be backed off and the programs that you have to reinstall ? time is money ... With Ubuntu and other flavors of LINUX you can update to the most current system available.

[Maxi]

Linux desktops are lame. If you want a secure desktop run a Linux gateway that you use to connect to the net and use Nat to give internet access to your windows desktop.

This way you can use iptables on the gateway and your win PC is inaccessible from the outside and u get the best of both worlds.

[Horny Joe]

About WINE, have anyone been able to run NiftyStats via WINE? I tried before, but no luck...

[Maxi]

About WINE, have anyone been able to run NiftyStats via WINE? I tried before, but no luck...

Yea I think a lot of people have gone through the phase of using Linux as their main desktop, I did too, but you're always going to find programs that you need that just won't work on Linux, and you'll spend hours trying to get some things to work it gets old quick..

When you get over your Linux phase, do what I said earlier and use a Linux box as a gateway PC, you'll get all the benefits & security of Linux while using a windows desktop. I've been using a crappy Pentium 3 as my Linux gateway since 2003 and it's been up almost constantly for the last 7 years with no problems.