Explain in detail the practical security of home Linux

Most modern home computer users catch up with this situation, they must protect their computers from all sorts of unpleasant things: anti-virus, anti-spam, firewalls have Enter the everyday language of ordinary people. Even if you don't use Redmond's & squo; that & rsquo; operating system, is it still directly related to this? And what software package should I use? The short answer is directly related, and computer security is everyone's responsibility. OK, if your computer has a special purpose, it doesn't interact with the network, you don't have any connection, and you haven't read a floppy disk or CD or other necessary media, then you don't have to run any such application. . However, people are most likely to find that such computers run as back-end financial systems or run specialized scientific software in the lab. Never use a computer to read e-mail, not browse the Internet, do not read iTWire, or do (electronic) banking. It is necessary to be more cautious when using those computers. We all know that Microsoft Windows attracts virus programmers and malware like feces attracting flies, but Linux users rarely join in any debate about whether an anti-virus system is more bloated than the other. Indeed, some banks are even examining Linux Live CDs for customers to use. In this environment, Internet Banking users will start the computer from the Linux CD and then perform online banking in the Linux environment. If you already use Linux, you don't actually need this, but it proves that Linux provides end users with an understanding of security and security facilities on Microsoft Windows. This understanding is fair: when you use Google to search for "Windows virus outbreaks" against "Linux virus outbreaks", you should check for results of different nature. The results of Windows talk about new viruses attacking commercial networks, large-scale virus outbreaks and witnesses, and a large portion of blue-screen crashes related to viruses and malware. Conversely, the results of Linux talk about the different anti-virus products available, and the term "outbreaks" that is often mentioned appears in the context of "a large number of virus outbreaks become news", also appearing in why Linux protects itself from The virus is better than Windows in this advice article. Online can't actually find an article about any large-scale virus outbreak that hits Linux computers. There are some good reasons for this. Microsoft's defenders will point out that because there are more people using Windows, it has a higher payload for virus writers. This argument is simply a sophistry that hides the truth of the facts. In fact, Linux is safe by default, and Linux users are accustomed to working very reasonably and safely. The most obvious fact is that Linux users rarely log in as root superusers. This means that even if a malicious program is executed, it is impossible to tamper with any system files. It cannot delete system files. It causes new services to be automatically loaded and run at startup. However, despite this, anti-virus on Linux is also a good idea. I will tell you why. The answer is because you probably want to interact with Windows users at some point. This is correct; if it is a Linux user, you don't have to run any anti-virus system for your own personal use, protection. You won't get a macro virus from Microsoft Word. You won't be hit by a multi-year headline virus outbreak. However, you may receive jokes from your home and friends that you should pass to the person running Windows. You may store the file on a Samba server accessed by a Windows client. You might be running a POP server for a Windows machine. Each of these Windows customers is lurking with the danger of being infected by any virus. If you are the one (server) from which they are infected, isn't that bad? On the one hand, roughly speaking, for the benefit of others, you should not be afraid of trouble, but on the other hand, this is part of being a good netizen. I used to mention that the Linux host system delivers the virus like a typhoid. Mary walked around and typhoid infected 47 people. She carried the disease, but she did not suffer any harmful effects.

Similarly, the Linux system that delivers the virus is a communicator of the plague, even though it does not harm itself. Maybe I am too dramatic, but I am frustrated when I hear someone being tortured by a virus. The virus was not detected or marked by my network. Why Windows is so vulnerable, and back to what I just said; contrary to Linux, Microsoft Windows users have been accustomed to logging in with full administrative privileges. Third-party software vendors are not blamed; so many applications refuse to install or run correctly unless operated as an administrator user. I have seen inferior programs that open and read static configuration files inadvertently —— although they never actually need to write such files —— because the configuration files are stored in the directory C:\\Program Files, so the user High-level privileges are required; non-admin users cannot write to this directory. When requesting a software help service, the solution is to “make sure the user is a local administrator”. However, the company shut down during the time that the mouse was not clicked twice, but this is just one of many examples. Linux software obviously needs to be installed in some way. And some application software writes directories and configuration files. Imagine if the program that handles incoming emails can't store data anywhere! However, the difference is deliberate. From the beginning, Linux was built with this concept, and the nominated program can be run like a superuser, but only explicitly specified programs. Ordinary users can temporarily become super users in order to install new programs. This is a habit that is not easy to change. Mainly by using the sudo command, Linux users know that they can only increase the privileges they require, and each time they last for one command. Microsoft has tried to correct this very bad flaw through User Access Control (UAC) within Windows Vista. However, I suspect that someone needs to look forward to discovering complaints about how UAC works. This may not be Microsoft's fault, but rather it is that many software still impose too many unreasonable requirements for administrative access, so that UAC's prompt seems to be excessive. In any case, there is an option to disable UAC, which will make the system as vulnerable as the previous version of Windows. As a result, millions of Windows users are seen as superusers of computers running Outlook and IE. Any program they run —— no matter how good —— has full access to the system without any restrictions. Instead, Linux users can't find it by typing "sudo firefox”. All this shows that one thing that doesn't change because of the operating system is a firewall. This software restricts communication to and from the Internet. You may operate a website that is used internally but does not want to be exposed to the outside world. In this case, blocking the firewall's port 80 will prevent anyone who is not on your network from browsing your site. In fact, you should block all Internet traffic by default and then launch the port you want to use. This means that you know exactly what is allowed, and the results will protect services that are not running on your system, such as FTP, Web, and mail servers. The firewall is also suitable to protect you from denial of service attacks. Another crucial software in the modern world is the anti-spam system. No matter where you are, or whatever software you run, you are the target of Viagra salesmen and dead royal relatives who have the right to use millions of dollars, as long as you send them some cash. Many unsolicited information is meaningless; I have received a penis enlargement advertisement, but I don’t understand anything about making prisons bigger. Maybe I misunderstood. So let's summarize. Home computer security has three —— anti-virus, firewall and anti-spam. Linux is a system that is more secure than Windows; it's not a rhetoric, but because of the different designs and the way it is instilled into the end user. However, if you want to connect to any other computer, you should do your best to consider everyone's safety. For Linux, a good free open source anti-virus system is ClamAV. A superior firewall called iptables is built in. It can be subtly configured as you might like, checking the L7Filter. As for anti-spam, try Anti-Spam SMTP Proxy (ASSP). Be vigilant and secure. Let us listen to your thoughts. Do you think there are other mandatory provisions to ensure home computer security? Is there a better software recommendation? Or do you think it's a waste of time, and anti-virus simply does not burden the processor?