RetroBBS - rocksolid.shared.hacking - Re: Rant on opsec problems of Linux

Rant on opsec problems of Linux

<090d19c3024a80fc57feefecec9bad5d@news.novabbs.org>

https://rocksolidbbs.com/rocksolid/article-flat.php?id=358&group=rocksolid.shared.hacking#358

copy link Newsgroups: rocksolid.shared.hacking

Path: i2pn2.org!.POSTED.10.136.143.187!not-for-mail
From: Anonymous@news.novabbs.org (Anonymous)
Newsgroups: rocksolid.shared.hacking
Subject: Rant on opsec problems of Linux
Date: Sat, 5 Jun 2021 11:03:56 +0000
Organization: Rocksolid Light
Message-ID: <090d19c3024a80fc57feefecec9bad5d@news.novabbs.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Info: i2pn2.org; posting-account="retrobbs1"; posting-host="10.136.143.187";
logging-data="9014"; mail-complaints-to="usenet@i2pn2.org"
User-Agent: Rocksolid Light (news.novabbs.com/getrslight)
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on novabbs.org
X-Rslight-Site: $2y$10$Fe/hzLsg4SKuoDPyIvkgMuKkgGGqSNCtTf5fCmT7NPupGMZ0wgVIi

by: Anonymous - Sat, 5 Jun 2021 11:03 UTC

https://madaidans-insecurities.github.io/linux.html

Someone giving a quick overview about all the opsec problems in Linux, which turn out to be more than I thought. Kind of biased, but real interesting. Also links to some cool talks:

https://events19.linuxfoundation.org/wp-content/uploads/2017/11/Syzbot-and-the-Tale-of-Thousand-Kernel-Bugs-Dmitry-Vyukov-Google.pdf

https://jon.oberheide.org/files/syscan12-exploitinglinux.pdf

After having read most of it, I'm still a Linux user, but a more sober one.

Qubes rules !
--
Posted on Rocksolid Light

Re: Rant on opsec problems of Linux

<751112ae3729ccf1da8d5dc6a6f52564@rocksolidbbs.com>

copy mid

https://rocksolidbbs.com/rocksolid/article-flat.php?id=359&group=rocksolid.shared.hacking#359

copy link Newsgroups: rocksolid.shared.hacking

Path: i2pn2.org!.POSTED.rocksolidbbs.com!not-for-mail
From: Anonymous@rocksolidbbs.com (Anonymous)
Newsgroups: rocksolid.shared.hacking
Subject: Re: Rant on opsec problems of Linux
Date: Sat, 5 Jun 2021 11:29:43 +0000
Organization: RetroBBS
Message-ID: <751112ae3729ccf1da8d5dc6a6f52564@rocksolidbbs.com>
References: <090d19c3024a80fc57feefecec9bad5d@news.novabbs.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Info: i2pn2.org; posting-account="retrobbs1"; posting-host="rocksolidbbs.com:192.241.178.238";
logging-data="14348"; mail-complaints-to="usenet@i2pn2.org"
User-Agent: Rocksolid Light (news.novabbs.com/getrslight)
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on rocksolidbbs.com
X-Rslight-Site: $2y$10$/4uOx3HcmU5HwMj0qkt61OVOVpbkHVqlq54GfNsclTHK6EtM1XS42

by: Anonymous - Sat, 5 Jun 2021 11:29 UTC

Anonymous wrote:

> https://madaidans-insecurities.github.io/linux.html

> Someone giving a quick overview about all the opsec problems in Linux, which turn out to be more than I thought. Kind of biased, but real interesting.

"Usually, the standard user is part of the sudo group which makes a sudo password security theater."

I think Ubuntu does this, maybe some others. I never thought sudo was a better choice than just su to root when necessary.

Interesting all the details provided. Thanks for the link.

> Qubes rules !

Still haven't tried Qubes. I need to look into it.
--
Posted on RetroBBS

Last week's pet, this week's special.

rocksolid / Hacking / Re: Rant on opsec problems of Linux

Subject	Author
Rant on opsec problems of Linux	Anonymous
Re: Rant on opsec problems of Linux	Anonymous