Paranoia for Beginners

For discussions about security.
Message
Author
User avatar
Lobster
Official Crustacean
Posts: 15522
Joined: Wed 04 May 2005, 06:06
Location: Paradox Realm
Contact:

#221 Post by Lobster »

All my passwords are at
http://lastpass.com/ which I can sometimes remember
so I can easily help out any govt agency needing access to my secret plans for . . . :oops: . . . gosh nearly gave it away . . .

Meanwhile RIM are coerced by those safeguarding their (sorry I meant our) interests . . .
http://www.eweekeurope.co.uk/news/rim-e ... -lab-44065
Puppy Raspup 8.2Final 8)
Puppy Links Page http://www.smokey01.com/bruceb/puppy.html :D

User avatar
Aitch
Posts: 6518
Joined: Wed 04 Apr 2007, 15:57
Location: Chatham, Kent, UK

#222 Post by Aitch »

Lobster

Surveillance is the new world currency - buy in, now! :wink:


Aitch :)

noubuntu4me
Posts: 7
Joined: Sun 30 Oct 2011, 00:06

#223 Post by noubuntu4me »

Does the always running in root thing bother ya? I still don't know what the big deal is about it but it is something to be paranoid about. :roll:

User avatar
Lobster
Official Crustacean
Posts: 15522
Joined: Wed 04 May 2005, 06:06
Location: Paradox Realm
Contact:

#224 Post by Lobster »

Does the always running in root thing bother ya?
No. 8)
It is pedaled by Security FUD who those who misunderstand what and why we use Puppy.

In a multi-user networked system. For example in a company intranet. Every user should have their own virtual place in the company system server. People logging in should not have access to payroll and computer updates, next years new prototypes etc.
You need secured servers, passwords and restrictions on devices and Internet connects etc.

Puppy on single use home machines is used by those who want access to their files and are capable of encrypting directories or running from USB or multi-session. I do not want a password when I go into my computer. If using Ubuntu or another system on a single user system I turn off the password protect and run as su.
My computer, my rules.

For those who want to quake, tremble and spread ignorance about the nature of the 'risk', the only solution is a tin hat award.

For the rest use the Puppy firewall and GROWL in Puppy 5.3
read and apply this if you must
http://puppylinux.org/wikka/security

Now be happy. You are safe. :)
Last edited by Lobster on Sun 30 Oct 2011, 08:14, edited 1 time in total.
Puppy Raspup 8.2Final 8)
Puppy Links Page http://www.smokey01.com/bruceb/puppy.html :D

nooby
Posts: 10369
Joined: Sun 29 Jun 2008, 19:05
Location: SwedenEurope

#225 Post by nooby »

Lobster I wonder about this thing you write.
Lobster wrote:If using Ubuntu or another system on a single user system I turn off the password protect and run as su.
Is that really possible. I have heard them have a 15 minutes time limit
on being su so it would switch back automatically.

But maybe it derails the thread. Do you have time for me contacting you on PM or should I start a new thread. I want to learn this thing you talk about.

I have Kubuntu named Netrunner going now and it allow me to have access to the hdd in NTFS which is most unusual for a ubuntu.

title Netrunner 2011 frugal iso boot of netrunner-3.2.iso
find --set-root --ignore-floppies --ignore-cd /netrunner-3.2.iso
kernel /netrunner/casper/vmlinuz rw file=/cdrom/preseed/netrunner.seed boot=casper iso-scan/filename=/netrunner-3.2.iso noeject noprompt quiet splash --
initrd /netrunner/casper/initrd.lz

When I ask Ubuntu people about it them are big question marks
asking me why would one want to do frugal. What is it etc.

Them are so into Ubuntu that them don't trust being single user is good.
I use Google Search on Puppy Forum
not an ideal solution though

User avatar
Lobster
Official Crustacean
Posts: 15522
Joined: Wed 04 May 2005, 06:06
Location: Paradox Realm
Contact:

#226 Post by Lobster »

15 minutes time limit
on being su
Yep that is about as long as I can stand being dictated to by Ubuntu . . .
If I want someone else to control my computer, I would be using the
life style choice of a Mac Smug Mug or the 'We have no choice' herd of Microsot drones . . .

