linux isnt immune to viruses even though its not as bad as windows

what should i do to be safe if i have a safe browser, vm, but pirate and download risky things? i know its a vm but i still dont want to have to delete everything in the vm if something happens. also the malware doesnt go to the router and spread rigt???

  • gandalfthewhite@lemmy.ml
    link
    fedilink
    arrow-up
    1
    ·
    1 month ago

    Honestly the biggest things are don’t run shit as root and don’t expose port 22. Especially don’t run things you downloaded from some website as root but in general just don’t run things as root. That’ll handle most problems that are likely to arise.

    • data1701d (He/Him)@startrek.website
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 month ago

      I’ll also add that if you do enable SSH and are stupid enough to expose port 22, then at least make sure you have key-based authentication instead of password authentication and keep your keys safe.

  • Hakuso@scribe.disroot.org
    link
    fedilink
    arrow-up
    1
    ·
    1 month ago

    I have always kept everything airgapped, the best security is isolation.

    I download stuff to a tablet, with nothing of value or interest on it, dump it to the sd card, then move it to the offline systems with a USB card reader.

    Even my servers (mostly ARM SBCs with one RISC-V) were set up to work over a wired offline network.

    Also most of my pirated stuff is things I own that I yarred for the crack if it was more convenient than cracking it myself.

    • WeirdGoesPro@lemmy.dbzer0.com
      link
      fedilink
      arrow-up
      0
      arrow-down
      2
      ·
      1 month ago

      Not gonna lie, that sounds like overkill unless you’re doing something massively illegal. Your system makes no sense for preventing detection of torrent downloading since the download to the tablet could be detected just like the download to a server, and any precaution to avoid torrent surveillance on the tablet could easily be done on the server itself.

      So…are you doing something massively illegal? Take a seat…

      Chris Hansen looking like he knows what you did

  • Clark@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    1 month ago

    Use Qubes OS. Do not update anything including Tor browser and the OS. Just install the new version as soon as it is released on Qubes OS website. Otherwise you will probably get a virus. I know this from experience, please take this into account

        • distal@lemmy.ml
          link
          fedilink
          arrow-up
          0
          ·
          edit-2
          1 month ago

          You know you can build Qubes from source right? You know you have checksums? Do you know how difficult it is to compromise something like fucking Qubes, thee OS built by people who spend upwards of 12 hours a day obsessing about cyber security? There are too many eyes on it. It’s like saying Emacs is compromised.

          • Clark@lemmy.ml
            link
            fedilink
            arrow-up
            0
            ·
            1 month ago

            I’m not blaming Qubes OS, I’m blaming fedora. I know that Qubes OS itself is reputable and reliable. What do you mean with building from source? So you don’t use the default updater?

            • distal@lemmy.ml
              link
              fedilink
              arrow-up
              0
              ·
              edit-2
              1 month ago

              I’m sorry, I misread. I thought you wrote to not use Qubes. Do you have any sources regarding the stuff about Fedora? I don’t mean to deboonk you, I am genuinely curious and I dislike fedora anyway for being so commercially oriented.

              • Clark@lemmy.ml
                link
                fedilink
                arrow-up
                0
                ·
                1 month ago

                I myself have experienced it. Of course it would be a very big event if something like that came out from a youtuber but I assure you that Im sure of it because of cosmetic changes in fonts and a lot of slow downs

                • distal@lemmy.ml
                  link
                  fedilink
                  arrow-up
                  0
                  ·
                  edit-2
                  1 month ago

                  I mean fonts can change due to updates. Let’s say I update KDE, I might break my theming completely.