I currently have a dual boot - Ubuntu 10.10 (the latest one) and Windows XP.If I install Ubuntu to also run within Windows will I be just as protected against malware as when I boot directly into Ubuntu?
Does anyone know if it would be possible to do this? I read of people who have run Windows Server 2003 under qemu.. but i was wondering if i could get it easily to work in a secure sandbox, so i could run it as a internet server - knowing that it was secure and no one could then hack my computer.
yesterday I ordered some software on the Net.Early this morning, I got a call from my bank someone else tried to charge to my debit card.I called the company I ordered from to alert them and they assured me it had to be my computer security because theirs was checked, upgraded regularly and above reproach.Fortunately, the bank caught it in time and my account wasn't debited. After I assured them I didn't order anything from Bed, Bath and Beyond, the bank shut down my card and I had to apply for another.
I was shocked. You hear about it but never imagine it will happen to you. I began to wonder and worry if it was because I was using Linux and it wasn't as secure as Microsoft.I'm isolated in a very small town in West Texas so I order some things on the Net.I loaded the full version of Ubuntu "Lucid Lynx" 10.04 from a 4 disk set and downloaded all the upgrades; almost five hundred and set everything up the way I wanted. My question is: Are there programs running among the Ubuntu build to assure a secure transaction on the net or do I have to load others and a fire wall like Windows? That's one of the reasons I left Microsoft behind was the "Auntie-viral" programs took over and almost became a competing system.
I'm an Oracle DBA and started working for my current employer about 4 months ago. This past weekend an alert re: FS space brought my attention to /var/spool/clientmqueue (full of mail re: cron jobs) and the fact that sendmail is not running on our Linux servers.I'm told that the IT security team deemed sendmail too vulnerable so we don't run it.Aside from FS filling up and missing notification of issues with crontab entries, I'm concerned that we may be missing notification of potential issues. In other Unix/Linux environments I've seen emails from the print daemon when it experienced problems with specific jobs.
Are there other Linux facilities aside from cron and lpd that use email to advise the users of possible issues? Are there ways to secure sendmail or secure alternatives to sendmail? My primary need/desire is to make sure that emails regarding issues on the server get to the appropriate users. Secondary goal would be to have the ability to use mailx to send mail out. There is No need/desire to receive mail from outside.
I want to do two things: Set up a virtual machine on Windows 7 to run Ubuntu Set up a way for the virtual machine to read the windows disk or windows to have read/write access to the virtual machine's disk. My goal is to have a place where both Ubuntu and Windows can read and write. What software is good for this task? Are their free programs that can run virtual machines? Also if my machine is running Windows 7 64-bit, can I install Ubuntu 32-bit? Or am I forced to use Ubuntu 64-bit? Or does it not matter?
i just finished successfully installing a virtual machine and windows xp. the windows setup finished no errors, but now when i try to boot up it gives me the blue screen of death (see attachment). after the bsod it just reboots.
note: in the screenshot it doesn't look blue but it is. i couldn't pause it so then it would show blue so it ended up black.
I'm installing a new server after this weekend, and it musth have both windows server 2008 r2 and linux (probably ubuntu) running, but I'm wondering which one of them I should run virtual. Windows will be used mostly for rdp and for serving asp.net webpages, linux will host some django-applications and a postgreSQL server etc.
I've decided to format my netbook entirely and just run NBR. I still need a windows install because a lot of stuff still doesn't work correctly in wine.
will running a virtual windows install kill mu netbooks battery life quickly or is it the same as running any other program? also what's a good virtual OS program? I think the only one I know of it vmware or something?
I currently run a Windows 7 Compaq laptop with an Athlon x2 and 4gig of DDR2. I want to either set up a dual-boot on my laptop, or make Linux the Primary with Windows running in something like a virtual box. I am very much into Android and I want to learn Linux as a result of that. So which Distro should be considered in a situation like this.
When you have a computer whose hard drive is partitioned with one part Windows and the other Linux, what are the concerns with viruses and transference across the two systems? Can viruses infect the windows side brought over through the Linux side (Firefox) or are the partitions completely separated? In other words, if all of your Internet voyages are through Firefox under Linux, is there any danger of infecting the Windows side of the computer? What about when having Linux installed within the Windows portion as a virtual system?
