privacyguides

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

GnomeComedy, (edited ) in Privacy friendly Ubuntu antivirus ?

You’d be better served learning how to setup and use:

  • backups (and test them)
  • automate your reinstall (see ansible)
  • firewalld (RHEL/Fedora) or ufw (Ubuntu)
  • fail2ban
  • SELinux (RHEL/Fedora) or AppArmor (Ubuntu)
  • disable SSH via password, use keys only
  • adblocker (like ublock origin) - credit to whale@lemm.ee for the idea below
whale,
@whale@lemm.ee avatar

deleted_by_author

  • Loading...
  • M4rkF,
    @M4rkF@fosstodon.org avatar

    @whale @GnomeComedy
    This also assumes they know how to tell if it is exposed or not.

    I normally setup fail2ban as soon as I know something exposed to the outside.

    GnomeComedy, (edited )

    No, most desktops behind a NAT probably dont need fail2ban (though it wouldn’t hurt).

    Everyone’s security profile/needs are different.

    The point is that list does a hell of a lot more useful than ClamAV

    whale,
    @whale@lemm.ee avatar

    deleted_by_author

  • Loading...
  • GnomeComedy,

    Sounds like you’ve got a better solution, but I think you forgot to mention what it was.

    whale,
    @whale@lemm.ee avatar

    deleted_by_author

  • Loading...
  • GnomeComedy,

    If you think ClamAV on your mom’s laptop on Starbucks WiFi is doing anything useful, but you think fail2ban isn’t - you’re naive.

    On phishing - you’ve got another great example. ublock origin or any other decent adblocker will do WAAAAY more to help than ClamAV.

    neosheo,
    @neosheo@discuss.tchncs.de avatar

    For the automating of reinstalls what do you mean?

    Is it just a playbook that installs the distro, them installs the same packages, and then restores things like /home from backup?

    GnomeComedy,

    That, and:

    • put down config files that were modified
    • enable/start services that were installed
    • modify the firewall to open necessary ports

    Basically: put everything back as it was right before the ransomware encrypted your system on you.

    Then of course - fix what you did wrong that got you compromised. ;-)

    neosheo,
    @neosheo@discuss.tchncs.de avatar

    How would you determine the configs that were modified? What do you mean put down?

    GnomeComedy,

    Ideally you keep your configs in a git repo (like github). You know what’s modified because you’re the one who modified them. If you modify them - put that config file in the git repo.

    As for “put down” I just meant copied to the system (from github) by your automation (like ansible)

    docs.ansible.com/ansible/latest/…/index.html

    rutrum, in Practical file manager on Linux Ubuntu
    @rutrum@lm.paradisus.day avatar

    I have the same complaint and I dont know either. You can add at least 5 favorite/bookmarked folders that show underneath, but thats all I know of.

    demystify, in Using Facebook/Meta Messenger on Android

    If you end up taking the browser route, take a look at WebApps

    Codilingus,

    New app I didn’t even know I wanted.

    tocano, in Privacy friendly clock app ?
    @tocano@lemmy.ml avatar

    Depending on what you want, a clock app is something you can easily build yourself. Nothing more private than what is already yours.

    dtc, in Using Facebook/Meta Messenger on Android

    I’ve had this “problem” before, and I did not want to use the full Messenger app for privacy reasons as well. I had installed Messenger Lite, but it was discontinued a few weeks ago. I now have Facebook Lite, which also has Messenger, and you get notifications as well. It’s not perfect, but don’t give it too many permissions and you should be mostly fine. Using it in the browser is absolutely terrible, and you would not get push notifications.

    Amazed,

    A long time ago I used an app called Tinfoil Facebook that created a sandbox web browser style situation in the app. Gave it a nice UI and did not leave a trace. Switched to iPhone at some point. I wonder if it’s still around…

    dtc,

    Seems to still be available on F-Droid, but the last update was in 2017. I’ve installed it, but ended up not logging in since it’s targeting an SDK version so old that Android is giving me a bunch of warnings (and it doesn’t even scale to my entire screen, there’s a big black space at the bottom)

    Amazed,

    Wild! Thanks for checking up and following up.

    merde, in Using Facebook/Meta Messenger on Android

    isn’t cross-app communication from fecesbook messenger available yet?

    p5f20w18k, in Using Facebook/Meta Messenger on Android
    @p5f20w18k@lemmy.world avatar

    Work profile, or a PWA I think would be the best way to

    U2VuZCBudWRlcyA6KSAK,

    What good will a work profile do me? As mentioned in the other reply, what privacy gain am I really looking at in return for the tradeoff?

