Advanced Plus Security Divine_Barakah's Second Laptop Security Config

[Divine_Barakah]

Has anything changed on your end ? Eg new apps installed, new security etc ?

You can change the thread's security details to say that you're using Cosmic now you know. The very top, right corner of thread, there is a menu.

Nothing new except for Strawberry music player.. The system is very stable. I have not experienced any issues (minor or major). So satisfied.

 

[Victor M]

Forgot to do dnf update before starting pwn test. Red team pwned it within an hour.

Now starting again.

 

[Divine_Barakah]

Forgot to do dnf update before starting pwn test. Red team pwned it within an hour.

Now starting again.

Looking forward to hearing your thoughts afterwarda

 

[Victor M]

Decided to do the pwn test on a Ubuntu 26 box instead. It was hardened with the same steps excluding Selinux. Preliminary results after 4 hrs - nothing happened. I had asked chatGPT for a monitoring script for this pwn test. And it knows my configuration. So the scripts does a long list of tests for various attack methods, persistence methods, kernel attacks etc. And when I ran the report and submitted it to chat, it asked for further sub reports. But ultimately says the machine is clean.

 

[Victor M]

Chatgpt updated itis monitoring script to give a better summary. But no bites through the night and this morning. This method of having chat devise a monitoring script and running a report every now and then and letting chat interpret it is the way to go. There are so many ways to misread the symptoms using just syslog and journalctl. And there are many background tasks that are running that could read like symptoms of adversary tinkering. I think I've now found a good way to run these pwn tests.

 

[Divine_Barakah]

Chatgpt updated itis monitoring script to give a better summary. But no bites through the night and this morning. This method of having chat devise a monitoring script and running a report every now and then and letting chat interpret it is the way to go. There are so many ways to misread the symptoms using just syslog and journalctl. And there are many background tasks that are running that could read like symptoms of adversary tinkering. I think I've now found a good way to run these pwn tests.

Still using Ubuntu?

 

[Victor M]

Still using Ubuntu?

Yes.

 

[Divine_Barakah]

Yes.

Ubuntu is great, but I hate snaps as snapd is not open source

 

[Victor M]

snapd is not open source

Never knew that.

 

[Divine_Barakah]

Never knew that.

4 reasons why you should stop using snaps on Ubuntu

Despite their beginner-friendly nature, snaps have plenty of drawbacks

www.xda-developers.com

Snaps, however, are a different story. Sure, the snapd daemon and certain core packages have their source code publicly available. But the Snap Store (or App Center on newer versions of Ubuntu) – the server with the snap packages – is closed-source.

So a correction the daemon is open source.