I suggest you start a new thread, 'quaking behind the sofa for Noobs'
However how are you going to start a new thread - will you be safe
using your computer? :lol:

. . . and if you want a bit of terror for Halloween try the film 'Pulse'
all about what happens to those somewhere in the vicinity of a computer

You have been warned. :twisted:
Puppy Raspup 8.2Final 8)
Puppy Links Page http://www.smokey01.com/bruceb/puppy.html :D

User avatar
Aitch
Posts: 6518
Joined: Wed 04 Apr 2007, 15:57
Location: Chatham, Kent, UK

#227 Post by Aitch »

This has a few too many adverts, and focuses a lot on the impact on Micro$oft, but Steve Gibson gives the details on many security problems, particularly web/browser exploits

http://twit.tv/sn

Aitch :)

nooby
Posts: 10369
Joined: Sun 29 Jun 2008, 19:05
Location: SwedenEurope

#228 Post by nooby »

Aitch thanks for that link. Steve I have known about since
him started almost :)

What is this he talks about? I can not listen to spoken English
my brain too slow. I need to read things. Has he written about this?
Kindle Fire and the Silk browser
Kindle Fire is the ordinary pad from Amazon not an E-ink computer
just a surf pad with Android most likely.

the Silk browser I have not read about. Ah read this one and many like it!

http://www.wilderssecurity.com/showthread.php?t=308874

wow them are at it again :)

Quote Privacy experts "roast" Kindle Fire for "watching you" online – worse than Google OR Facebook/quote

That is bad behavior indeed.
"All web connections from your tablet will connect directly to Amazon, rather than the destination web page,’ wrote Wisniewski, ‘Hopefully you can start to see the problem here. All of your web surfing habits will transit Amazon’s cloud."
I use Google Search on Puppy Forum
not an ideal solution though

User avatar
Lobster
Official Crustacean
Posts: 15522
Joined: Wed 04 May 2005, 06:06
Location: Paradox Realm
Contact:

#229 Post by Lobster »

For those of you who have survived Windows, the Internet and your own viral imagination
DPUP5520 has a security/encrypt Pup that may allay some of your fears:
http://www.murga-linux.com/puppy/viewto ... 506#569506

Probably works better than my technique of eating pickled garlic and breathing out into the computer case occasionally :oops:

and certainly cheaper than the Batman option
http://www.silentbat.com/

Here is a catalogue of what is out to get info on you etc
http://projects.wsj.com/surveillance-catalog/#/
Last edited by Lobster on Wed 22 Feb 2012, 22:33, edited 1 time in total.
Puppy Raspup 8.2Final 8)
Puppy Links Page http://www.smokey01.com/bruceb/puppy.html :D

User avatar
Lobster
Official Crustacean
Posts: 15522
Joined: Wed 04 May 2005, 06:06
Location: Paradox Realm
Contact:

#230 Post by Lobster »

Don't think you quivering paranoids have been neglected . . . :shock:

Just now I found a directory full of a mysterious collection of files with numbers and a hashtag at the front. Some of the files I know and moved to appropriate directories.
The rest I could not move and was denied the ability to change permissions (in order to delete)
Wot? My computer is rebelling against me? New hackers from dimension x or crackers from Puppy hacking school? :shock:
http://puppylinux.org/wikka/PuppySchoolProgramming

or more likely it is residue from testing early slacko or racy when we had some problem with the filing system that was documented but was too geeky to go investigate . . .
I suppose I should try changing permission from the command line?
What would you do? 8)

I recently had a WSOD (white screen of death) only had black so far in Puppy. About the same time, my computer slowed down (internet slowed) AND this happened with a Window connected laptop.
This was happened in Slacko but I have a feeling it was flash or javascript in the browser. How do I replicate and provide a similar experience for the confirmed paranoid?

Sadly I have updated to Beta Slacko 5.3.3, which has cured it . . .
Ah well - conspiracy theories welcome to the usual encoded address . . . :wink:
Puppy Raspup 8.2Final 8)
Puppy Links Page http://www.smokey01.com/bruceb/puppy.html :D

nooby
Posts: 10369
Joined: Sun 29 Jun 2008, 19:05
Location: SwedenEurope

#231 Post by nooby »

Just now I found a directory full of a mysterious collection of files with numbers and a hashtag at the front.
any name or description so I can find them too?
I have used Slacko so why should I not have the same?

