Is Ubuntu hackproof?











up vote
2
down vote

favorite












I'm using Ubuntu 18.04 on my laptop. If someone would stole my laptop, would it be possible for them to access my data stored on the laptop? Could any of them access my data, not just random people but people who really know what they are doing?



I'm using a pretty strong password using a special character, capitalized/normal characters and a digit.










share|improve this question









New contributor




wimdewild is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.




















  • I think yes until your data/disk is encrypted
    – Kulfy
    1 hour ago










  • Sorry i forgot to mention, i did choose the option when first time installing Ubuntu to use the encryption, is this what you mean?
    – wimdewild
    1 hour ago










  • Nothing is "Hackproof" but yes Ubuntu is more "Hack-Resistant" than Windows if that is your comparison. Part of the reason is technology but mostly Hackers prefer to target the Window's User Base because pickings are more juicy and easier prey.
    – WinEunuuchs2Unix
    1 hour ago










  • @WinEunuuchs2Unix Not to start a flamewar... but what do you base that on? Windows has improved a lot over the previous five years.
    – vidarlo
    44 mins ago















up vote
2
down vote

favorite












I'm using Ubuntu 18.04 on my laptop. If someone would stole my laptop, would it be possible for them to access my data stored on the laptop? Could any of them access my data, not just random people but people who really know what they are doing?



I'm using a pretty strong password using a special character, capitalized/normal characters and a digit.










share|improve this question









New contributor




wimdewild is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.




















  • I think yes until your data/disk is encrypted
    – Kulfy
    1 hour ago










  • Sorry i forgot to mention, i did choose the option when first time installing Ubuntu to use the encryption, is this what you mean?
    – wimdewild
    1 hour ago










  • Nothing is "Hackproof" but yes Ubuntu is more "Hack-Resistant" than Windows if that is your comparison. Part of the reason is technology but mostly Hackers prefer to target the Window's User Base because pickings are more juicy and easier prey.
    – WinEunuuchs2Unix
    1 hour ago










  • @WinEunuuchs2Unix Not to start a flamewar... but what do you base that on? Windows has improved a lot over the previous five years.
    – vidarlo
    44 mins ago













up vote
2
down vote

favorite









up vote
2
down vote

favorite











I'm using Ubuntu 18.04 on my laptop. If someone would stole my laptop, would it be possible for them to access my data stored on the laptop? Could any of them access my data, not just random people but people who really know what they are doing?



I'm using a pretty strong password using a special character, capitalized/normal characters and a digit.










share|improve this question









New contributor




wimdewild is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











I'm using Ubuntu 18.04 on my laptop. If someone would stole my laptop, would it be possible for them to access my data stored on the laptop? Could any of them access my data, not just random people but people who really know what they are doing?



I'm using a pretty strong password using a special character, capitalized/normal characters and a digit.







password security encryption shutdown hacking






share|improve this question









New contributor




wimdewild is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











share|improve this question









New contributor




wimdewild is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









share|improve this question




share|improve this question








edited 1 hour ago









karel

56k11124142




56k11124142






New contributor




wimdewild is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









asked 1 hour ago









wimdewild

111




111




New contributor




wimdewild is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.





New contributor





wimdewild is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.






wimdewild is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.












  • I think yes until your data/disk is encrypted
    – Kulfy
    1 hour ago










  • Sorry i forgot to mention, i did choose the option when first time installing Ubuntu to use the encryption, is this what you mean?
    – wimdewild
    1 hour ago










  • Nothing is "Hackproof" but yes Ubuntu is more "Hack-Resistant" than Windows if that is your comparison. Part of the reason is technology but mostly Hackers prefer to target the Window's User Base because pickings are more juicy and easier prey.
    – WinEunuuchs2Unix
    1 hour ago










  • @WinEunuuchs2Unix Not to start a flamewar... but what do you base that on? Windows has improved a lot over the previous five years.
    – vidarlo
    44 mins ago


















  • I think yes until your data/disk is encrypted
    – Kulfy
    1 hour ago










  • Sorry i forgot to mention, i did choose the option when first time installing Ubuntu to use the encryption, is this what you mean?
    – wimdewild
    1 hour ago










  • Nothing is "Hackproof" but yes Ubuntu is more "Hack-Resistant" than Windows if that is your comparison. Part of the reason is technology but mostly Hackers prefer to target the Window's User Base because pickings are more juicy and easier prey.
    – WinEunuuchs2Unix
    1 hour ago










  • @WinEunuuchs2Unix Not to start a flamewar... but what do you base that on? Windows has improved a lot over the previous five years.
    – vidarlo
    44 mins ago
















