← Back to context

Comment by hollerith

18 hours ago

>price and security are the reasons why I switched to Linux

What measures do you take to insulate yourself from desktop Linux's really bad security?

Ha, I have nothing on my machine that anyone would want. Yes, my life is that boring. So no, I keep nothing of importance in the drives, just old memories.

Out of the box, I've experienced less spyware-related issues with Linux. I have enabled UFW, installed ClamAV, closed or blocked communication with some ports. But for the most part, I've not had the same problems that had caused system and browser infections. If anything, the badly designed hardware of the machines and systems that I've built tend to cause the problems, for the most part, not to mention my own stupidity. If I do begin to experience, spy or adware-related issues, I suppose I could look into something like this: https://github.com/pi-hole/pi-hole

Though if things got to the point where I'd need more protection, I'd think about the following:

-Keep system and software updated. -Enable firewall (e.g., UFW). -Use strong passwords and MFA. -Install from trusted sources only. -Encrypt disks (e.g., LUKS). -Use SELinux or AppArmor. -Sandbox apps with Flatpak/Wayland. -Install antivirus like ClamAV. -Disable unnecessary services. -Monitor logs and use tools like OpenSnitch. -Switch to CubesOS (qubes-os.org) but I'm not that paranoid, yet :)

I'm just not too tech savvy, but honestly if anyone had enough knowledge, they'd probably could get into my system. That being said, though I consider Linux to be more secure than Windows, no system is 100% secure, in my view.