25

Privacy Mode The Privacy Mode setting under System Settings > Security & Privacy > Privacy is related to local data. There is no data sent online or to elementary. elementary doesn’t collect usage stats through the OS or anything. Privacy mode and the other privacy settings control an OS component called Zeitgeist, which is an open source library that ...


19

This is a security feature according to an explanation from another Stack Exchange community. Here are the two vulnerabilities solved by that feature: this (sic) throttles login attempts, meaning someone can't pound the system as fast as it can go trying to crack it (1M attempts a sec? idk). If it did it as soon as it verified your credentials were ...


18

Using recovery mode:(using live usb/cd) I assume you are the only user and the administrator of your system. To change password, hold the shift key while booting live usb/cd. If that doesn't work, hold the shift key and hit esc key once after BIOS. Note: Use arrow keys to navigate. Select advanced options --> select recovery mode Now using the arrow ...


14

The security standard Google is talking about is called OAuth. It's a modern technology to authenticate a user. As the Wikipedia article states: Google supports OAuth 2.0 as the recommended authentication mechanism for all of its APIs. Geary is using IMAP/POP3 authentication, not OAuth. That's the problem. elementary OS actually supports OAuth ...


11

Ubuntu Ubuntu uses Unity as its desktop environment and this contains the code for Amazon Web Search and collecting data. elementary OS elementary OS has its own desktop environment called Pantheon which like most desktop environments remembers recently used files to enable extra functionality in certain applications while using the OS. This data isn't ...


11

Option 1: Manage with Seahorse Typically, matching your keyring password to your login password will unlock your keyring at logon (unless the logon is automatic). You can install the management application seahorse to modify your keyring password to match. sudo apt install seahorse seahorse Option 2: Delete the Keyring If you're not concerned about ...


11

What is sudo? sudo is running the following command with super user (root) privileges. That's basically the "administrator" you might know from other platforms. But why is this dangerous? Because with super user privileges, everything can be done on your system (as it has access to all files and your system's whole functionality). Remove every single ...


10

You can deactivate the password query in System Settings -> Security & Privacy -> Locking:


9

The commands (pkexec and sudo -i) in and of themselves aren't necessarily harmful. However they do different things in terms of granting permissions to apps. The sudo ("substitute user do") command allows you to run a process as another user, typically the root user. That is, by default it runs the process as a user with unlimited power. When you use ...


9

"Doesn't meet modern security standards" is Google code talk for not an in-house developed application. By default, Google locks out most third party clients from IMAP access, but you can change that here: https://www.google.com/settings/security/lesssecureapps


8

Its a bug, already reported: https://bugs.launchpad.net/appcenter/+bug/1617687 Im also affected, hope it will get fixed soon.


8

Update: Should be fixed in the AppCenter 1.2 update, but try the following if it persists: I haven't had this issue since I disabled the AppCenter from running in the background. To kill AppCenter in your current session, run killall appcenter. To disable AppCenter at startup, see Disable AppCenter dock reminder—there is a terminal way and a gnome-session-...


6

While Ubuntu is derived from Debian, Ubuntu has its own security team. This team is responsible for security updates to land in the Ubuntu software repositories. As elementary OS uses the Ubuntu repositories, it's getting security updates from Ubuntu - While it's possible the Ubuntu security team adapts security updates from Debian, Debian security updates ...


6

As Daniel said, libpwquality is used. Looking in source code, you can see several checks, quality settings - threshholds - will be configured in a configuration file: palindromes simplicity (too little number of digits, lower chars, upper chars and special chars) simplicity (too little different character types - digits, lower chars, upper chars and ...


5

Use Gnome Encfs Manager. It's not an official elementary app, and it doesn't work from within Files, but it's worked really well for me. You can have the program launch at startup, or you can just summon it from slingshot whenever you need it. The interface displays a list of your encrypted stashes, so you don't have to hunt them down. I like that I can ...


5

We use a library called libpwquality


4

Sudo is used to give a normal user the permissions as an administrateur. One of the bad things that might happen to you Using a command to remove the whole / folder, for example sudo rm -rf /usr Removing an important application/drivers that will make your desktop unusable, for example sudo apt-get remove wingpanel* slingshot* How to reduce the danger ...


4

Are you running wine? If so, try clearing out your virtual C drive. If you have one, it's incredibly unlikely it's anything but a Windows virus hijacking a wine installation. Linux viruses are exceptionally rare and those that do exist typically target the larger server based distributions rather than smaller desktop distributions. I would say more than ...


4

Install seahorse and seahorse-contracts. sudo add-apt-repository ppa:elementary-os/daily sudo apt-get install seahorse seahorse-contracts I recommend you remove the daily repo after installation to avoid getting updates that may break your system. sudo add-apt-repository --remove ppa:elementary-os/daily


4

There is no need for these changes to be made within Freya, as the update is being delivered via the update manager. You should upgrade there, or the correct way to upgrade to the Xenial Hardware Enablement Stack via the command line like this: sudo apt install --install-recommends linux-generic-lts-xenial xserver-xorg-core-lts-xenial xserver-xorg-lts-...


4

Removing the App Center works for me. sudo apt purge appcenter You can always reinstall it later; after the problems are addressed maybe :).


4

I have a strong feeling that this question comes from confusion about what the URL scheme is. The Preferences URL specification is only a way to open settings applications to the correct location. It is not a way to transmit any kind of data. Settings URLs look like this: ✔️ settings://applications/startup This URL will only open the settings application ...


3

Using live USB/CD : (using recovery mode) Boot from live usb/cd and open terminal. Use gparted or fdisk -l to identify elementary OS partition from the list. The partition is just something like /dev/sda1 Mount this somewhere (Be sure to select correct partition) sudo mount /dev/sda10 /mnt Note : . In my system elementary OS partiton is /dev/sda10, ...


3

Short answer: To reduce the rate of login attempt To prevent quick brute forcing of passwords. This makes it take longer to guess passwords. Greatly increase security Comprehensive: It's actually to prevent brute force attacks from trying millions of passwords per second. The idea is to limit how fast passwords can be checked and there are a number of ...


3

Get the CA which is missing. In my case:go to lets encrypt web site (or any other missing CA cert site). Copy the CA in PEM format (the format that has ----BEGIN CERTIFICATE---- in it) into /usr/local/share/ca-certificates and name it with a .crt file extension. Then run sudo update-ca-certificates You can verify if this worked by looking for the ...


2

This question isn't totally fully answerable. Security is complicated and it largely depends on you, the user. Unsafe behavior, specifically you willingly giving away admin privileges, is the biggest vulnerability in any system. That said, some general kind of security advice: Use a password and lock your session. If someone can walk up to your computer and ...


2

This is expected behavior. If you have enabled disk encryption, you'll need to enter your password to unlock the disk or the computer won't be able to boot.


2

Primeiro, a password deve ser a de um utilizador root/administrador. Segundo, a única forma de atualizar o Freya para o Loki é reinstalando o sistema. Alem disso, é impossível uma atualização completa para outra versão do elementaryOS ter só por volta de 300MB First the password should be the one from a root/admin user. Second the only way to upgrade from ...


2

You actually did install Firefox the safe way inside the OS. However, you used the command line instead of a graphical frontend. So no worries, there is nothing wrong with your Firefox installation, both alternatives have the same result. Under elementary OS / Linux often "there is more than one way to do it…"


Only top voted, non community-wiki answers of a minimum length are eligible