Just how secure is LM 18.x ..

Chat about anything related to Linux Mint
Post Reply
Spud1200
Level 2
Level 2
Posts: 67
Joined: Thu Mar 10, 2016 10:50 pm

Just how secure is LM 18.x ..

Post by Spud1200 » Sun May 13, 2018 12:45 am

Hey,

I'm just curious too know, how secure LM 18.x is. As a some what super user of mint but not actually being too write any custom Linux Script I'm curious if its that easy or just somewhat easy to be able get in too the OS.

As a general rule I follow I believe that if someone wants too be bad enough they will but I was thinking the other day just how secure is the LM.

With LM, you have the option too encrypt the disk and install the Boot Loader too another devise such as a thumb drive along with encryption the Home folder. I mean that’s pretty secure but as users and even for those who are at the opposite end of the spectrum and not really clued up how do we know the NSA or any sort of back door has not been put in too the OS.

I'm not a tin foil hatter but a major distribution like LM I'm just asking; how secure is it.

Do you gyes have any pro tips too locking down your system or even custom scripts for any one who mite interested.

Also what’s the deal with Anti Virus with Linux. Do you need Anti Virus with Mint.

Just curious too get some feed back.

Thanks.

User avatar
Moem
Level 15
Level 15
Posts: 5858
Joined: Tue Nov 17, 2015 9:14 am
Location: The Netherlands
Contact:

Re: Just how secure is LM 18.x ..

Post by Moem » Sun May 13, 2018 2:34 am

Are you asking about local threats or threats from the internet?
Spud1200 wrote:Also what’s the deal with Anti Virus with Linux. Do you need Anti Virus with Mint.
Most experienced users feel that you do not.

By the way, 'super user' means a user or account with elevated privileges. The word you're probably looking for is 'power user'.
Image

If your issue is solved, kindly indicate that by editing the first post in the topic, and adding [SOLVED] to the title. Thanks!

User avatar
michael louwe
Level 8
Level 8
Posts: 2229
Joined: Sun Sep 11, 2016 11:18 pm

Re: Just how secure is LM 18.x ..

Post by michael louwe » Sun May 13, 2018 8:14 am

@ Spud1200, .......
Spud1200 wrote:.
.
Hackers' viruses/malware need Admin or Root privileges to "infect/invade" an OS and do serious damage. LM, by default, is operated by the users in non-Root or non-Admin privilege mode = not susceptible to viruses/malware.

LM users can opt to operate in Root privilege mode but they should be careful, eg when downloading and installing 3rd-party apps/programs.

Hoser Rob
Level 11
Level 11
Posts: 3842
Joined: Sat Dec 15, 2012 8:57 am

Re: Just how secure is LM 18.x ..

Post by Hoser Rob » Sun May 13, 2018 9:31 am

You don;t need anti virus software in Mint, or Linux period. I know people who've been using Linux much longer than I have on their personal machines, some since it's inception. You had to compile and build the whole thing back then. ANd none of them has aver gotten a virus.

That's a pretty good statement on Linux security in general.

On a personal note, I've done some distro and DE hopping on my little netbook (which I don't actually need). Which means a lot of reinstalling (BTW I use a separate /home partition now).

A few times, after installing I forgot to enable the firewall. Once I didn't remember for a month. This is my machine that I use for schlepping around and it mostly gets used in public wifi hotspots like cafes.

Now, in Linux this isn't smart, I know, but in Windows it'd be insane. You'd get hacked in MILLISECONDS in an internet cafe using Windows without a firewall running.

Guess what? I've never gotten hacked.

User avatar
Pjotr
Level 20
Level 20
Posts: 10214
Joined: Mon Mar 07, 2011 10:18 am
Location: The Netherlands (Holland)
Contact:

Re: Just how secure is LM 18.x ..

Post by Pjotr » Sun May 13, 2018 10:07 am

You might find this article interesting, that I've written about security in Linux Mint:
https://sites.google.com/site/easylinux ... t/security
Tip: 10 things to do after installing Linux Mint 19 Tara
Keep your Linux Mint healthy: Avoid these 10 fatal mistakes
Twitter: twitter.com/easylinuxtips
All in all, horse sense simply makes sense.

