privacy question regarding applications

[randy_amendolara]

Hello everyone,

This is prob a noob question, and I don't know if I'm posting this in the correct subforum.
I have been using different distros for years as secondary boot next to windows and the last year linux only; so I am trying to make more sense out of it and learn a bit more now and then. I've been quite aware about the apps I install (decentralised mostly) when it comes to privacy. BUT besides doing that I was wondering: how does the whole data sending work...
I am concerned about my data, I don't do illegal stuff but it's out of principle and also it's just fun to learn how it all works..

So I get that linux Mint does not send personal info to their servers like Windows does, but I only know this because they say so... Is there a way to really know(check via terminal/other program)?
Besides that, my major concern is (third party) apps: If I for example was a bit off one day and installed an app like Facebook, or some app where I did not check the terms enough; or the app developers are simply lying about the policy... Is there a way to make all data go trough some control point for me as a user/programmer, I don't care if it's hard: can it be done? Is there a way to check this outgoing data and better yet block certain data from being sent (I know some apps might stop working, that is not my concern for now: if an app sends private data or installs cookies I want to know what kind and will delete if I don't agree)?

I know how to do this in a browser (vpn, use brave/hardened firefox/...) and a lot of the websites don't work on my pc and I don't care. so is there an equivalent for applications/linux in general??

ps:
viewtopic.php?f=61&t=341366&sid=d3158fa ... cb818603e4
I found this question and it relates to mine a bit but does not answer it, they talk about encryption.. this is to vague for me. But maybe a MOD wants to put the topics together if needed... I don't know if there is another post that really answers my question; sorry if there is and I did not search enough..

[Moonstone Man]

Is there a way to really know(check via terminal/other program)?

Yes. Read the source code.

I found this question and it relates to mine a bit but does not answer it, they talk about encryption.. this is to vague for me.

Of course it wasn't answered. Like your question, it's far too broad and requires a lot of research, which by the way, is what you ought to be doing instead of....

But maybe a MOD wants to put the topics together if needed...

... hoping someone will play the stool pigeon and do it all for you.

[AZgl1800]

IF,
you use Facebook, you need install the Facebook Container for Firefox.

it will block all websites from tracing you and reporting Facebook.
a good idea, even if you don't use Facebook.

This image is from this thread, note it states all is well.





I have seen it pop up and state it has blocked Facebook from getting data from websites that do not belong to Facebook and their cohorts.


Another very good Extension on Firefox ( and maybe other browsers is TRACE )

Note that Harbor Freight wants to know a lot about you.



.

[Pierre]

you can run your Web Browser(s) in an Sandbox / FireJail if you think that your privacy needs extra an step.


the LinuxMint System does ping the Google servers,:
- to see if there is an Active Internet Connection,
after which, it will then download any LinuxMint System Updates, from it's LinuxMint servers.

[Moem]

I found this question and it relates to mine a bit but does not answer it, they talk about encryption.. this is to vague for me. But maybe a MOD wants to put the topics together if needed...

No, we don't usually do that here. We much prefer separate topics for each question even if they are similar.

[randy_amendolara]

Is there a way to really know(check via terminal/other program)?

Yes. Read the source code.

I found this question and it relates to mine a bit but does not answer it, they talk about encryption.. this is to vague for me.

Of course it wasn't answered. Like your question, it's far too broad and requires a lot of research, which by the way, is what you ought to be doing instead of....

But maybe a MOD wants to put the topics together if needed...

... hoping someone will play the stool pigeon and do it all for you.

1: what part of the source code would tell me this? How does it look? What terminology can I use to look this up? I am telling you I don't have much experience so I can read a source code or look this up; but the part that relates to my question seems to be hard to find.

2: I get that its a broad question, but it is understandable no? Your first answer was an answer that was usefull and I believe this forum is meant to help anyone, also beginners no? I've been struggling with this question for a year now and I'm just understanding the terminal a bit better;: before I used to look everything up and copy paste.. Just to give an idea how many hours I spent on Duckduckgo for stuff that for others seemed to be easy. I was a simple Windows and thats why I asked this on a Mint forum..

3: No, I believe my question is new because its a different question from the link; I posted this to be helpfull if it was seen as comparable: better left it out I guess

[randy_amendolara]

IF,
you use Facebook, you need install the Facebook Container for Firefox.

it will block all websites from tracing you and reporting Facebook.
a good idea, even if you don't use Facebook.

This image is from this thread, note it states all is well.





