Interests: News, Finance, Computer, Science, Tech, and Living

  • 0 Posts
  • 267 Comments
Joined 3 years ago
cake
Cake day: June 13th, 2023

help-circle





  • flatbield@beehaw.orgtoLinux@lemmy.mlQuestion about Antivirus
    link
    fedilink
    English
    arrow-up
    7
    ·
    edit-2
    2 months ago

    Antivirus is not the begin all and end all. I do not specifiically have AV installed and have had 0 issuses over the past 26 years of Linux use.

    On the other hand I do only install software from trusted sources. I keep my system updated. I do scan things with VirusTotal if there is a question. I have wine installed but not the exe handler. I have a firewall. I do sometimes harden my systems and use security scanners to help with that. Probably biggest attack vectors are email attachments and the web browser. I am careful about attachments. In the brower I use uBlock Origin at a minimum. I segregate sensitive things too so even compromising my general user account would not be fatal. I also have good offline and offsite backups.

    As for AV like stuff. I do sometimes install ClamAV or a rootkit scanner and sometimes do a manual scan but have never found anything. Same with my IDS. My WS for example has Tripwire but not all my systems and have never found anything.

    My point really, I view security about process and defense in depth then AV specifically. Keep in mind that AV introduces attack vectors too.









  • The thing about most default configs of any OS is that user storage is largely accessable to all apps. True of Linux, Android. Windows, …

    Graphene has options to restrict that but you have to set it up that way. Android also has App sandboxing for app data.

    Thinking through the threat model of course is always good as is hardening. All security is porous. Linux is fine generally. If one is exposing services on the public net it is not clear that any OS or software is sufficiently secure, that takes constant effort in terms of monitoring and management.