User avatar
jimallyn
Level 18
Level 18
Posts: 8009
Joined: Thu Jun 05, 2014 7:34 pm
Location: Wenatchee, WA USA

Re: Just how secure is LM 18.x ..

Post by jimallyn » Sun May 13, 2018 12:28 pm

I have been using Linux since 2002. During that time, none of my Linux computers have ever been infected with any virus or malware, nor do I have any evidence that they have been subject to any unauthorized access. Nor has the computer of any Linux user I know of, which would take in a LOT of Linux users since I have been active on Linux forums since I started using Linux, and much of that time as a moderator or administrator. I have seen a few posts that say "I think I have a virus" or something along that line, but none of them turned out to be a virus at all. A recently joined forums users posted several times that he thought he had a virus; at least one of those times he mistook a feature of Linux Mint for a virus. Tinfoil hat type, I guess. Anyway, I would say that you're pretty secure running Mint, and that you do not need an antivirus program.
Image

“If the government were coming for your TVs and cars, then you'd be upset. But, as it is, they're only coming for your sons.” - Daniel Berrigan

User avatar
Fred Barclay
Level 12
Level 12
Posts: 4123
Joined: Sat Sep 13, 2014 11:12 am
Location: Bumping around in the bush

Re: Just how secure is LM 18.x ..

Post by Fred Barclay » Sun May 13, 2018 12:37 pm

Seeing as how you've got lots of helpful answers here, I've got to add a less-than-helpful one...
Image
Image
"Once you can accept the universe as matter expanding into nothing that is something, wearing stripes with plaid comes easy."
- Albert Einstein

User avatar
bob466
Level 4
Level 4
Posts: 230
Joined: Mon May 15, 2017 5:23 am
Location: Australia

Re: Just how secure is LM 18.x ..

Post by bob466 » Tue May 15, 2018 5:14 am

Solid as a rock...Anti-Virus software...what's that ? :lol: :lol:
Linux For Ever...Windoze Never

User avatar
majpooper
Level 5
Level 5
Posts: 565
Joined: Thu May 09, 2013 1:56 pm
Location: North Carolina, USA

Re: Just how secure is LM 18.x ..

Post by majpooper » Tue May 15, 2018 9:36 pm

With Mint the OS is the least of your security, and privacy for that matter, concerns. It's your router and browser you ought to be concerned with - way more than Linux Mint.

Spud1200
Level 2
Level 2
Posts: 67
Joined: Thu Mar 10, 2016 10:50 pm

Re: Just how secure is LM 18.x ..

Post by Spud1200 » Thu May 17, 2018 10:10 pm

majpooper wrote:
Tue May 15, 2018 9:36 pm
With Mint the OS is the least of your security, and privacy for that matter, concerns. It's your router and browser you ought to be concerned with - way more than Linux Mint.
What would you recommend with regards too the Browser like FF or Chrome. Keeping it updated is an obvious must but can any one recommend any good security practices on these boards too help with overall security using these browsers in Mint.

I was watching a video on the ufw and man you can actually do a lot with it; its quite unreal but over all I'm just looking for a general conversation and some pointers.

I'm not trying too sit hear and ask stupid questions or certainly not troll but I like too do a lot of research just for the fact I like too learn as much as I can when I have the time. I find a lot of stuff interesting so was just wanting too talk some gyes who know more than me.

:) ...

User avatar
Moem
Level 15
Level 15
Posts: 5858
Joined: Tue Nov 17, 2015 9:14 am
Location: The Netherlands
Contact:

Re: Just how secure is LM 18.x ..

Post by Moem » Fri May 18, 2018 1:55 am

You never replied to this:
Are you asking about local threats or threats from the internet?
I can assume that you mean threats from the internet, but it's easier if we don't have to assume.
Image

If your issue is solved, kindly indicate that by editing the first post in the topic, and adding [SOLVED] to the title. Thanks!

User avatar
lsemmens
Level 4
Level 4
Posts: 386
Joined: Wed Sep 10, 2014 9:07 pm
Location: Rural South Australia

Re: Just how secure is LM 18.x ..

