Am I secure

Quick to answer questions about finding your way around Linux Mint as a new user.
Forum rules
There are no such things as "stupid" questions. However if you think your question is a bit stupid, then this is the right place for you to post it. Stick to easy to-the-point questions that you feel people can answer fast. For long and complicated questions use the other forums in the support section.
Before you post read how to get help. Topics in this forum are automatically closed 6 months after creation.
Locked
copperblue

Am I secure

Post by copperblue »

Hi, I'm new to Linux Mint and I'm using Maya and think it's excellent. My one concern is that I'm not using an anti-virus and when using Windows when I have Sandboxie which gives me a huge layer of protection. How much of a risk am I at and what can I do to make myself more secure. I tend to use the internet mainly for streaming films and videos.
Last edited by LockBot on Wed Dec 28, 2022 7:16 am, edited 1 time in total.
Reason: Topic automatically closed 6 months after creation. New replies are no longer allowed.
DrHu

Re: Am I secure

Post by DrHu »

OK, so that program is a sandbox application

A linux sandbox would be like this
https://www.linux.com/learn/tutorials/3 ... th-selinux

Sandbox apps..
https://en.wikipedia.org/wiki/Sandbox_( ... _security)
  • Rule-based Execution gives users full control over what processes are started, spawned (by other applications), or allowed to inject code into other apps and have access to the net. It also can control file/registry security (what programs can read and write to the file system/registry). In such an environment, viruses and trojans have fewer opportunities of infecting a computer. The SELinux and Apparmor security frameworks are two such implementations for Linux.
java, flash, and adobe or Ms Silverlight provide a sandbox environment for applications developed within those platforms' control..
--and of course a VM, such as virtualbox is already sandboxing your applications + the OS within the guest machine (guest OS) Linux + Linux (guest) or Linux + windows (guest)
User avatar
xenopeek
Level 25
Level 25
Posts: 29504
Joined: Wed Jul 06, 2011 3:58 am

Re: Am I secure

Post by xenopeek »

If you don't download and install programs randomly from the Internet, but use the Software Manager, you are not very likely to get a virus: http://www.howtogeek.com/135392/htg-exp ... en-you-do/. However, on the Internet you are still susceptible to web threats: http://en.wikipedia.org/wiki/Web_threat. Even if you use a sandbox! Because you as a human are the least secure thing to use to browse the Internet with :wink: You can be tricked and fooled by social engineering, phishing, spam, and other ways to get your personal information for some malicious use. A virus or other malware isn't always needed for that. If you are very concerned about that, you can look into add-ons for your browser like NoScript, which blocks a lot of web threats.

If you want a virus scanner, install clamtk. That is a free and open source virus scanner, though like all virus scanners for Linux you would use it mostly to catch Windows viruses so you don't pass these on to others through email attachments and such.
Image
copperblue

Re: Am I secure

Post by copperblue »

Thanks for your replies, DrHu and Xenopeek.

I want to get away from Windows in many ways because I'm sick of having to use excessive security measures just to feel safe and because MS Windows is so bloated and devours memory.

I guess what I should have asked is whether I'm just safe to use Mint. While appreciate there is a difference between an Apple Mac and Linux, I know Mac users who will download anything, go to any website and are completely fearless about ever getting their computer infected. While I intend to stick to the repositories and will use NoScript, I'm aware there's a Java exploit (I've disabled Java in Firefox) and that Linux can be vulnerable.
bb333

Re: Am I secure

Post by bb333 »

copperblue wrote:Thanks for your replies, DrHu and Xenopeek.

I want to get away from Windows in many ways because I'm sick of having to use excessive security measures just to feel safe and because MS Windows is so bloated and devours memory.

I guess what I should have asked is whether I'm just safe to use Mint. While appreciate there is a difference between an Apple Mac and Linux, I know Mac users who will download anything, go to any website and are completely fearless about ever getting their computer infected. While I intend to stick to the repositories and will use NoScript, I'm aware there's a Java exploit (I've disabled Java in Firefox) and that Linux can be vulnerable.
Yes, you are safe to just run mint, but:
  • stay on top of updates, specifically security
  • keep browsers updated
  • don't blindly run anything from a terminal requiring "sudo" or anything that requires your password (installing random .deb files you don't trust).
  • don't blindly add PPA and/or repos unless you trust them
The fact that you disabled java puts you ahead of most ubuntu users.
passerby

Re: Am I secure

Post by passerby »

Linux OSes in general are rather safe. As long as you follow bb333's guidelines I doubt you'll have any issues.
Most linux vulnerabilities I've seen in action stem from your browser, so by disabling java in ff and installing noscript you've already done well protecting yourself.
The rest is generally handled by your OS. Those little security updates the mint update icon keeps telling you about are important ;)
copperblue wrote:Thanks for your replies, DrHu and Xenopeek.
While appreciate there is a difference between an Apple Mac and Linux, I know Mac users who will download anything, go to any website and are completely fearless about ever getting their computer infected.
You might want to advise said Mac users. Such misconceptions have left multitudes of users in despair.
Generally safer than Windows, sure, but the "Mac's don't get viruses" mentality is a good way to get yourself infected.
homerscousin

Re: Am I secure

Post by homerscousin »

There is also the built in Linux firewall. UFW--Uncomplicated Fire Wall. Pretty sure it is disabled by default in all Mints. I had to sudo ufw enable at a terminal.
User avatar
xenopeek
Level 25
Level 25
Posts: 29504
Joined: Wed Jul 06, 2011 3:58 am

Re: Am I secure

Post by xenopeek »

homerscousin wrote:There is also the built in Linux firewall. UFW--Uncomplicated Fire Wall. Pretty sure it is disabled by default in all Mints. I had to sudo ufw enable at a terminal.
True. I have some thoughts here on why it isn't enabled by default and what that means for your security: http://forums.linuxmint.com/viewtopic.p ... 92#p599112.
Image
User avatar
slipstick
Level 6
Level 6
Posts: 1071
Joined: Sun Oct 21, 2012 9:56 pm
Location: Somewhere on the /LL0 scale

Re: Am I secure

Post by slipstick »

I guess if you are worried that someone will plant a keylogger on your machine and steal your password for your bank or credit card, you could always boot with a live CD just for such financial transactions (don't do any other browsing), then reboot to your normal OS for casual web browsing. It is a bit of trouble, but if you only do this for really important (financial) sites, maybe worth the trouble it will save if someone steals your password and hacks your bank or credit card account.
In theory, theory and practice are the same. In practice, they ain't.
sunewbie

Re: Am I secure

Post by sunewbie »

slipstick wrote:I guess if you are worried that someone will plant a keylogger on your machine and steal your password for your bank or credit card, you could always boot with a live CD just for such financial transactions (don't do any other browsing), then reboot to your normal OS for casual web browsing. It is a bit of trouble, but if you only do this for really important (financial) sites, maybe worth the trouble it will save if someone steals your password and hacks your bank or credit card account.
I use Chromium Incognito window and mostly use virtual keyboard for online transactions :) As soon as you close window everything is wiped off ;)

If you regularly shop, some sites have 'wallet' feature like infibeam and flipkart. You can transfer payment once, which is like an advance payment. Later you can buy anything from that site until you have exhausted your advance. So you are just risking once.

As others have said Linux is in general safer than windows and most do not use anti-virus. Though there are anti-virus available for linux like clem AV, they do not work like they work in windows. You will have to push them to scan. They do not keep sniffing each and everything every moment :)
Locked

Return to “Beginner Questions”