Results 1 to 8 of 8

Thread: How to make safe my system from any hacker or intruders?

  1. #1
    Join Date
    Aug 2023
    Beans
    1

    How to make safe my system from any hacker or intruders?

    Hi, I am new to the Ubuntu 22.04 LTS version. Before I used Zorin OS. I love Linux because of its security. However, I am not an expert to most secure my system. So I need a suggestion on how to secure my system from hacker and intruders. Thanks guys.

  2. #2
    Join Date
    Mar 2010
    Location
    /home
    Beans
    9,520
    Distro
    Xubuntu

    Re: How to make safe my system from any hacker or intruders?

    Hi and welcome to the forums

    Start by reading the security sticky here:
    https://ubuntuforums.org/showthread.php?t=510812

    In general, the following tips would be my recommendations:

    1. only install software from the official Ubuntu repositories

    2. enable the firewall, which you can do in the terminal with
    Code:
    sudo ufw enable
    3. keep the system updated and choose LTS versions

    4. make sure your router/modem is secured

  3. #3
    Join Date
    Mar 2010
    Location
    USA
    Beans
    Hidden!
    Distro
    Ubuntu Development Release

    Re: How to make safe my system from any hacker or intruders?

    Security starts with the User.

    Most times it take some user interaction to install something that is infected. Always scan something new for viruses if installing from an untrusted source.

    The first User created in most OS'es, including Ubuntu, is an Administrative User. That way, it gives that user the rights and privilegedes to make changes to the system. There is nothing that says, that you need to use that account, except for maintenance and updates. If you use another non-admin account "daily", that does not have those rights, then changes cannot be made by viruses or other attacks to the system.

    You want to be safe, but like surfing the web? Create another user, that is not an Administrator. My instructor in Cyber-Security would go so far, in that he personally would creating a special, separate user, that he only used to do online banking, and online bill pays... That is all that user account did from that computer user account...

    Snap Applications introduce a new Security risk factor (I'm sorry to say)... Applications installed by APT, needed admin elevation to install. APT needs digital signing and trusted signing keys for installation. With Snap app's there is now a way to introduce things into the system via non-admin User rights. Install Snap app's only through Snap install and the Snap Store at snap.io. (not outside sources)

    Always use one of the main browsers, that may have security built in, or at least the ability to show the address of links, if the cursor is hovered over it, before you select it...
    Be very wary of suspicious links on webpages and emails that seem out-of-sorts. Most people don't know that Firefox contains built-in Phishing and Malware Protection in the browser to try to keep you safe. There are also add-ons/extensions, such as "Total Webshield" that add more protection.

    Security is really multi-fauceted, and not solely the responsibility of the OS, firewalls, or virus protection software. It starts with common sense of the User.
    Last edited by MAFoElffen; September 7th, 2023 at 04:38 PM.

    "Concurrent coexistence of Windows, Linux and UNIX..." || Ubuntu user # 33563, Linux user # 533637
    Sticky: Graphics Resolution | UbuntuForums 'system-info' Script | Posting Guidelines | Code Tags

  4. #4
    Join Date
    Mar 2010
    Location
    Squidbilly-Land
    Beans
    Hidden!
    Distro
    Ubuntu

    Re: How to make safe my system from any hacker or intruders?

    Quote Originally Posted by neuron51 View Post
    Hi, I am new to the Ubuntu 22.04 LTS version. Before I used Zorin OS. I love Linux because of its security. However, I am not an expert to most secure my system. So I need a suggestion on how to secure my system from hacker and intruders. Thanks guys.
    Take your computer. Unplug it from the wall both power and ethernet. Remove all storage from the system, so if someone breaks into your home, the computer won't boot. That's the only way.

