Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-26 Thread qazxswedc
Yeah that high-blooded Darlene haha! Show's legit though, I think. Probably  
the best one of it's kind. 


Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-25 Thread cooloutac

So you live in a glass house?

I guess we all can't be as boring and uninteresting as you.  And we can't  
live in the middle of nowhere either...


You are like the guy who tells me to lower my logging level,  instead of  
figuring out why my computer is doing something under the hood.


Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-25 Thread greatgnu
abosolutey wrong, the NSA is the least likely people to be targeting you. But  
you definitely have to worry about everyone else

paranoid much, ha?

Who do I have to worry about. The occasional script kiddo cracking my setup?  
Yeah, right..
GNU is very secure by default. Just chill and relax. 


Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-25 Thread cooloutac

abosolutey wrong,  the NSA is the least likely people to be targeting you.


Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-24 Thread David
suntzunnoy? You mean Sun Tzu? lol

On 07/24/2015 10:27 PM, great...@riseup.net wrote:
> sudo ufw enable
>
> sudo netstat -tulpn   and see what is listening to the internetz.
> Remove everything you don't use/need.
>
> Relax. If your suntzunnoy enemy is not the NSA, you are perfectly fine.



Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-24 Thread greatgnu

sudo ufw enable

sudo netstat -tulpn   and see what is listening to the internetz. Remove  
everything you don't use/need.


Relax. If your suntzunnoy enemy is not the NSA, you are perfectly fine.


Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-24 Thread cooloutac

https://www.youtube.com/watch?v=y_lhqg_p21k&feature=player_embedded


Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-24 Thread David
Ah thanks a lot man!

On 07/24/2015 05:36 PM, coolou...@yahoo.com wrote:
> it only updates everyday after install,  you would have to call it to
> scan.
>
> clamscan is the command,   you can check manpage for all the options. 
> I make an alias for it.  
> https://askubuntu.com/questions/250290/how-do-i-scan-for-viruses-with-clamav
>
>




Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-24 Thread cooloutac

it only updates everyday after install,  you would have to call it to scan.

clamscan is the command,   you can check manpage for all the options.  I make  
an alias for it.
https://askubuntu.com/questions/250290/how-do-i-scan-for-viruses-with-clamav





Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-24 Thread David
I installed clamav already. Does it run after installation or do I call
it? My terminal says 'no such clamav found' or something like that when
I try to call clamav via 'clamav'.

On 07/24/2015 04:41 PM, coolou...@yahoo.com wrote:
> also install and routinely use rkhunter, and clamav.



Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-24 Thread cooloutac

also install and routinely use rkhunter, and clamav.


Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-24 Thread David
This is really helpful! I'll go check these! Thanks a lot!

On 07/24/2015 04:30 PM, coolou...@yahoo.com wrote:
> +1 to grsecurity patch,  this website has good tips
> http://hardenubuntu.com/
>
> Trisquel also comes with lots of default apparmor profiles you can
> enforce.
>
> use a file integrity program like tripwire or AIDE,  to check when
> files have been changed.  Use a program like logwatch to check some
> important logs.  Set up mail to email all these reports to root.I
> use Dragonfly mail agent so nothing listens on ports.
> https://www.digitalocean.com/community/tutorials/how-to-use-tripwire-to-detect-server-intrusions-on-an-ubuntu-vps
>
> disable services especially those you don't need.   Disable all
> services listening on ports especially.  as root type lsof -i.   
> disable them all.  use a static connection not dhcp.
>
> Use some tools to monitor your network in real time.  I like etherape
> cause its graphical.  there is also iftop,  iptraf-ng,  nethogs,
> ntop.  Netatop is actually great plugin for atop, because it will even
> show shortlived processes,  but you need to compile kernel for it.
>
> But I hate to break it to you,  Real security experts will tell you
> its not about stopping them from getting in anymore,  Its about how
> fast you can detect the intrusion and minimize the damage.  Even the
> head of IAD for he NSA will tell you the same thing.  Assume you are
> already hacked.   The main thing is checking your logs, and trying to
> figure out what and when.   Because if you are very active on your
> pc,  it really doesn't matter who you are you can't stop it.  But what
> you can do is limit it.
>
>



Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-24 Thread cooloutac

+1 to grsecurity patch,  this website has good tips http://hardenubuntu.com/

Trisquel also comes with lots of default apparmor profiles you can enforce.

use a file integrity program like tripwire or AIDE,  to check when files have  
been changed.  Use a program like logwatch to check some important logs.  Set  
up mail to email all these reports to root.I use Dragonfly mail agent so  
nothing listens on ports.  
https://www.digitalocean.com/community/tutorials/how-to-use-tripwire-to-detect-server-intrusions-on-an-ubuntu-vps


disable services especially those you don't need.   Disable all services  
listening on ports especially.  as root type lsof -i.disable them all.   
use a static connection not dhcp.


Use some tools to monitor your network in real time.  I like etherape cause  
its graphical.  there is also iftop,  iptraf-ng,  nethogs, ntop.  Netatop is  
actually great plugin for atop, because it will even show shortlived  
processes,  but you need to compile kernel for it.


But I hate to break it to you,  Real security experts will tell you its not  
about stopping them from getting in anymore,  Its about how fast you can  
detect the intrusion and minimize the damage.  Even the head of IAD for he  
NSA will tell you the same thing.  Assume you are already hacked.   The main  
thing is checking your logs, and trying to figure out what and when.
Because if you are very active on your pc,  it really doesn't matter who you  
are you can't stop it.  But what you can do is limit it.





Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-24 Thread qazxswedc

Nihaoma! :)


Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-23 Thread chaosesqueteam

Grsecurity patched linux kernel.


Re: [Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-23 Thread jason
Sun Tzu said to know your enemy. How smart are they? Their level of  
intelligence and resourcefulness dictates what you need to do.


[Trisquel-users] Best secrity tools to defend my Trisquel system against douchebags?

2015-07-23 Thread qazxswedc

Hi! :)