I have seen it pop up and state it has blocked Facebook from getting data from websites that do not belong to Facebook and their cohorts.


Another very good Extension on Firefox ( and maybe other browsers is TRACE )

Note that Harbor Freight wants to know a lot about you.



.

I don't use FB, it was an example. The question related to applications in general: not browsing

[randy_amendolara]

you can run your Web Browser(s) in an Sandbox / FireJail if you think that your privacy needs extra an step.


the LinuxMint System does ping the Google servers,:
- to see if there is an Active Internet Connection,
after which, it will then download any LinuxMint System Updates, from it's LinuxMint servers.

I dont have issues with the browser but thank you, the question related to applications/programs installed on Linux...

I don't use google; but you are saying Mint does for the updates? I guess it does not send anything other than my ip? Or is there a way to check this? thank you for this answer

[Moonstone Man]

2: I get that its a broad question, but it is understandable no?

No. You are asking for highly specialised knowledge in order to be educated, and that is simply impossible to do on a web forum like this. Consequently you will never get a complete answer, only hints and tips. This is a support forum, not an educational institution even though we do try to educate wherever it's feasible, which is why you've received ad hoc tips and not the complete explanation you are looking for.

We are primarily focussed on fixing issues and answering general questions. If you want more than you've found then you either need to expand your research by using different search terms, visit a library, learn by doing, and/or enrol in appropriate courses. While we're trying to educate you to the level you desire, other people with real system issues will go unattended. You are simply asking too much, at least in one post. The moderator, moem, already advised you to split your questions up.

[randy_amendolara]

2: I get that its a broad question, but it is understandable no?

No. You are asking for highly specialised knowledge in order to be educated, and that is simply impossible to do on a web forum like this. Consequently you will never get a complete answer, only hints and tips. This is a support forum, not an educational institution even though we do try to educate wherever it's feasible, which is why you've received ad hoc tips and not the complete explanation you are looking for.

We are primarily focussed on fixing issues and answering general questions. If you want more than you've found then you either need to expand your research by using different search terms, visit a library, learn by doing, and/or enrol in appropriate courses. While we're trying to educate you to the level you desire, other people with real system issues will go unattended. You are simply asking too much, at least in one post. The moderator, moem, already advised you to split your questions up.

Ok, I understand that.. I followed some online courses for linux beginners and atm am following a Python course and so I understand what source code is and how one might see this stuff trough source code. And I understand that this takes time.
You are right to point to the fact that this is not an educational forum.
I was just wondering if there was maybe an application or a set of apps that monitor this stuff: or indeed if someone here could point me to specific terms that I could do research about. I could hardly believe that the only way to check if a developer was lying was if you are a developer yourself(same skills), and that there was no way for the common user to check this. I guess there is not.. And I guess it's very hard/impossible for reasons I don't yet understand to make such a program outside the browser..

To help understand why people like me ask this question: It's strange for a newbie, because in any browser you can install extensions or block stuff through the options menu (like cookies/automatic signature sending etc etc -> 'hardened firefox tutorials' are easy to find and simple step by step guides)... and so I guessed there must be an equivalent that does this for apps in general.
I get that for you this might be a completely different thing and a ridiculous question, for a newbie it's not.
ps: excuse my bad english.

Greetings and thank you for your time.

[rene]

We recently had a thread in which newlyminted7 pointed out "OpenSnitch", an application-level firewall that could at least be useful in the sense of providing you more insight into who and what is going on network-wise. Note; this while I personally count as someone who feels that any sort of machine-local firewall on a Linux desktop system ends up highly irrelevant in a security context: as an educational tool it's probably quite useful: viewtopic.php?p=1990551#p1990551

[randy_amendolara]

We recently had a thread in which newlyminted7 pointed out "OpenSnitch", an application-level firewall that could at least be useful in the sense of providing you more insight into who and what is going on network-wise. Note; this while I personally count as someone who feels that any sort of machine-local firewall on a Linux desktop system ends up highly irrelevant in a security context: as an educational tool it's probably quite useful: viewtopic.php?p=1990551#p1990551

Thank you very much! It is indeed meant for education, i am very happy with the switch I made to linux and I kind of understand why it's not very practical to use a firewall, but clearly I still don't get it This may help a lot.

[rene]

Note that you undoubtedly will find that many applications or parts of "the system" do call out, for example Update Manager, NTP, the Ubuntu "connectivity check", etc,, etc., but that most of it will be valid and by design, with only very few (that Ubuntu connectivity check among them) debatable. I.e., don't let OpenSnitch starttle you too much too quickly

[mikeflan]

I am concerned about my data

I'm going to assume you are not thinking that something is bundling up some of the files on your system and sending it to whoever. Because that is not a significant problem.

