
The COMPLETE Linux Hardening, Privacy & Security Guide! - Techlore
video description
Date: 2022-04-15
Related videos
Comments and reviews: 10
Attila
Not to be that guy, but recommending Arch in your top 3 in a security/privacy focused video is kinda weird considering how insecure pacman, the AUR and the overall package management on Arch is. Also things are heavily untested. Btw I used Arch for over 6 years so kinda know what I'm talking about.
The firewall topic is. flawed. iptables and nftables are doing nothing else just controlling what goes in an out, firewalld is able to do a lot more than just that.
Recommending PWA over flatpak is also questionable. Also distros/DEs are not collecting data of the users.
You should mention flatpaks a lot earlier on in the video, didn't see podman containers either which would make sense, VBox over KVM makes no sense on Linux. AppArmor is not doing much for you, has zero MLS capabilities so not much in that for sandboxing or proper segmentation. There is no comparison between SELinux and AppArmor as AppArmor - yet again - can't do much in the sandboxing field, and no mention of immutable operating systems.
Not hating on you, it's a good start for anyone who is new to Linux and doens't know much, but you could've done a lot more and thorough research prior to the video.
reply
Not to be that guy, but recommending Arch in your top 3 in a security/privacy focused video is kinda weird considering how insecure pacman, the AUR and the overall package management on Arch is. Also things are heavily untested. Btw I used Arch for over 6 years so kinda know what I'm talking about.
The firewall topic is. flawed. iptables and nftables are doing nothing else just controlling what goes in an out, firewalld is able to do a lot more than just that.
Recommending PWA over flatpak is also questionable. Also distros/DEs are not collecting data of the users.
You should mention flatpaks a lot earlier on in the video, didn't see podman containers either which would make sense, VBox over KVM makes no sense on Linux. AppArmor is not doing much for you, has zero MLS capabilities so not much in that for sandboxing or proper segmentation. There is no comparison between SELinux and AppArmor as AppArmor - yet again - can't do much in the sandboxing field, and no mention of immutable operating systems.
Not hating on you, it's a good start for anyone who is new to Linux and doens't know much, but you could've done a lot more and thorough research prior to the video.
reply
momentomoridoth
I would suggest removing sudo entirely. - its a huge attack vector. even the most recent version of parrot-OS and Debian has an un-patched local exploit - try it yourself by typing this in a regular terminal and see if you get root access. your user does not have to even be in the sudoers file. : sudoedit -s '\' -perl -e 'print -A- x 65536 you can remove sudo by doing an apt-get purge sudo on debian based distros, and just use su root, or a sudo replacement.
reply
I would suggest removing sudo entirely. - its a huge attack vector. even the most recent version of parrot-OS and Debian has an un-patched local exploit - try it yourself by typing this in a regular terminal and see if you get root access. your user does not have to even be in the sudoers file. : sudoedit -s '\' -perl -e 'print -A- x 65536 you can remove sudo by doing an apt-get purge sudo on debian based distros, and just use su root, or a sudo replacement.
reply
Jzombi
10: 16 is it ok to store passwords, emails, and usernames in a notes app on your phone? I keep mine in the default iOS Notes app in a locked note with a complex password and i make sure it is _not_ synced with iCloud ever. It is completely offline. i turned icloud backups for my notes off and i blocked the notes app from using cellular data
reply
10: 16 is it ok to store passwords, emails, and usernames in a notes app on your phone? I keep mine in the default iOS Notes app in a locked note with a complex password and i make sure it is _not_ synced with iCloud ever. It is completely offline. i turned icloud backups for my notes off and i blocked the notes app from using cellular data
reply
SteVeeMixx
Professional and informative video, I love your advice, you are giving us great tips on keeping our digital life safe and secure. I have followed many of your tips from many videos and feel like I have more control. Keep up the great work, and thank you!
reply
Professional and informative video, I love your advice, you are giving us great tips on keeping our digital life safe and secure. I have followed many of your tips from many videos and feel like I have more control. Keep up the great work, and thank you!
reply
Peter
Great video, I think you should've included browser compartmentlization tho. If someone uses a browser to run Discord, Zoom or other spyware like it, that would require lowering security settings to an unacceptable level for all other use cases
reply
Great video, I think you should've included browser compartmentlization tho. If someone uses a browser to run Discord, Zoom or other spyware like it, that would require lowering security settings to an unacceptable level for all other use cases
reply
Rob
May I remind you that systemd was paid for by the United States defense department and no doubt has a backdoor in it paid for by the United States government anybody heard of Snowden
If you want privacy and security use an on systemd distro
reply
May I remind you that systemd was paid for by the United States defense department and no doubt has a backdoor in it paid for by the United States government anybody heard of Snowden
If you want privacy and security use an on systemd distro
reply
Eirik
I managed to get to -1: 45 and now I am commenting - I am sorry, but device password is not your first line of defense. LUKS or any other disk encryption should ALWAYS be your first line of defense.
reply
I managed to get to -1: 45 and now I am commenting - I am sorry, but device password is not your first line of defense. LUKS or any other disk encryption should ALWAYS be your first line of defense.
reply
Chason
I am interested.
You talk too fast. You could make three videos and talk slower. I could not keep up. I quit watching.
Thumbs up anyway. I am not subscribing at this time
reply
I am interested.
You talk too fast. You could make three videos and talk slower. I could not keep up. I quit watching.
Thumbs up anyway. I am not subscribing at this time
reply
Nuke
11: 54
Wait, does GPS give off a signal?
It's a receiver. The only way it sends a signal is if you have an internet connection and some app is accessing your location.
reply
11: 54
Wait, does GPS give off a signal?
It's a receiver. The only way it sends a signal is if you have an internet connection and some app is accessing your location.
reply
Finn
I love how you communicate things, and provide a great amount of knowledge in a digestible, organized and chill manner that everyone can be comfortable with.
reply
I love how you communicate things, and provide a great amount of knowledge in a digestible, organized and chill manner that everyone can be comfortable with.
reply
Add a review, comment
Other channel videos















