Watch out for security patches for anything you use that uses GnuPG's crypto library!

Watch out for security patches for anything you use that uses GnuPG's crypto library!

That may actually be more things than you think. Things like routers, phones or phone apps, etc. and not just on Linux. GnuPG is widely used cross platform.

#linux #Security #SysAdmin #Windows
http://www.theregister.co.uk/2017/07/04/gnupg_crypto_library_cracked_look_for_patches/

OpenSUSE ups the security game in Tumbleweed with PIE support enabled as the default for all binaries

OpenSUSE ups the security game in Tumbleweed with PIE support enabled as the default for all binaries

FTA:
"Tumbleweed is now built with PIE (Position Independent Executables) as default. [...] This allows full ASLR (address space randomization) for all binaries without specific need to change your actual package, making attacks much harder,"

#Linux #Security #OpenSUSE
http://news.softpedia.com/news/opensuse-tumbleweed-os-is-now-built-with-pie-as-default-for-increased-security-516527.shtml?utm_content=buffer68f37&utm_medium=social&utm_source=plus.google.com&utm_campaign=buffer

Shorewall Firewall configuration tool for Linux

Shorewall Firewall configuration tool for Linux

Shorewall is a great way to do your own detailed, customized, firewall configuration. Just make sure before you use it that your distro doesn't have it's own, pre-loaded firewall configuration tool installed and already managing your firewall settings. OpenSUSE for example has it's own so read the OpenSUSE docs on how to properly disable it.

This would be especially handy for small, single purpose Linux system, eg a RasPi based firewall, but it's also a good tool for larger firewall setups too.

#Linux #Security #firewall
https://www.linux.com/learn/security/2017/2/introduction-shorewall-firewall-tool

Learning Linux -Make your own motion detecting security camera with "motion"

Learning Linux -Make your own motion detecting security camera with "motion"

I've covered motion before, but it's a powerful and complex piece of software so configuring it can be confusing at first. Plus there are many different ways to use it so I'm happy to link any tutorials I find.

Motion is simply software motion detection that can turn any Linux supported webcam into a sophisticated security system. Configuring it properly will lead to optimal results with better detection and fewer false positives.

This article is geared toward Ubuntu but it will be similar for any Linux without training wheels too.

#Linux   #Security   #MotionDetection   #Webcam  
https://www.howtoforge.com/tutorial/motion-detection-on-linux/

The Linux Mint breach hack explained

The Linux Mint breach hack explained

The Linux Mint website and forums were hacked recently resulting in stolen user data and a backdoored version of the Mint ISO's being uploaded to the download area. At least several hundred systems were backdoored as a result.

#Linux   #Security   #Webmaster  
http://www.zdnet.com/article/hacker-hundreds-were-tricked-into-installing-linux-mint-backdoor/

Is your home or small business Linux secure?

Is your home or small business Linux secure?

 Good sysadmins know many ways to secure their Linux systems, but often home, hobby, and small business users don't put enough emphasis on security. Good security doesn't put all it's eggs in one basket. It's a layered, integrated system of software and behaviour.
A common mistake is for people to just activate a firewall and call it a day.
 One of the tools in my security toolbox is fail2ban. I use it on everything from personal systems to Enterprise servers. It's a simple tool conceptually. It monitors the services you choose for failed access attempts and bans the IP address making the attempt. This is important for stopping brute force attacks. Alone it's not good security, but as part of a larger security system and plan, it's a great tool.
 One tip is to not to just jump in with permanent bans, use timed bans where appropriate. For example, ssh is a particularly bad service to perma-ban because it's all too easy to lock yourself out accidentally.
 Read the docs and figure out your ban options and how fail2ban works. Used properly it's very powerful. Used wrong it can do more harm than good.
 Anyway, take a look at fail2ban and don't let the app's crappy website put you off. Google it, look for good tutorials, and give it a shot. It should be in the default repository of most Linux distributions so installation should be simple.

#Sysadmin   #linux   #security  
http://www.fail2ban.org/wiki/index.php/Main_Page

How-to: Using Google two factor authentication with ssh on your Linux box

How-to: Using Google two factor authentication with ssh on your Linux box

Two factor authentication is a great way to increase the security of your accounts. Google offers it for your Google accounts and now you can use it to secure your Linux box. How cool is that?

Note that while this tutorial is based around CentOS, it should be simple to apply to most Linux distributions with little modification.

For more info, here is a video on using two factor authentication with your Google account.
https://youtu.be/zMabEyrtPRg

I suggest installing the Google Authenticator app.

#Linux   #Security   #Google   #SSH  
https://www.howtoforge.com/tutorial/secure-ssh-with-google-authenticator-on-centos-7/

Real Talk - Not even Linux is invulnerable. This was a bad year for security.

Real Talk - Not even Linux is invulnerable. This was a bad year for security.

Like Quinn Norton says, Everything is broken. Sad but true.
https://medium.com/message/everything-is-broken-81e5f33a24e1

#Linux   #security  
http://www.pcworld.com/article/2859122/your-linux-pc-isnt-as-secure-as-you-think-it-is.html

Does Qubes demonstrate the future of desktop computing?

Does Qubes demonstrate the future of desktop computing?

Every SysAdmin knows that users do stupid things and that the all the training and policies in the world can't replace good idiot-proofing.
One common example happens when users browse questionable websites in one window while browsing their locally stored corporate financial info in another window. The security breaches they open can allow serious data leaks. Qubes takes the approach of isolating tasks instead of trying to modify user behaviour. By virtualizing each task from the other, these types of security issues are drastically reduced.

#Linux   #Security   #Windows   #SysAdmin  
http://www.linuxinsider.com/story/Security-Minded-Qubes-OS-Will-Satisfy-Your-Yen-for-Xen-81282.html