How do I know I am safe?

Ninjember · 2011-12-08 22:32:02

Hi!

My first post here so I hope you all remain paitent if my question is stupid or irrelevant in any aspect? But, how do I know I am 'safe' from random and specifik attacks from other people on the internet or in my social circle?
I use ssh and have a one user on my computer with a password that is usable and a variation of that password as root.
I have friends over that know *nix more than me and I am always a bit paranoid about computer-stuff; how do I know if my mainframe is rooted by someone but me?

That's really all I need to know but firewall comments are appriciated too.

Cheers,
Ninjember.

zero_one · 2011-12-08 22:41:27

Ninjember wrote:

Hi!
how do I know if my mainframe is rooted by someone but me?

Type 'w' in you terminal of choice to see which users are logged in. Also check;

http://www.linuxsecurity.com http://www.linuxtopia.org/LinuxSecurity/

May be helpful, also check the wiki, there is an entire section on security related topics

https://wiki.archlinux.org/index.php/Ca … English%29

FWIW, educate yourself on the daemons and services you have running and potential vulnerabilities of them. firestarter is a good begining firewall which will give you some piece of mind while you learn iptables.

Last edited by zero_one (2011-12-08 23:34:55)

nomilieu · 2011-12-08 23:43:00

A good first step is to disallow root login over ssh, and to use a bizarre username for the regular account (i.e., not "john" or "bill", etc.).
I would also avoid using a similar password for root.

As long as you aren't running any wild services or using questionable software, you should be "safe".

Ninjember · 2011-12-08 23:50:51

Thank you for your answers. How do I know if I'm infected by a 'root-kit' or what it is now called?

Sincerly,
N.

skunktrader · 2011-12-08 23:58:58

Ninjember wrote:

Thank you for your answers. How do I know if I'm infected by a 'root-kit' or what it is now called?
Sincerly,
N.

As a first step install this http://www.archlinux.org/packages/commu … /rkhunter/

echo.unity · 2011-12-09 00:15:00

zero_one wrote:

Ninjember wrote:
Hi!
how do I know if my mainframe is rooted by someone but me?
Type 'w' in you terminal of choice to see which users are logged in. Also check;
http://www.linuxsecurity.com http://www.linuxtopia.org/LinuxSecurity/

May be helpful, also check the wiki, there is an entire section on security related topics
https://wiki.archlinux.org/index.php/Ca … English%29
FWIW, educate yourself on the daemons and services you have running and potential vulnerabilities of them. firestarter is a good begining firewall which will give you some piece of mind while you learn iptables.

I don't think firestarter works with arch?
I would recommend ufw over firestarter though, but I think we can agree iptables syntax is too much for a beginner.

As for apps I would also recommend only get what you need and work your way up while learning your system.

/dev/zero · 2011-12-09 00:51:04

Ninjember wrote:

My first post here so I hope you all remain paitent if my question is stupid or irrelevant in any aspect? But, how do I know I am 'safe' from random and specifik attacks from other people on the internet or in my social circle?

There are never any guarantees when another person has access to your computer. I mean either physical access, or access to services run over a network. The different types of possible access each induce different kinds measure/counter-measure/etc scenarios.

At the end of the day, good security is more about risk management than a boolean "secure vs insecure". For each possible scenario involving malice against your computer, try to make it more difficult for someone to do so undetected, and try to limit the damage it would cause if they do succeed.

Some basic rules of thumb:

Keep your computer in a room that only you can access. Lock the door and record the room with a webcam and install an alarm system. Preferably the room should be behind 10 ft of concrete, 6 inches of lead, buried 100 ft underground, in the middle of a 10,000 acre property that you own, inaccessible by land routes, patrolled by loyal ninjas, attack dogs & spy drones, with electrified razorwire fencing running around the outside, and booby-trapped throughout.
Encrypt your hard drives with Luks.
For each service you want to run on the network, stfw for the most paranoid ways possible to secure that service.
Only use official software available via your package manager.

Last edited by /dev/zero (2011-12-09 00:54:00)

Ninjember · 2011-12-09 00:53:16

/dev/zero wrote:

Ninjember wrote:
My first post here so I hope you all remain paitent if my question is stupid or irrelevant in any aspect? But, how do I know I am 'safe' from random and specifik attacks from other people on the internet or in my social circle?
There are never any guarantees when another person has access to your computer. I mean either physical access, or access to services run over a network. The different types of possible access each induce a different kinds measure/counter-measure/etc scenarios.
At the end of the day, good security is more about risk management than a boolean "secure vs insecure". For each possible scenario involving malice against your computer, try to make it more difficult for someone to do so undetected, and try to limit the damage it would cause if they do succeed.
Some basic rules of thumb:
Keep your computer in a room that only you can access. Lock the door and record the room with a webcam and install an alarm system. Preferably the room should be behind 10 ft of concrete, 6 inches of lead, buried 100 ft underground, in the middle of a 10,000 acre property that you own, inaccessible by land routes, patrolled by loyal ninjas, attack dogs & spy drones, with electrified razorwire fencing running around the outside, and booby-trapped throughout.
Encrypt your hard drives with Luks.
For each service you want to run on the network, stfw for the most paranoid ways possible to secure that service.

Sounds reasonable
Thank you all for your comments and answers.

Peace.

Arch Linux

#1 2011-12-08 22:32:02

How do I know I am safe?

#2 2011-12-08 22:41:27

Re: How do I know I am safe?

#3 2011-12-08 23:43:00

Re: How do I know I am safe?

#4 2011-12-08 23:50:51

Re: How do I know I am safe?

#5 2011-12-08 23:58:58

Re: How do I know I am safe?

#6 2011-12-09 00:15:00

Re: How do I know I am safe?

#7 2011-12-09 00:51:04

Re: How do I know I am safe?

#8 2011-12-09 00:53:16

Re: How do I know I am safe?

Board footer