Linux Mint security – 28 days later

After its website breach, is Linux Mint safe for use? Me latest OCS-Mag article discusses the implications of the infamous Feb 20 incident, and how it affects you, the Mint user and the Linux user as a whole. Let's find out.

http://www.ocsmag.com/2016/04/09/linux-mint-security-28-days-later/


Cheers,
Mrk

 

Good articele Mrk. I'm not sure it will have any affect on those who lash out against mint, but at least you've tried. BTW, the advice you give is similar to the bit I gave for checking ISO's that seemed no one clued in to.

Linux Mint Website Hacked, Users Tricked Into Downloading ISOs with Backdoors

 

Great reading, as always, thanks!

 

First nice article

Security experts tell me security is a process and a state of mind. So as long as they consider this an incident (**** happens) those developers still have the same mindset on (lowered) security (ask any Ubuntu propagandist).

When they only change the security of the website (distribution point) and not of the distro itself, my fear would be that they are STILL "happier campers" as you named it (so don't tell me I did not told you so ).

Bottem line: MINT telling people to "go home and get a nice quiet sleep" brings bad associations into memory about risk awareness.

 

I still recommend Mint. Stuff happens.

 

I uninstalled MInt from my two pc's and installed Ubuntu, is it fine?

 

Yes you are good to go. Ubuntu is the best balance between usability and security (IMO).

 

Is it fine in what sense?
Mrk

 

Security

 

Security getting compromised packages downloaded from supposedly official channels (like the breach), or day-to-day management & updates?
Mrk

 

all kind of security

 

Its only the website which had an issue,not the distro,
Spreading misinformed FUD on here certainly does not help the mint team.

 

The pc I had moved off Mint I reinstalled Mint (verifying the iso) on it but with Grsec and Firejail & using Chrome so I feel pretty safe, bulletproof actually and with no usability issues either. Mainly because SELinux was giving me headaches on Fedora with using a vpn. I also allow security updates outside of the kernel because I'm running 4.46 now.

I have uMatrix, uBlockO, & https everwhere on Chrome - with flags that force frames and the resolver into separate processes. PDF's handled by the extension that converts them into html5. Plugins for PDF & Native Client off. Plugins for PepFlash and Widevine on demand only.

There is no reason security wise not to use Mint and if you feel as I do that you want a higher level of security for peace of mind you can do what I did. It's a personal choice.