Re: [Trisquel-users] Harden Trisquel

2015-03-15 Thread simonhandel
Hi Cinnamon, I'm glad I could help. I learned a lot on this website: http://www.insanitybit.com Maybe it can help you in the same way it helped me.

Re: [Trisquel-users] Harden Trisquel

2015-03-14 Thread cinnamon
Hi Sim, Those measures should match to my threat model - well really all of us must take steps to protect ourselves to some degree. I am trying to explore that boundary between convenience and security. I will try to read up on mprotect and apparmor - this is the first time I've heard

Re: [Trisquel-users] Harden Trisquel

2015-03-14 Thread cinnamon
Thanks marioxcc, It seems I am learning a lot about copyright law here - it is very complex, but now I can see why it would automatically be proprietary software.

Re: [Trisquel-users] Harden Trisquel

2015-03-14 Thread simonhandel
I don't use any scripts to harden my operating system because in doing the hardening tasks myself I can choose at each step how many convenience I'm willing to sacrifice for security. In my threat model I focus on crackers from outside because I'm the only person who has physical access to

Re: [Trisquel-users] Harden Trisquel

2015-03-14 Thread marioxcc . MT
I'm glad that you found my comment useful. It does seem that it would be proprietary software, but I want to put this in context for a second. If it actually lacks a license (instead of that it has a license but I didn't find it), then it is proprietary software. Maybe the author wouldn't

Re: [Trisquel-users] Harden Trisquel

2015-03-13 Thread cinnamon
Thanks Marioxcc for the lengthy response. I also beleive you - or maybe others have contributed to this discussion I proposed on IRC, and I should acknowledge them. It does seem that it would be proprietary software, but I want to put this in context for a second. Micah Lee is a staff

Re: [Trisquel-users] Harden Trisquel

2015-03-13 Thread cinnamon
Thanks david. I was surprised when it recommended google chrome - apparently because someone convinced him - but it didn't say why. I know google chrome is not secure and should not trust the script. Icedove is better than thunderbird like you said. It's unfortunate the state of usability of

[Trisquel-users] Harden Trisquel

2015-03-10 Thread cinnamon
Hi is there a harden trisquel script? I know there are several guides to increase the security of our os like ubuntu https://github.com/micahflee/linux_harden but it is not quite compatible with trisquel.

Re: [Trisquel-users] Harden Trisquel

2015-03-10 Thread davesamcdxv
I think it should be rather compatible with Trisquel (which is based on Ubuntu), but. Google Chrome Does. Not. make the system more secure (it's Google's browser, for goodness' sake!), and Thunderbird is what you've got with Icedove, pretty much. Having said that I think you can do

Re: [Trisquel-users] Harden Trisquel

2015-03-10 Thread marioxcc . MT
Bear in mind that security doesn't comes canned (metaphorically). You can use scripts to automate part of the process of securing a system, but you shouldn't rely on them to “harden” or whatever it claims to do if you don't understand what they do or why you would need such a thing. The Tor