51–55 of 55 posts
Good point but what is a good free antivirus for Linux?
Free or not-free - there are none at the moment. ClamAV last time I checked missed over 30% of in the wild malware which renders it pretty much useless. AV-Comparatives and VBulletin have long stopped testing it for this reason.
Earlier quoted context omitted.
My friends sometimes have to download odd software from the net and their AV's have helped them avoid disasters.
Did they download a random anti-virus program from the net? Which ones are the secure ones? How did they know it was avoided? Did a popup from the software they installed tell them so?
Earlier quoted context omitted.
> The idea that to fix a security issue you should install an additional program which "increases" security is dubious. For some reasons it often works for Windows and MacOS, why wouldn't it work for Linux? > The problems listed on the page are real and we should tackle them. Considering the number of breaches of NPM/Ruby repos and other projects hosted on github/gitlab, it surely looks like no one really does anythi…
> For some reasons it often works for Windows and MacOS, why wouldn't it work for Linux? Does it work though? What evidence supports this claim? I use Windows with no AV and I've been having no problems. Mainly because I don't install software from shady sources. But I know people who install pirated software, because they can't afford it (a common situation for e.g. architecture students), or pirated games and use a…
No one is arguing with that but a native AV for Linux could potentially add a layer of protection.
Somewhat related question: is there any way to detect hidden web shells that may be installed on a Linux server? Something like a script that pings a webhook any time any user logs in? I suppose that would be easy to disable if a hacker knows what they're doing. But it could be another layer of security that could tip off an administrator that something is happening.
In the modern web dev, you don’t want a mutable web root at all - instead, when you run your deploy command, the entire web root is removed and replaced with latest version from git. So there are few chances to have “web shells” as long as your git repository is intact, and you deploy periodically. That said, if you want extra security, you can add a process monitor which sends an alert any time there is an process r…
Linux Myths Series: Setting a password secures user data. Not when you can change passwords of any user account if you've got physical access: https://askubuntu.com/questions/24006/how-do-i-reset-a-lost-...
Same with windows and mac os. You want full-disk encryption or homedir encryption if you want to protect your data.