I think yes until your data/disk is encrypted
– Kulfy
1 hour ago




I think yes until your data/disk is encrypted
– Kulfy
1 hour ago












Sorry i forgot to mention, i did choose the option when first time installing Ubuntu to use the encryption, is this what you mean?
– wimdewild
1 hour ago




Sorry i forgot to mention, i did choose the option when first time installing Ubuntu to use the encryption, is this what you mean?
– wimdewild
1 hour ago












Nothing is "Hackproof" but yes Ubuntu is more "Hack-Resistant" than Windows if that is your comparison. Part of the reason is technology but mostly Hackers prefer to target the Window's User Base because pickings are more juicy and easier prey.
– WinEunuuchs2Unix
1 hour ago




Nothing is "Hackproof" but yes Ubuntu is more "Hack-Resistant" than Windows if that is your comparison. Part of the reason is technology but mostly Hackers prefer to target the Window's User Base because pickings are more juicy and easier prey.
– WinEunuuchs2Unix
1 hour ago












@WinEunuuchs2Unix Not to start a flamewar... but what do you base that on? Windows has improved a lot over the previous five years.
– vidarlo
44 mins ago




@WinEunuuchs2Unix Not to start a flamewar... but what do you base that on? Windows has improved a lot over the previous five years.
– vidarlo
44 mins ago










1 Answer
1






active

oldest

votes

















up vote
3
down vote













First of all, nothing is totally secure. Computers are extremely complex, and software is extremely complex. The chance of no unknown security holes are basically nil.



Second, a password only protects the running operating system. Unless the disk is encrypted, it's trivial (<3 minutes) to remove the disk from the machine, and read whatever files you want.



Third, configuration has a lot of impact. Do you have an encrypted disk, but unencrypted swap? In that case the passphrase for encryption is probably stored somewhere in swap - especially if you have suspended the system to disk once.



Or do you have Firewire exposed on the computer? Firewire by default allows memory access, which means that an attacker may simply sift trough memory for your encryption keys...



Linux is no more secure than Windows to an attacker that has physical access to the machine - one could even argue that as Windows has TPM support enabled by default if you use Bitlocker, but Linux requires manual configuration of this - that a default Windows installation is safer against a local attacker.



When it comes to remote access (e.g. over a network), Linux distributions tend to fare rather well - simply because they don't run a lot of network services by default.



So in short: define your threats, and try to mitigate them. If you worry about random thiefs getting access to your data, drive encryption and always powering laptop off before moving it or leaving it unattended will probably be enough. Against targeted espionage, that is probably not enough, as an attacker may for instance add logging devices while the laptop is unattended.



So in short - no, don't assume you're safe. Clearly define your threats, and the expected resources of the threat. A random thief will probably spend five minutes trying passwords, and move on and sell the hardware. CIA will be more sophisticated.






share|improve this answer





















  • To be honest i'm not really a wizkid, so i have no idea about firewall and such, all i know is i have a laptop with linux ubuntu + the encryption that you can choose when installing ubuntu. Police raided my house but before they could enter i managed to power off the laptop so i assumed it's encrypted and could only be accessed with the strong password i made. So basically you're saying they could take out the harddrive and still access it or somehow?
    – wimdewild
    1 hour ago












  • @wimdewild Why would they bother when they know you can squeal?
    – chx101
    50 mins ago










  • If it's encrypted they cannot access it without knowing the pass phrase.
    – vidarlo
    45 mins ago











Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "89"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});






wimdewild is a new contributor. Be nice, and check out our Code of Conduct.










draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1102162%2fis-ubuntu-hackproof%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes








up vote
3
down vote













First of all, nothing is totally secure. Computers are extremely complex, and software is extremely complex. The chance of no unknown security holes are basically nil.



Second, a password only protects the running operating system. Unless the disk is encrypted, it's trivial (<3 minutes) to remove the disk from the machine, and read whatever files you want.



Third, configuration has a lot of impact. Do you have an encrypted disk, but unencrypted swap? In that case the passphrase for encryption is probably stored somewhere in swap - especially if you have suspended the system to disk once.



Or do you have Firewire exposed on the computer? Firewire by default allows memory access, which means that an attacker may simply sift trough memory for your encryption keys...



Linux is no more secure than Windows to an attacker that has physical access to the machine - one could even argue that as Windows has TPM support enabled by default if you use Bitlocker, but Linux requires manual configuration of this - that a default Windows installation is safer against a local attacker.



When it comes to remote access (e.g. over a network), Linux distributions tend to fare rather well - simply because they don't run a lot of network services by default.