Is there a way to make all data go trough some control point for me as a user/programmer, I don't care if it's hard: can it be done?

I think the answer is yes, but perhaps not in a practical way. I think the content of what is being sent is not readily available. Mostly just how much is being sent, when it is sent, and who it is being sent to. That is my thinking anyway.

I don't recommend this since I don't think it is necessary, but you can dive into something like iproute if you want to. Do a search for packet sniffer.

[t42]

This tread and the thread Linux Privacy Manager is needed have different user accounts, one created on the day of opening the thread and the other one created 10 years ago but the have several things in common, one of which is "I am concerned about my data" and, may be, a way of staying on topic. Anyway, this phrase have assured me that the authors are not the same group of people "I found this question and it relates to mine a bit but does not answer it, they talk about encryption.. this is to vague for me."
I guess anyone trying to get real answers should stop gathering opinions and start to read logs of wireshark, packet sniffer, iproute, firewall etc., thousand lines of them.

[earnestbunbury]

Good question; I don't know why people answering are being such dicks. His question seems simple enough- how safe is Linux. There are programs for just about everything, and everyone says that they're 'open-sourced' and don't have viruses or trackers or spyware. But before Linux itself or any of the freeware programs that you can install are put up to download, are they checked? Can I write a Linux Mint program right now and code some sort of spyware into it, or does it have to go through some process first to double check it?

I get that you're telling him to learn to code (!) and then go through line by line to see if there's something he has to worry about, but really, it seems like he's just asking if it's safe. Is it? My version of Linux Mint is fantastic and I love it and despise Windows, but every once in awhile I'll start noticing my computer doing weird stuff, and I'll re-load Linux (just takes about five minutes) and everything goes back to normal. I looked up if there was antivirus software for Linux and the jist of the answers was, "You don't need it- it's open-sourced"! But does that mean I have to go through the code myself or does the Linux community check these things before putting programs on the software manager list?

Thanks in advance. Anyone that wants to leave a snide answer or say we should learn coding, please just move on. I think the answer should be nearer of one of two answers. YES, we check each program people write for spyware, viruses, etc. and routinely check them to see if any code has changed. Or NO, we don't check any of the programs that are posted on the software manager's downloads because that is simply too much trouble and you kind of have to download anything knowing that it could have been written by some hackers or sloppy coders. It's FREE, what do you want? Something along those lines.

[Moem]

really, it seems like he's just asking if it's safe. Is it?

You seem to think this is a simple question, but it's not. A simple answer wouldn't be right, and the right answer wouldn't be simple. I'm not qualified to give that right answer by the way. I would if I could.

But in case it helps:
If you or the OP would ask a slightly different question, namely:
Is Linux safe as compared to Windows?
... then most people would reply with a simple 'yes'.

And if the question is:
Do the programs that are offered in the Software Manager contain viruses or other malware?
... then I feel fairly confident in answering 'no'.

[rene]

Good question; I don't know why people answering are being such dicks.

Hey. I wasn't being a dick. But as to your specific questions: yes, the (normal) software distribution method on Linux through "repositories" introduces a trusted third-party in the middle whereas if you approach the problem from a Windows-standpoint nothing as such exists; the repository model is a very major difference as to catching malware or not. Of course, low market share meaning very significantly less malware targeting Linux existing in the first place is another very major one.

Together with the general user being generally safe enough behind his or her NAT-router and/or modem/router-based firewall without full-on malware this is to say that yes, there is a large difference on Linux. And not because anyone here is telling him to personally review anything but because we're telling him that there is a review process in place in the form of the repository-model of software distribution.

[t42]

His question seems simple enough- how safe is Linux.

Nothing like that. They ask for special tools and ways to do what they decide to do

I only know this because they say so... Is there a way to really know(check via terminal/other program)?
Besides that, my major concern is (third party) apps: If I for example was a bit off one day and installed an app like Facebook, or some app where I did not check the terms enough; or the app developers are simply lying about the policy... Is there a way to make all data go trough some control point for me as a user/programmer, I don't care if it's hard: can it be done? Is there a way to check this outgoing data and better yet block certain data from being sent (I know some apps might stop working, that is not my concern for now: if an app sends private data or installs cookies I want to know what kind and will delete if I don't agree)?