    CCatMan,

    Limits data access, right?

    ekky43, (edited )

    You tell us.

    Using PWA you’ll retain all the features and nice-to-haves of the app, while also preventing it from doing any weird magic to your files in the background. Sharing files from your main profile to your private profile is also as easy as opening the file in your main profiles file browser and clicking “share”.

    What is your threat/privacy level? How far are you willing to go, and what/how much is it that you want to keep private?

    I’m clearly too tired to make any sense. Please have a nice evening.

    M4rkF, in Using Facebook/Meta Messenger on Android
    @M4rkF@fosstodon.org avatar

    @U2VuZCBudWRlcyA6KSAK
    ahhh... the network effect....

    I wouldn't use it on anything, but if you have to... i'd start by looking if it's possible to use it from a web browser instead of using an app. This way, the browser app will isolate it from having access to your entire device.

    U2VuZCBudWRlcyA6KSAK,

    I get the idea with running it in a browser, but that will give a really bad experience with no notifications and loosing the app among all 100 other tabs I might have open at the same time.

    How naive am I if I just install it and deny it access to camera, microphone, contacts, location and all that? It should not be able to bypass the OS permissions system.

    What I guess I’m asking is what isolation by browser will really do for me. I am trading off a lot of features that will be handy, but what have I won in privacy? I am still using the service.

    I don’t know what an app with only notification permissions can really do, but I guess the answer is “more than it should”…

    noodlejetski,

    even if you deny all those permissions, they’ll still be able to track everything what you do in the app, which is enough to build a profile on you including interests, social graph, and even personality traits.

    apis,

    If it were me, I’d use that browser solely for FB. Firefox allows one to have multiple instances. Harden it as much as you can whilst still able to use the bits of FB you’re interested in.

    Redoomed, in Privacy friendly authenticator ?

    2FAS which seems recommended for data privacy.

    By whom?

    There is a discussion in the Privacy Guides forum on 2FAS that you might want to read.


    Also, you don’t specify which platform you’re using. As @I_Am_Jacks_____ mentioned, Aegis for Android is great. For iOS, the pull request to include ente Auth in the Privacy Guides recommendation page for authenticator apps is already merged. It will reflect on the live website once the Privacy Guides team decides to release v3.17 of the site.

    Flax_vert, in It seems Gen Z is just fine with parents knowing where they are all the time

    Used to share my location with my dad until he kept sending me a McDonald’s order everytime I was at McDonald’s. Then turned it off, lol. My mum still has it.

    OpticalMoose, in Practical file manager on Linux Ubuntu
    @OpticalMoose@discuss.tchncs.de avatar

    You could try Dolphin. It’s the default file manager in KDE, but I think you can install it by itself.

    It should be available as an apt package in Ubuntu.

    Lemmchen,

    Dolphin is so much better!

    Skimmer, in Privacy friendly clock app ?

    I like Clock You.

    isVeryLoud,

    The name sounds like an insult haha

    apis,

    Or like someone just got smacked upside of their head.

    Illecors, in Privacy friendly Ubuntu antivirus ?

    AVs in Linux realm exist mostly for scanning windows stuff for email attachments, shared storage, etc.

    Gazumi, in Privacy friendly clock app ?

    I use this: www.f-droid.org/packages/com.best.deskclock/

    The funniest answer I saw to the question of the most privacy respecting clock was “a sundial”, but thats just my childish sense of humour.

    Lemongrab,
    @Lemongrab@lemmy.one avatar

    +1 for this app. Functions like stock clock with the needed permissions.

    stifle867, in Privacy friendly Ubuntu antivirus ?

    Again, seriously question why you need this but you could look into ClamAV. If you’re coming from Windows you’re going to be in for a shock if you blindly try and adapt every concept from Windows straight to Linux.

    QuazarOmega,

    It’s not a bad thing to have an antivirus, especially now that we see more viruses made for Linux specifically. I still don’t worry much myself, because the number isn’t that huge, but if there was an easy to use antivirus GUI app I think I’d try it

    stifle867,

    Anyone is welcome to install an AV on their device if they so choose. I was more alluding to the fact that there are many things you should be doing to prevent malicious programs from running on your computer in the first place. By the time it makes it onto your system you’re really just hoping that an AV would happen to catch it.

    QuazarOmega,

    Yes, that’s a good point, being careful goes a long way, though exploits can really come from anywhere.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacyguides@lemmy.one
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #