FG_3479 comments on Your Linux PC is NOT private out of the box

Your Linux PC is NOT private out of the box (lemmy.world)

submitted 9 months ago by FG_3479@lemmy.world to c/opensource@lemmy.ml

49 comments fedilink hide all child comments

A lot of software uses systemd-journald to log errors,
The bash shell saves everything you type into the terminal,
wtmp, btmp, utmp all track exactly who is logged in and when,
The package manager logs all software you install and keeps the logs after uninstallation,
And the kernel writes part of the RAM which may contain sensitive information to the disk when your PC crashes.

While the OS isn't sending these logs to Microsoft or Google, anyone who gets into your PC while you are logged in and your data is unencrypted can see much of what you have been doing.

If you want to be private, you must disable them.

[–] FG_3479@lemmy.world [S] -5 points 9 months ago (5 children)

If someone takes your laptop while it is unlocked rhey can see the logs. It is dangerous to keep them on if you are somewhere like China and use your laptop in a public space.

permalink

fedilink

source

parent

hideshow 5 child comments

[–] thingsiplay@lemmy.ml 6 points 9 months ago (2 children)

But that is a specifically crafted scenario and has nothing to do if the system is private or not. I mean at home you have privacy. Just because someone could break into it does not mean its never private. The Linux PC is private out of the box and by default, because no one else has access to it. You just created a scenario that is not out of the box, but compromised or stolen.

I understand the issue you bring up here, but the chosen language you use is wrong in my opinion. That is why the misunderstandings and why people don't agree with your statements. I think you are thinking in terms of "Private mode in a browser".

permalink

fedilink

source

parent

hideshow 2 child comments

[–] FG_3479@lemmy.world [S] -2 points 9 months ago (1 child)

I think you are right. My post is simply a PSA to let people know that clicking forget on a Wi-Fi network or uninstalling a Flatpak does not remove all traces.

My scenario is also not specifically crafted; it is what happened to Ross Ulbricht.

permalink

fedilink

source

parent

hideshow 1 child comment

[–] thingsiplay@lemmy.ml 4 points 9 months ago

BTW one can encrypt the hard drive and data on a laptop with a password. Then even if the person changes the drive to read it on a different computer, it wouldn't have access if its encrypted. So if you are really concerned about this issue, then encrypting would be a way to fight against this potential problem.

As for the "crafted scenario"... maybe I should work on my wording too. Lets' leave it there. I actually agree with your core message, its' just not worded in a way that people understood. Or the headline alone turned people off. Also you apparently did the same post before? That also might turn people off. Not a good practice.

permalink

fedilink

source

parent

[–] CrypticCoffee@lemmy.ml 5 points 9 months ago

China? Silk Road dude was distracted by 2 enforcement offices while several arrested and grabbed the laptop. If you're doing things that draw that level of resourcing, that's on you. I don't think any civilian had a 9 person heist for a laptop in China... Unless you have a reference... But I doubt it...