Linked by Igor Ljubuncic on Mon 21st Jun 2010 09:35 UTC
Privacy, Security, Encryption I've bored the readers of my personal website to death with two rather prosaic articles debating the Linux security model, in direct relation to Windows and associated claims of wondrous infections and lacks thereof. However, I haven't yet discussed even a single program that you can use on your Linux machine to gauge your security. For my inaugural article for OSNews, I'll leave the conceptual stuff behind, and focus on specific vectors of security, within the world of reason and moderation that I've created and show you how you can bolster a healthy strategy with some tactical polish, namely software.
Permalink for comment 430891
To read all comments associated with this story, please click here.
insecurity
by xaeropower on Mon 21st Jun 2010 13:50 UTC
xaeropower
Member since:
2005-12-16

"Well, firewall seems like the best single solution overall."

Firewall won't save you from anything by itself and the only meaningful reason of using fws is when certain hosts need access to certain service. On a workstation you can pretty much disable/remove every network daemon like ssh, apache, mysql etc. or if you need them to develop stuff then just bind them to localhost.

"It's useful and sometimes rather necessary. Anti-virus and malware scanners are definitely not needed."

Then why do you even mention them? Most of the linux AVs were made for mail gws or to scan fileservers and their detection rate is far worst than what their windows version can offer. Except clamav because thats crap on both. If you would have to write a list which av is the worst clamav would be somewhere on top.

You should've rather write about rootkit detectors like: http://www.chkrootkit.org/


One of the best nix sec guide I read in the past (good for workstations too) was this one, unfinished unfortunately:

http://slackware.asmonet.net/index.php?dzial=artykuly&p=5

Edited 2010-06-21 13:54 UTC

Reply Score: 1