So care for giving more details hopefully :)
I use Google Search on Puppy Forum
not an ideal solution though

User avatar
Lobster
Official Crustacean
Posts: 15522
Joined: Wed 04 May 2005, 06:06
Location: Paradox Realm
Contact:

#232 Post by Lobster »

Oh that nooby he sure does like to find problems . . . :roll:
he was on the case in seconds . . . :lol:
the files appeared in my home directory under lost and found

Enclosed pic 8)
Attachments
rub.jpg
(27.22 KiB) Downloaded 1160 times
Puppy Raspup 8.2Final 8)
Puppy Links Page http://www.smokey01.com/bruceb/puppy.html :D

User avatar
Lobster
Official Crustacean
Posts: 15522
Joined: Wed 04 May 2005, 06:06
Location: Paradox Realm
Contact:

#233 Post by Lobster »

I was watching the excellent Click (you may need to pretend you are in the UK to watch)
http://www.bbc.co.uk/iplayer/episode/b0 ... 4_02_2012/
and they mentioned the brilliant (in a twisted, evil, sith like way) malwarian Zeus (trojan horse) :twisted:
http://en.wikipedia.org/wiki/Zeus_%28trojan_horse%29
Sadly for the terminally paranoid it only work on Windows:
The botnet does not work on Mac OS X, Linux, or any other operating system.
:oops:

. . . oh well . . . moving right along . . .
the German Govt endorses Chrome as most secure :-)
http://www.computerworld.com/s/article/ ... re_browser

Opera browser may have to franchise the bulo-bulo viral removal system to compete . . .
http://www.bbc.co.uk/news/magazine-16871785

Nobody found anything to scare themselves with lately? :wink:
http://en.wikipedia.org/wiki/Linux_malware
Puppy Raspup 8.2Final 8)
Puppy Links Page http://www.smokey01.com/bruceb/puppy.html :D

postfs1

#234 Post by postfs1 »

Lobster wrote:...
the German Govt endorses Chrome as most secure :-)
http://www.computerworld.com/s/article/ ... re_browser
www.computerworld.com/s/article/9223957 wrote: ...
Chrome was the best browser
...

amigo
Posts: 2629
Joined: Mon 02 Apr 2007, 06:52

#235 Post by amigo »

lost+found is a special directory used by fdisk when correcting errors on your hard disk, so need to worry about those files -Lobster should know this by now?

User avatar
Lobster
Official Crustacean
Posts: 15522
Joined: Wed 04 May 2005, 06:06
Location: Paradox Realm
Contact:

#236 Post by Lobster »

yep I should have known
or remembered . . . it was indeed fdisk :)

Info over paranoia - wins every time . . . :wink:
Puppy Raspup 8.2Final 8)
Puppy Links Page http://www.smokey01.com/bruceb/puppy.html :D

User avatar
Lobster
Official Crustacean
Posts: 15522
Joined: Wed 04 May 2005, 06:06
Location: Paradox Realm
Contact:

#237 Post by Lobster »

Look Who’s Following You on the Internet
http://blogs.discovermagazine.com/80bea ... more-35478
Puppy Raspup 8.2Final 8)
Puppy Links Page http://www.smokey01.com/bruceb/puppy.html :D

User avatar
Aitch
Posts: 6518
Joined: Wed 04 Apr 2007, 15:57
Location: Chatham, Kent, UK

#238 Post by Aitch »

Firefox add-on Collusion cited in above post by Lobster

http://www.mozilla.org/en-US/collusion/

Installed...interesting

ebay is a bit scary, but to be expected, doubleclick dominates other adclick sites as a hub - both puppy forums clean :D

sounds can be turned on to warn of trackers...

Aitch :)

DPUP5520
Posts: 800
Joined: Wed 16 Feb 2011, 05:38

#239 Post by DPUP5520 »

I'll have to remember to add that whenever I get my lazy ass to update Puppy Crypt.
[url=http://www.murga-linux.com/puppy/viewtopic.php?t=69651][b][i]PupRescue 2.5[/i][/b][/url]
[url=http://www.murga-linux.com/puppy/viewtopic.php?t=72178][b][i]Puppy Crypt 528[/i][/b][/url]

User avatar
Barkin
Posts: 803
Joined: Fri 12 Aug 2011, 04:55

#240 Post by Barkin »

Lobster wrote:and certainly cheaper than the Batman option
http://www.silentbat.com/
What a cheek: selling Puppy Linux + Tor (both free) for 79 bucks !,
They can stick it where the sun don’t shine, (conveniently it's suppository-shaped)

Image

BTW encryption is required when using tor ... http://www.wired.com/politics/security/news/2007/09/embassy_hacks

Post Reply