Ubuntu Security?

[su-37]

Hey this is just a post to find out why ubuntu (a great os) is so secure? If anyone has any information on why it is or how, feel free to post.
Thanks oh and the reason for this is my dad just cant believe Ubuntu is more secure than windows. ... Yes he does use Vista.
:P

[lovinglinux]

Ubuntu Security (http://ubuntuforums.org/showthread.php?t=765421)

[Johnsie]

There are a large number of security issues on Ubuntu. There is also alot of fanboyism in the Ubuntu community where sometimes it seems like people are in denial of these security issues. They even move threads to try and bury the subject. Yes Windows has vulnerabilities and so does Ubuntu, but people on this site will always have brown-tinted eyesight so take what people say with a pinch of salt ;-)

Anyway, here are some real issues that have confronted Ubuntu in the past:

http://www.ubuntu.com/usn

The thing to bear in mind is that no modern operating system is fully safe on the net. A good hacker will never be seen or noticed ;-)

[MarcusW]

There are a large number of security issues on Ubuntu. There is also alot of fanboyism in the Ubuntu community where sometimes it seems like people are in denial of these security issues. They even move threads to try and bury the subject. Yes Windows has vulnerabilities and so does Ubuntu, but people on this site will always have brown-tinted eyesight so take what people say with a pinch of salt ;-)

Anyway, here are some real issues that have confronted Ubuntu in the past:

http://www.ubuntu.com/usn

The thing to bear in mind is that no modern operating system is fully safe on the net. A good hacker will never be seen or noticed ;-)

Fixed security holes really makes me worried. ;)

[Random-penguin]

There are a large number of security issues on Ubuntu. There is also alot of fanboyism in the Ubuntu community where sometimes it seems like people are in denial of these security issues. They even move threads to try and bury the subject. Yes Windows has vulnerabilities and so does Ubuntu, but people on this site will always have brown-tinted eyesight so take what people say with a pinch of salt ;-)

Anyway, here are some real issues that have confronted Ubuntu in the past:

http://www.ubuntu.com/usn

The thing to bear in mind is that no modern operating system is fully safe on the net. A good hacker will never be seen or noticed ;-)


This is of course very much true, however I believe the question was Ubuntu in comparison to Windows Vista. On this point Linux, with it's use of different users for different tasks makes it much more secure (the use of root or sudo in Ubuntu). Also the community nature of patching the kernel makes for a very swift response time to vulnerabilities... often found by the community itself.

I dual boot vista (I need certain software unfortunately) and to keep windows safe I spend far more time administrating it with scans etc than I do with Ubuntu not to mention defragmenting etc. Antivirus Software has a real time inpact on responsiveness; Ubuntu just flies along.

Yes, of course we still need to follow good internet practise (add those security add-ons to Firefox), scan for rootkits, viruses (mainly for our windows counerparts) and setup a firewall... But, really there is no comparrison to Windows.

[Johnsie]

If Ubuntu was infected you wouldn't even know though because you have nothing to look out for that kind of thing. Linux boxes get pwned quite regularly, but they are often targetted differently. For example many of the web servers that get hacked every year. There are also people who break into computers, steal information and then clear up any tracks they've left on the logs. A good hacker will know his/her target and try not to get caught.

Root etc. may work well in some circumstances, but by no means should it ever be considered the be-all and end-all in IT security. There are many ways to compromise those systems.


As for the USN being a list of 'fixed' bugs. There was a time when each and every one of those bugs wasn't a fixed bug, and new bugs are constantly being discovered and added to the list. It's just an example of the fact that new security risks are being discovered in Ubuntu all the time.

[lovinglinux]

As for the USN being a list of 'fixed' bugs. There was a time when each and every one of those bugs wasn't a fixed bug, and new bugs are constantly being discovered and added to the list. It's just an example of the fact that new security risks are being discovered in Ubuntu all the time.

If you are really concerned about zero-day attacks, then use Apparmor. Otherwise, you have to wait for those bugs to be detected and fixed. Anyway, I'm sure they are fixed pretty fast.

[Random-penguin]

If Ubuntu was infected you wouldn't even know though because you have nothing to look out for that kind of thing. Linux boxes get pwned quite regularly, but they are often targetted differently. For example many of the web servers that get hacked every year. There are also people who break into computers, steal information and then clear up any tracks they've left on the logs. A good hacker will know his/her target and try not to get caught.

Root etc. may work well in some circumstances, but by no means should it ever be considered the be-all and end-all in IT security. There are many ways to compromise those systems.


As for the USN being a list of 'fixed' bugs. There was a time when each and every one of those bugs wasn't a fixed bug, and new bugs are constantly being discovered and added to the list. It's just an example of the fact that new security risks are being discovered in Ubuntu all the time.


Yes but running a server is a little bit different to what the average home user uses. If you open up ports to the net then you take greater care of your system by using various tools such as tripwire, SATAN etc; keep track of user permissions, change passwords regularly.

Of course some hacker... actually cracker could compromise your machine, but linux is still inherently much more secure than windows.

[aysiu]

They even move threads to try and bury the subject. Actually, we move threads here because this ends up just being a "Linux is invincible" and "Linux is just as bad as Windows" circular "debate" that clutters up our forums.

If you have a genuine problem with a thread move, post in the Resolution Center. I don't really appreciate your passive-aggressive conspiracy theory remarks.

[Random-penguin]

Actually, we move threads here because this ends up just being a "Linux is invincible" and "Linux is just as bad as Windows" circular "debate" that clutters up our forums.

If you have a genuine problem with a thread move, post in the Resolution Center. I don't really appreciate your passive-aggressive conspiracy theory remarks.


Here, here!!