Post by lsemmens » Fri May 18, 2018 11:05 am

Linux, or any other OS can be as secure as you make it. NO system is secure if you leave your keys in the door, The differences occur where there is another door. You, then, must also lock that door, then....there's the windows.........Need I say more. If you are careful about what you share, how you share it, and with whom, even Windoze can be a relatively safe system. The difference being. Windows 3 = door shut, Windows 10 = door locked, Linux = door DEADlocked with a few other locks as well. Anyone can break Widoze 3, Windoze 10 requires a bit more force, Linux, most crooks will look for an easier target.
Kernel: 4.13.0-37-generic x86_64 (64 bit gcc: 5.4.0)
Desktop: Cinnamon 3.6.7 (Gtk 3.18.9-1ubuntu3.3)
Distro: Linux Mint 18.3 Sylvia

Laptop T4500 Dualcore 3Gb RAM
Out of my mind - please leave a message

User avatar
majpooper
Level 5
Level 5
Posts: 565
Joined: Thu May 09, 2013 1:56 pm
Location: North Carolina, USA

Re: Just how secure is LM 18.x ..

Post by majpooper » Fri May 18, 2018 4:09 pm

majpooper wrote:
Tue May 15, 2018 9:36 pm
With Mint the OS is the least of your security, and privacy for that matter, concerns. It's your router and browser you ought to be concerned with - way more than Linux Mint.

What would you recommend with regards too the Browser like FF or Chrome. Keeping it updated is an obvious must but can any one recommend any good security practices on these boards too help with overall security using these browsers in Mint.
Here is what I have done - is it overkill - probably - does it give me piece of mind - somewhat realizing that nothing ultimately is secure or that your privacy can ever be 100%.

Starting at the boarder I have configured a router behind a router. What I mean by that I have a router interfacing the internet (this is the router wired to my ISP's cable modem). Behind that router with a separate Network IP is a router to which all my wired devices interface. I also have my wireless (a third router - not really necessary but I found an old linksys router which I updated with dd-wrt so I used that just for wireless access and configured that with yet another separate Network IP space. Yes definitely overkill but a router behind a router with a guest network is not.

I ensure the firmware on my routers all updated, turn on the router firewalls, disable admin via remote access, disable UPnP (if you are a gamer I guess you have to leave it enabled but it is a huge vulnerability). Should go without saying but changing the router password away from the default. I do not broadcast the SSID but that really does little to deter the bad guys but I do it anyway. I also so change the network IP space away from the typical 192.168.1.1 or 0.1 to something like 192.168.17.25 just to make things look a little bit different to anyone snooping around.

I install firejail (I play with my firefox.profile a bit to my liking but the profile out of the box is fine). I also install from the mint software repository dnscrypt which prvents DNS leaks and DNS spoofing. I would never use my ISP's DNS resolvers. My DNS resolver of choice which I set up in conjunction with dnscrypt is OpenDNS however there are several good ones such as 9.9.9.9 and 1.1.1.1, some folks like Google 8.8.8.8 (can't recall their secondary) and several others - research them and use the one you like best.

I also use veracrypt and have an encrypted container on my HDD where I keep stuff I want to protect - keep in mind when it's open it ain't protected. I also have an encrypted container on my external HD for the backups. I use a VPN (PrivateTunnel) for a little more security - at least my data is encrypted up to my VPN's server - that's the best I can do.

My browser and any app that is internet facing is sandboxed with firejail but in addition I use a few security addons;
IDN Safe (IDN Safe blocks internationalized domain names also known as punycode domains. This helps you to identify them and will prevent you from visiting probable fake sites.
Adblock Plus
No Coin (blocks crypto coin miners)
uBlock Origin (a must IMHO)
HTTPS Everywhere (also a must IMHO)
Disable WebRTC

I also use the free version of Lastpass to keep my passwords in an encrypted vault - I make sure my passwords are very long and cryptic and different for each site. I log into sites line the linux mint forum using Lastpass and do not even bother with remembering password anymore.

Post Reply

Return to “Chat about Linux Mint”