So in short: define your threats, and try to mitigate them. If you worry about random thiefs getting access to your data, drive encryption and always powering laptop off before moving it or leaving it unattended will probably be enough. Against targeted espionage, that is probably not enough, as an attacker may for instance add logging devices while the laptop is unattended.



So in short - no, don't assume you're safe. Clearly define your threats, and the expected resources of the threat. A random thief will probably spend five minutes trying passwords, and move on and sell the hardware. CIA will be more sophisticated.






share|improve this answer





















  • To be honest i'm not really a wizkid, so i have no idea about firewall and such, all i know is i have a laptop with linux ubuntu + the encryption that you can choose when installing ubuntu. Police raided my house but before they could enter i managed to power off the laptop so i assumed it's encrypted and could only be accessed with the strong password i made. So basically you're saying they could take out the harddrive and still access it or somehow?
    – wimdewild
    1 hour ago












  • @wimdewild Why would they bother when they know you can squeal?
    – chx101
    50 mins ago










  • If it's encrypted they cannot access it without knowing the pass phrase.
    – vidarlo
    45 mins ago















up vote
3
down vote













First of all, nothing is totally secure. Computers are extremely complex, and software is extremely complex. The chance of no unknown security holes are basically nil.



Second, a password only protects the running operating system. Unless the disk is encrypted, it's trivial (<3 minutes) to remove the disk from the machine, and read whatever files you want.



Third, configuration has a lot of impact. Do you have an encrypted disk, but unencrypted swap? In that case the passphrase for encryption is probably stored somewhere in swap - especially if you have suspended the system to disk once.



Or do you have Firewire exposed on the computer? Firewire by default allows memory access, which means that an attacker may simply sift trough memory for your encryption keys...



Linux is no more secure than Windows to an attacker that has physical access to the machine - one could even argue that as Windows has TPM support enabled by default if you use Bitlocker, but Linux requires manual configuration of this - that a default Windows installation is safer against a local attacker.



When it comes to remote access (e.g. over a network), Linux distributions tend to fare rather well - simply because they don't run a lot of network services by default.



So in short: define your threats, and try to mitigate them. If you worry about random thiefs getting access to your data, drive encryption and always powering laptop off before moving it or leaving it unattended will probably be enough. Against targeted espionage, that is probably not enough, as an attacker may for instance add logging devices while the laptop is unattended.



So in short - no, don't assume you're safe. Clearly define your threats, and the expected resources of the threat. A random thief will probably spend five minutes trying passwords, and move on and sell the hardware. CIA will be more sophisticated.






share|improve this answer





















  • To be honest i'm not really a wizkid, so i have no idea about firewall and such, all i know is i have a laptop with linux ubuntu + the encryption that you can choose when installing ubuntu. Police raided my house but before they could enter i managed to power off the laptop so i assumed it's encrypted and could only be accessed with the strong password i made. So basically you're saying they could take out the harddrive and still access it or somehow?
    – wimdewild
    1 hour ago












  • @wimdewild Why would they bother when they know you can squeal?
    – chx101
    50 mins ago










  • If it's encrypted they cannot access it without knowing the pass phrase.
    – vidarlo
    45 mins ago













up vote
3
down vote










up vote
3
down vote









First of all, nothing is totally secure. Computers are extremely complex, and software is extremely complex. The chance of no unknown security holes are basically nil.



Second, a password only protects the running operating system. Unless the disk is encrypted, it's trivial (<3 minutes) to remove the disk from the machine, and read whatever files you want.



Third, configuration has a lot of impact. Do you have an encrypted disk, but unencrypted swap? In that case the passphrase for encryption is probably stored somewhere in swap - especially if you have suspended the system to disk once.



Or do you have Firewire exposed on the computer? Firewire by default allows memory access, which means that an attacker may simply sift trough memory for your encryption keys...



Linux is no more secure than Windows to an attacker that has physical access to the machine - one could even argue that as Windows has TPM support enabled by default if you use Bitlocker, but Linux requires manual configuration of this - that a default Windows installation is safer against a local attacker.



When it comes to remote access (e.g. over a network), Linux distributions tend to fare rather well - simply because they don't run a lot of network services by default.



So in short: define your threats, and try to mitigate them. If you worry about random thiefs getting access to your data, drive encryption and always powering laptop off before moving it or leaving it unattended will probably be enough. Against targeted espionage, that is probably not enough, as an attacker may for instance add logging devices while the laptop is unattended.



