Advanced Plus Security Victor M Fedora 44 KDE Configuration

[Victor M]

I have switched from Firefox to Brave because of Chromium's stronger sandbox reputation. But Claude said it also has the highest concentration of hackers targeting it, because, well it is Chrome with it's massive user base. But I know my red team was targeting Firefox. So this is a change of scenery for them. And I should have done the right things like restricting extensions to none via policy, and disabling the much hacked javascript jit. And Brave is said to follow Chrome updates very closely, unlike Chromium. Leaping from the pan into the fire.

 

[Victor M]

Asked ChatGPT about persistence techniques in Fedora and it spun out a 126 items list. A good part of it applies to the case whete the attacker gained root. ( I dearly hope not ) So I asked chat to generate a script to lock all the user mode persistence locations. And I applied it to my standard user account and it even backed up the existing and cleared out every location. Some ksmserverrc compllained that a spot was no longer writable when I logged in. But on the whole it is working. Good old chatgpt. The lockdown was simply preventing writing to user startup locations. ( the main thing was chattr +i, which makes that folder or file immutable). There are many folders and filies. ( remember Linux doesn't have a registry )

 

[Victor M]

Don't under estimate what chatGPT can contribute. My red team says it is good defense.