News for hackers. Stuff that matters.
Re:Linux workstation security checklist by noja on Friday August 28, 2015 @03:40AM (#10134133)
Nice list, until... install a closed source product that sends backups offsite (SpiderOak). wtf?
Re:Linux workstation security checklist by mkj on Friday August 28, 2015 @04:17AM (#10134245)
The other backup suggestion's odd too - make a good backup disk passphrase, store it in your password manager. (where's the password manager backed up?)
Re:Linux workstation security checklist by kagamine on Friday August 28, 2015 @05:31AM (#10134468)
I was using Wuala but they are closing it down later this year, starting from now. They recommend switching to Tresorit, Swiss based with end to end encryption and no keys held on the server (lose your password at your peril). Any recommendations for cloud storage that is secure and has a Linux GUI? Tresorit is not open source either as far as I can tell from the website.
Re:Linux workstation security checklist by icebraining on Friday August 28, 2015 @05:51AM (#10134518)
Re:Linux workstation security checklist by kagamine on Friday August 28, 2015 @06:04AM (#10134565)
Nice, doesn't do Windows though which I am locked into at work, and is aimed solely at backups, not sharing and managing files over multiple computers and OSes which is what I was mainly using Wuala for. But you answered the question, so you get an Internet point.
Re:Linux workstation security checklist by Skunkleton on Friday August 28, 2015 @11:23AM (#10135923)
The Deja-Dup front end for duplicity is built in to Ubuntu. It does encryption, and knows how to store in all sorts of places, including locally and on multiple cloud providers.
Re:Linux workstation security checklist by wtbob on Friday August 28, 2015 @09:44AM (#10135332)
And, last I checked, SpiderOak's protocol actually has a flaw: they could potentially store a copy of one's initial key. I emailed them about this, but not response.

Cyphertite was really interesting, but it sounds like they're going out of business.

Re:Linux workstation security checklist by splme on Monday August 31, 2015 @09:19AM (#10146647)
That's why SpiderOak moved from browser-based signup to in-app signup, to eliminate this possibility. (The switch was made in April 2015.)

discaimer: I work for SpiderOak, but the response is my own.

Re:Linux workstation security checklist by wtbob on Monday August 31, 2015 @09:36PM (#10150216)
That's really good to know! I'll have to check it out again—other than that one flaw, it looked like a really smart set-up.
Re:Linux workstation security checklist by mricon on Friday August 28, 2015 @08:35AM (#10134997)
It's just mentioned in passing, alongside other recommendations.