this post was submitted on 17 Dec 2024
361 points (85.3% liked)
linuxmemes
26744 readers
1551 users here now
Hint: :q!
Sister communities:
Community rules (click to expand)
1. Follow the site-wide rules
- Instance-wide TOS: https://legal.lemmy.world/tos/
- Lemmy code of conduct: https://join-lemmy.org/docs/code_of_conduct.html
2. Be civil
- Understand the difference between a joke and an insult.
- Do not harrass or attack users for any reason. This includes using blanket terms, like "every user of thing".
- Don't get baited into back-and-forth insults. We are not animals.
- Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
- Bigotry will not be tolerated.
3. Post Linux-related content
- Including Unix and BSD.
- Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of
sudoin Windows. - No porn, no politics, no trolling or ragebaiting.
4. No recent reposts
- Everybody uses Arch btw, can't quit Vim, <loves/tolerates/hates> systemd, and wants to interject for a moment. You can stop now.
5. π¬π§ Language/ΡΠ·ΡΠΊ/Sprache
- This is primarily an English-speaking community. π¬π§π¦πΊπΊπΈ
- Comments written in other languages are allowed.
- The substance of a post should be comprehensible for people who only speak English.
- Titles and post bodies written in other languages will be allowed, but only as long as the above rule is observed.
6. (NEW!) Regarding public figures
We all have our opinions, and certain public figures can be divisive. Keep in mind that this is a community for memes and light-hearted fun, not for airing grievances or leveling accusations. - Keep discussions polite and free of disparagement.
- We are never in possession of all of the facts. Defamatory comments will not be tolerated.
- Discussions that get too heated will be locked and offending comments removed. Β
Please report posts and comments that break these rules!
Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't remove France.
founded 2 years ago
MODERATORS
*guitar solo*
Frets On Fire solo
If you think being on Linux makes you immune for attacks, I have bad news for you.
there are much less vulrenabilities on Linux. No system is totally unpenetrable, but having 2-5 vulrebabilities is always better than having 30-40
I've got a link for you to click, Mr super secure OS user. I promise your OS will protect you.
Here I have a cool program to install. Just pipe this link into bash really quick...
With sudo. Can't forget that or it won't work.
you are just exploiting my words. I never said Linux will protect me whatever happens. But it will have a better protection inherently, than any windows
load more comments
(2 replies)
Do it
load more comments
(1 replies)
VMS is really fucking close to impenetrable.
Realistically the difference is in how Linux mitigates the common vectors for attack that Windows doesn't. Most malware targeting individual workstations gets in by either supply chain attack, vulnerable web renderer or by tricking the user into installing it.
Centralized repositories with centralized build tooling limits opportunities for supply chain attacks, plus helps prevent users from accidentally downloading a Trojan when trying to grab other software. Containerizing web applications helps limit browser exploits, and less "features" phoning home means a default incoming-deny firewall policy will largely prevent most vulnerabilities from being remotely serious.
So for an individual workstation, Linux is significantly safer from viruses. In the enterprise it's a completely different story where the threat environment does require defense in depth regardless of your choices of vendors
It probably makes you a less likely target though. I suppose that bots scan for known Widows vulnerabilities simply because that platform has a much higher market share among desktop operating systems. Besides, Linux distros offer a unified way to update all your software. On Windows, third-party software is often installed and maintained manually.
load more comments
(1 replies)
Regardless of us using Linux on our home computers, most businesses and services use Windows machines. Your information is likely still stored on Windows machines elsewhere if you interact with the world at all.
With that in mind, it's worth being aware of Windows security problems when they come up.
What would we do when these happen? What could we do in the moment to change anything?
Join an eventual class action?
That's the big "what if" that hangs over everything isn't it?
Taking the internet into consideration, I would doubt "most".
You'd be surprised. For medical info a lot of that is going to be sorted in windows servers running as either file or sql servers.
