You must log in or register to comment.
Thank you for your service.
I use keepassxc and although I’m unlikely to ever install it any other way than through my distro’s package manager without 3rd party repos, this is good to know and hits a personal note.
Fuck all nefarious hackes and scammers. I just re-installed my server and installed crowdsec on it not 24h hours ago, and already got 20 000 bans. Twenty thousand! It’s getting worse and worse and worse and worse.
i’m brand new to linux after decades of windows. is there a comprehensive resource that talks about security on linux beyond just “linux is super secure don’t worry about it”? i feel like the more people continue to ditch windows, the more scammers are going to focus their energy on linux, and i know next to nothing
edit: thank you for all the responses
https://wiki.archlinux.org/title/Security
Applicable to most Linux distros.
That’s a lot of advanced shit, which can totally bork a system. What average user paths can we take program wise or etc?
Like a Linux mint user for instance who’s first stop is diving into a Linux distro of their choice and wanting to gain 80 percent of the gains with 20 percent of the hassle and maintenance.
Basic internet precautions: if you’re looking at a GitHub for a famous piece of software that has only 250 total downloads: double check the Url, read any commands before you run them and compare to documentation if you’re unfamiliar with a piece of one, if you run something in docker or similar containerization for any reason make sure you set the PUID and GUID of the containers to a user other than root or they’ll be root by default
You don’t want anything that advertises next generation encryption. You want tried and true encryption. You want boring encryption.
But post-quantum…
Then you want them to advertise NIST PQ standards
… Which is also not necessary for single user password databases anyway
Yes it is necessary just as my homelab needs to have enterprise hardware and be georedundant. Statements like yours make my very reasonable self hosting purchases hard to financially justify.
The standards are royalty free, so I’m not sure what that has to do with anything
(it’s a joke)
Bad joke
I’m not sure who they were trying to fool? Bluntly, if you’re keeping your passwords in a local repo using strong encryption via something like keepass, you’re generally not the kind of person to see “KeePassXE Pro ultra mega best edition” and blindly download it without vetting the source…