So in short - no, don't assume you're safe. Clearly define your threats, and the expected resources of the threat. A random thief will probably spend five minutes trying passwords, and move on and sell the hardware. CIA will be more sophisticated.






share|improve this answer












First of all, nothing is totally secure. Computers are extremely complex, and software is extremely complex. The chance of no unknown security holes are basically nil.



Second, a password only protects the running operating system. Unless the disk is encrypted, it's trivial (<3 minutes) to remove the disk from the machine, and read whatever files you want.



Third, configuration has a lot of impact. Do you have an encrypted disk, but unencrypted swap? In that case the passphrase for encryption is probably stored somewhere in swap - especially if you have suspended the system to disk once.



Or do you have Firewire exposed on the computer? Firewire by default allows memory access, which means that an attacker may simply sift trough memory for your encryption keys...



Linux is no more secure than Windows to an attacker that has physical access to the machine - one could even argue that as Windows has TPM support enabled by default if you use Bitlocker, but Linux requires manual configuration of this - that a default Windows installation is safer against a local attacker.



When it comes to remote access (e.g. over a network), Linux distributions tend to fare rather well - simply because they don't run a lot of network services by default.



So in short: define your threats, and try to mitigate them. If you worry about random thiefs getting access to your data, drive encryption and always powering laptop off before moving it or leaving it unattended will probably be enough. Against targeted espionage, that is probably not enough, as an attacker may for instance add logging devices while the laptop is unattended.



So in short - no, don't assume you're safe. Clearly define your threats, and the expected resources of the threat. A random thief will probably spend five minutes trying passwords, and move on and sell the hardware. CIA will be more sophisticated.







share|improve this answer












share|improve this answer



share|improve this answer










answered 1 hour ago









vidarlo

8,67842341




8,67842341












  • To be honest i'm not really a wizkid, so i have no idea about firewall and such, all i know is i have a laptop with linux ubuntu + the encryption that you can choose when installing ubuntu. Police raided my house but before they could enter i managed to power off the laptop so i assumed it's encrypted and could only be accessed with the strong password i made. So basically you're saying they could take out the harddrive and still access it or somehow?
    – wimdewild
    1 hour ago












  • @wimdewild Why would they bother when they know you can squeal?
    – chx101
    50 mins ago










  • If it's encrypted they cannot access it without knowing the pass phrase.
    – vidarlo
    45 mins ago


















  • To be honest i'm not really a wizkid, so i have no idea about firewall and such, all i know is i have a laptop with linux ubuntu + the encryption that you can choose when installing ubuntu. Police raided my house but before they could enter i managed to power off the laptop so i assumed it's encrypted and could only be accessed with the strong password i made. So basically you're saying they could take out the harddrive and still access it or somehow?
    – wimdewild
    1 hour ago












  • @wimdewild Why would they bother when they know you can squeal?
    – chx101
    50 mins ago










  • If it's encrypted they cannot access it without knowing the pass phrase.
    – vidarlo
    45 mins ago
















To be honest i'm not really a wizkid, so i have no idea about firewall and such, all i know is i have a laptop with linux ubuntu + the encryption that you can choose when installing ubuntu. Police raided my house but before they could enter i managed to power off the laptop so i assumed it's encrypted and could only be accessed with the strong password i made. So basically you're saying they could take out the harddrive and still access it or somehow?
– wimdewild
1 hour ago






To be honest i'm not really a wizkid, so i have no idea about firewall and such, all i know is i have a laptop with linux ubuntu + the encryption that you can choose when installing ubuntu. Police raided my house but before they could enter i managed to power off the laptop so i assumed it's encrypted and could only be accessed with the strong password i made. So basically you're saying they could take out the harddrive and still access it or somehow?
– wimdewild
1 hour ago














@wimdewild Why would they bother when they know you can squeal?
– chx101
50 mins ago




@wimdewild Why would they bother when they know you can squeal?
– chx101
50 mins ago












If it's encrypted they cannot access it without knowing the pass phrase.
– vidarlo
45 mins ago




If it's encrypted they cannot access it without knowing the pass phrase.
– vidarlo
45 mins ago










wimdewild is a new contributor. Be nice, and check out our Code of Conduct.










draft saved

draft discarded


















wimdewild is a new contributor. Be nice, and check out our Code of Conduct.













wimdewild is a new contributor. Be nice, and check out our Code of Conduct.












wimdewild is a new contributor. Be nice, and check out our Code of Conduct.
















Thanks for contributing an answer to Ask Ubuntu!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.





Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


Please pay close attention to the following guidance:


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1102162%2fis-ubuntu-hackproof%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Ellipse (mathématiques)

Quarter-circle Tiles

Mont Emei