    I suspect you have slightly more risk tolerance, however. Yes? You are willing to accept some risks to have a working, networked, computer that connects to the internet? Yes? If so,

    1. Get and configure a proper network router. A router is the first line of defense for all networks.
    2. Patch and maintain the router firmware at least monthly.
    3. If you notice the router hasn't been updated in more than 2-3 months, see if it is still supported. If not, buy a new router that is supported OR switch to a more capable router which will tend to have longer support periods. For example, my router has been maintained since 2014, whereas most consumer routers only get 3-5 yrs of support, before it is time to buy new.
    4. Don't use wifi. If the router has wifi, disable it. Wifi is netoriously non-secure. Problems that existed for 20+ yrs for all wifi protocols have been found. There is a high likeliness that at least 2 other wifi protocol errors exist based on security coding studies. If the wifi router implementation isn't professionally performed, there could be over 20 wifi protocol errors that are critical, still being carried forward.
    5. Never enable UPnP or WDS on the router. These conveniences are anti-security.
    6. Connect your computer to the router using an ethernet cable.
    7. Follow the "Ubuntu Basic Security" guidelines.
    8. Train all users to read popup dialogs, since all the security settings in the world can be undone by a single users clicking "OK" in a dialog box. For the 10,000 decisions we make weekly, only 1 mistake can have our systems taken over completely. If we stay away from nefarious parts of the internet, we can reduce those risks some.
    9. Patch your Ubuntu OS weekly.
    10. Only run LTS releases
    11. Migrate to a new LTS release a few MONTHS before the current release you are using ends support. Never let support lapse.
    12. Setup automatic, daily, versioned, backups. Test the restore to ensure you are proficient. Best to take the backup storage with you to some other location for the restore test. You'll learn much about what you forgot to bring or have included in the backups. I can admit it took me 5 restore attempts and tweaks to what I backed up before I had a solution that was workable and sufficiently efficient on time to backup, time to restore, and storage used.

  5. #5
    Join Date
    Jun 2010
    Location
    London, England
    Beans
    Hidden!
    Distro
    Ubuntu Development Release

    Re: How to make safe my system from any hacker or intruders?

    From the beginning the Ubuntu developers set out to provide a Linux distribution that was easy to use for non technical users. That does not mean that it is less secure than other Linux distributions. Unlike some distributions we cannot login as an Administrator. When we log in it is as a standard user. We are allowed to work as an Administrator temporarily when running commands entered with the prefix of sudo. Actually, the Administrator account is locked in Ubuntu. This means that if someone gets access to our machine when we are logged in they cannot make any changes to the OS because they do not know our password. Or, do they? So, please add to the list:

    Keep your login password secret.

    https://help.ubuntu.com/community/RootSudo


    Regards
    It is a machine. It is more stupid than we are. It will not stop us from doing stupid things.
    Ubuntu user #33,200. Linux user #530,530


  6. #6
    Join Date
    Feb 2019
    Location
    Virginia
    Beans
    377
    Distro
    Xubuntu 22.04 Jammy Jellyfish

    Re: How to make safe my system from any hacker or intruders?

    Also, be sure you know what you are doing if you are, or thinking about, allowing any remote access to your LAN network. Best to not allow any & have all inbound ports closed. Otherwise, hopefully you would be using a locally hosted remote access VPN, or at least SSH with key-based authentication. Even with these, I like to have the server that accepts this inbound traffic set up on a separate subnet at home from the real LAN net.

  7. #7
    Join Date
    Jul 2013
    Location
    Wisconsin
    Beans
    4,967

    Re: How to make safe my system from any hacker or intruders?

    The Ubuntu Security Podcast, episodes 152-154, offers a complete orientation to the topic from a Canonical security engineer, specifically made for new users.

  8. #8
    Join Date
    Aug 2016
    Location
    Wandering
    Beans
    Hidden!
    Distro
    Xubuntu Development Release

    Re: How to make safe my system from any hacker or intruders?

    Quote Originally Posted by ian-weisser View Post
    The Ubuntu Security Podcast, episodes 152-154, offers a complete orientation to the topic from a Canonical security engineer, specifically made for new users.
    And that's a BIG +1
    I Never miss a podcast, even if I have to go back and catch up on one I missed.
    A whole boat load of great information to be had.
    With realization of one's own potential and self-confidence in one's ability, one can build a better world.
    Dalai Lama>>
    Code Tags | System-info | Forum Guide lines | Arch Linux, Debian Unstable, FreeBSD

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •