Mastodawn

Linux is NOT private out of the box

Linux is NOT private out of the box - Lemmy.World

Linux distros log a TON about what you’re doing by default. Tonnes of software uses systemd-journald to log errors, the bash shell saves everything you type into the terminal, and wtmp, btmp, utmp all track exactly who is logged in and when, and the kernel uses dmesg to log a bunch of stuff. While the system isn’t sending these logs to Microsoft or Google, anyone who gets into your system like police or hackers can see almost everything that you have been doing. If you want to be private, you must disable them.

Show thread

Scott 🇨🇦🏴‍☠️Feb 4

Thanks for including resources on how to do all of that. /s

Show thread

LadyMeow Feb 4

I would personally not recommend disabling all these things, and would recommend full disk encryption if you are worried about such things. Luks, vericrypt, probably others idk.

Show thread

Scott 🇨🇦🏴‍☠️Feb 4

I don’t know enough about Linux to even start messing with the system. 🙂

Show thread

LadyMeow

No problem then! And more reason to not go about Dias’s long stuff, the logs are very helpful for finding out why what you thought should be happening, isn’t!

If uou were also worried about someone seizing your drives and thus getting your logs, then disk encryption, though like with all privacy and security minded stuff there is a convenience tradeoff. Also, if you lose the pass phrase, well… everything on the disk is gone.

linuxvox.com/blog/linux-luks-encryption/

Looks to be an ok guide to luks, if you wanted.

Linux LUKS Encryption: A Comprehensive Guide

In the digital age, data security is of utmost importance. Linux Unified Key Setup (LUKS) is a well-known disk encryption specification for Linux systems. It provides a standard, secure, and user-friendly way to encrypt block devices such as hard drives and USB drives. This blog post will delve into the fundamental concepts of Linux LUKS encryption, show you how to use it, discuss common practices, and present best practices to ensure your data remains safe.

linuxvox

Show thread

Scott 🇨🇦🏴‍☠️Feb 5

I’ve encrypted my external hard drives but I’ll have a look at the link. Much appreciated.