People here running *nix OSes while I run a Nix*OS
I mean... a form of Microsoft Defender is available for Linux, but only for enterprise customers if I remember correctly π
Yep, my company allows me to use Linux but for Compliance Reasons I need to have Microsoft Defender installed and running. Still beats Windows 11 by a mile
and it will suck your servers dry.
Eh, it's not too bad when properly configured.
Sometimes Mint tells me there are security updates available. Happened just this morning. Updating makes me feel good :)
And I can do it wherever I want. And my work is in no way interrupted, while the updates go through.
And it had the Edge of not installing Candy Crush
And put edge back in the taskbar.....
Is not having an anti-virus good for most people though?
most antivirus apps are very invasive, heavy on resources and even spy on you. Windows defender is usually enough. However, virustotal is still recommended
Is this something that someone who doesn't have tech as a hobby cares enough about to change they're os?
I would say yes? Many if my friends in uni were using laptops that had McAfee built in. I'm not exaggerating when I say they were unusable. I removed that shit and those machines were snappy af.
On one side, if you have a brain you're fine.
On the other side, *glances at general public typing google.com into google* ...yeah
Anti-virus is not going to stop you from stupidity. You classic "Anti-virus" won't stop anything more than run of the mill simple stuff.
Most of the time that's what people need an antivirus for, most attacks the average person will suffer will be some script that's easily caught by the antivirus.
If the script doesn't have permission to do anything it doesn't matter. See Android as an example.
Same for people using windows 7
there is an update, i applied it at the weekend
These YouTube channels not even aknowleging other operating systems than Windows like ThioJoe kinda annoy me
Bootkitty?
However,
you can already patch your BIOS to become secure again! :)
All in all, Windows security is a joke compared to Linux's.
Windows security is... fine? It could be better, but it's pretty much on par with linux security. Both have their vulns, but they're both also able to be secured enough that most (if not all) major data breaches are via phishing or other social engineering attacks, not solely software exploits. There's lots of fodder for the Linux vs. M$ debate, but this one is maybe a bit out of date.
If you actually dig deeper into the Linux security topic, you'd find out that Linux is actually not very secure. GrapheneOS developers made quite a lot of posts on what Linux distros (and the kernel) are missing in terms of security. A lot of "Linux security and the lack of viruses" rides on the waves of "there is hardly any point of creating malware for a system with such a small user base, plus you have to consider the fact that people knowledgeable enough just to install a Linux distro would be a bit more careful about their computers than the average Joe".
there is hardly any point of creating malware for a system with such a small user base
Actually the whole world runs on linux, Windows is mostly the low level consumer end.
Which makes your argument true for a certain segment of malware (the cheap low tech stuff more akin to scams etc targeting people en mass but expected to have a low return), but not actually for the parts where the money is that justify elaborate malware and hacks.
The internet runs on linux.
(Webservers, some network equipment, monitoring servers, NAS, DNS, ... lots of services can be setup and ran for free on linux. ((Companies like free)))
A lot of companies stuff also runs on linux when it's not free, just so they can avoid having to manage the hardware side... see: Google Cloud, AWS, Azure etc.
The amount of companies having their whole infrastructure run by one of the big cloud services on linux servers nowadays is far too high to make a serious argument of "linux is only secure because it's irrelevant and no one cares to break it".
Most companies like free. Larger companies like support contracts and shifting liability.
Yeah, Linux has SELinux, that thing everyone turns off!
And AppArmor
I want a Linux system that is entirely rootless by leveraging containers and service accounts.
Think about it. Instead of having root you could just have a utility that connects to a daemon that is in a sandboxed environment.
bootkitty wasn't implemented ever and if you use GUID Partition Table and your bios is set to uefi without csm, it can't affect you, since Bootkitty embeds itself into the Master Boot Record and there exploits the LogoFail vulrenability (this was already patched btw) with as far as i remember, a self-extracting steganographical bitmap image for arbritary code execution to bypass Secure Boot with injecting face certifications to Moklist. Also, it only runs on select devices, far from all Linux systems are vulrenabe.
view more: next βΊ