New answers tagged linux
0
votes
ESTABLISHED TCP connections after opening browser in linux
It may be "normal", but it's not okay. At least for Firefox, there is a detailed guide published by Mozilla to disabling all of the huge number of "automatic connections" made for &...
7
votes
ESTABLISHED TCP connections after opening browser in linux
In most systems, this is the new normal.
There is vendor documentation on why you might find some of them desirable, as well as how to stop most automatic connections made by Firefox. However, as with ...
- 248
19
votes
ESTABLISHED TCP connections after opening browser in linux
I'm not going to try and track down the individual connections in that list, but broadly speaking, yeah, it's extremely common for software to automatically make some TCP connections upon starting. ...
- 42.8k
1
vote
How to protect files in use on a system powered on from physical theft or tampering?
Your first step is to ensure that the system reliably locks when not in use (sleep mode or session lock).
The laptop may be powered on, but at that point the only ways to access the data are network ...
- 22.7k
1
vote
Security and practicality of passing secrets to services running as non-privileged user
I have seen an approach that involves two non-secret segments: one in the code, and a second in the configuration file. Each is typically 32 random bytes base64-encoded.
These two parts are combined ...
- 11
0
votes
Local Burp Proxy not showing routed packets
In your iptables rules, you redirect all TCP packets from source 10.42.0.62, which probably include those of DNS requests. Although ordinary clients use UDP for DNS requests which should not be having ...
- 121
0
votes
How can I sandbox a Wine application on Linux?
sandwine is rather young (as of March 2023) and I don't have Excel or Word at hand to test the with sandwine, but it is a Wine sandbox with multiple options for X11 builtin and it may work for you. ...
6
votes
Accepted
User isolation in LAMP
In a production environment, such as a commercial web hosting service, what kind of setup can I expect to find?
In small operations (i.e. not separated virtual instances), I've usually seen this done ...
- 22.7k
0
votes
Preventing low-skill physical access by creating fake desktop environment
I'd do it backwards. I'd have a full system that starts on bootup that can be accessed by anyone but your protected system runs as a virtual machine or subsystem. You can protect, encrypt, and hide ...
- 126k
1
vote
Preventing low-skill physical access by creating fake desktop environment
The mitigations to physical access are:
Physical security
User access control (Passwords/smart cards/etc)
Hard drive encryption
Obfuscation will never replace any of these, no matter how tempting it ...
- 1,747
Top 50 recent answers are included