I'm running a 64bit Version of Windows 7. I'm also dual-booting 64bit Ubuntu 10.04 (if it matters). However, for this I'm trying to get this working on the Windows 7 side of things. I downloaded the BackTrack 5 32bit GNOME .iso file (BT5-GNOME-32.iso) to my USB stick fine and made a VM on VMware Player. I set the OS as "Other Linux 2.6.x kernel" (if it matters). However, when I go to play my VM I get the following screen. I know I'm supposed to type Startx to launch the GUI. However, nothing happens; it's completely unresponsive (and yes keyboard focus is routed to the VM). There is no response, the cursor doesn't even blink.
I have a problem using PGP encryption. I am running Windows 7 operating system. I have PGP working perfectly fine when running manually through DOS mode (cmd.exe): gpg -ase --always-trust --batch --passphrase myphrase --output c: estdir estfile.csv.pgp -r someword c:estdir estfile.csv
Now the problem happens when I am trying to run same script in Perl in the browser (Perl + IIS are installed locally on my PC). The error I am getting is: gpg: no default secret key: No secret key gpg: C:\testdir\testfile.csv: sign+encrypt failed: No secret key
From what I understand, the secret key is created under my user profile. IIS runs under some default user name, so it does not see the secret key. I am not sure how to solve this problem.
I seem to be missing a secure.log or security.log file. I have Ubuntu 10.04 and can't find this file. I looked in the /var/log and ran a search command to no avail. Does anyone know where this file is or is it called something else. I'm looking for a file that logs any change to the security settings of the system.
I set up my ubuntu server with iptables that only allows ssh in the input chain (and of course established connections) with only the mac adress of my laptop allowed to connect, set up a key with a long passphrase and installed pam_abl plugin. ICMP echo is blocked by default.
The only problem is i log all other attempts to connect to the server and i see a lot of traffic going to ports 445 and 5900.
My question is: Is there a possibility that these attempts could succeed and is there any way to further ensure this server?
Newbie here, I'm thinking of moving mostly to linux to get away from the security holes in Windows. And I have some questions...
How secure is Firefox for doing online banking?
Sometimes I have run into a situation where the bank doesn't support anything but Windows explorer when accessing my accounts. Can this be gotten around safely in Linux?
Is there any way to secure harddisk accessbility ? i want encrypt my hard disk, and partitions that ubuntu installed on that. is there a way ? i want deny all access to hard disk, just my own root account can have access to all.
Ok im new, i know apparmor is running. i was looking for firestarter but their isnt one.....how do i secure this server? i want a good firewall and some virus protection!. also do i need this?
I want to set up a website that hosts very confidential business information. The info needs to be accessed by multiple people in different geographical regions. The entire website would require the high security (ie: there are no little sections that are publicly viewable). While the site will be run with Ubuntu server, I will be hosting it in Amazon's EC2 cloud.
So, if I use the HTTPS protocol with an SSL certificate, am I pretty well reaching the most secure possible situation? Are there any concerns with using the EC2 solution? Obviously there are a LOT of variables involved with maintaining website security, but I want to know if HTTPS is the current best bet (in addition to all the "best practices" of securing a site) or if there is a more robust way of securing content.
I am running UFW, which is set to deny everything but SSH on port 22, OpenVPN on port 1194 and HTTPS on port 443. SSH is set to only allow private key logins, and the root account is disabled. I have AppArmor running for all of my daemons (OpenVPN, Apache2, OpenSSH) and I have Fail2Ban running.
Is there anything else I can do to secure my server from the Internet (it is directly connected, there is no NAT between the Internet and my server).
If I need to get a file to someone I could place it on the server and somehow automate an email telling them there is a file available. They could login to the server based on their email address and a randomly generated key combination and down load the file.I also need it to preform the same function going the other way. Login into my server and place files going to me.
I seem to be missing a secure.log or security.log file. have Ubuntu 10.04 and can't find this file. I looked in the /var/log and ran a search command to no avail. Does anyone know where this file is or is it called something else.looking for a file that logs any change to the security settings of the system.
I always hear 'do NOT install anything from anywhere except the official repositories'. But I find a lot of great apps that are not included in repositories and would like to ask. How actually secure launchpad is? Are the codes reviewed by anyone? How do I make sure that a piece of software is not going to harm my Ubuntu? If I add a PPA for some program I won't going to check it's code every time it updates or am I being too cautious?