[completed] Working on a project and a survey about GNU/Linux security. Survey results in post.
from seal51890@lemmy.ml to linux@lemmy.ml on 02 Jan 14:09
https://lemmy.ml/post/24334036

i have created a short questionnaire, regarding how GNU/Linux users secure their system. if you are somewhat knowledgeful on this topic and willing to share, i would appreciate if you would fill out my questionnaire

okay, so, my research is finished. here are the results:

The “other” distributions include: NixOS (8x), Gentoo (4x), Slackware (1x), Void Linux (1x) or a combination of multiple distributions

#linux

threaded - newest

bruce965@lemmy.ml on 02 Jan 14:29 next collapse

I filled your survey. It would be nice if you could share the results once it’s completed.

seal51890@lemmy.ml on 02 Jan 14:31 next collapse

thanks, will post results soon

seal51890@lemmy.ml on 02 Jan 17:00 collapse

posted some of the results

corsicanguppy@lemmy.ca on 02 Jan 14:38 next collapse

Survey seems broken. JavaScript crutches?

KrispeeIguana@lemmy.ml on 02 Jan 16:09 next collapse

Some of the stuff I would do if my system was held together by more than literally just hopes and dreams.

Ulrich@feddit.org on 02 Jan 18:21 next collapse

A note: I have entirely automated background updates. I have no idea how often it checks, or how often it updates.

TherapyGary@lemmy.blahaj.zone on 03 Jan 00:31 next collapse

Question 2 confuses me.

###Do you have automatic update checks enabled on your system?

Yes, with daily checks.

No, automatic updates are disabled.

My system checks daily for updates and notifies me, but doesn’t automatically update. Is this “other,” or “yes”? Is the “no” option meant to say “automatic update[ check]s are disabled”? Or am I misunderstanding what an update check is?

pogodem0n@lemmy.world on 03 Jan 06:35 next collapse

I propose asking if the person is primarily using a laptop or a desktop computer. For example: I do use disk encryption and Secure Boot on my laptop, but not on my desktop.

thebardingreen@lemmy.starlightkel.xyz on 03 Jan 07:13 next collapse

I was like "Which of the 6 systems I use on a daily basis do I answer these questions for?"

  • I have my gaming PC which runs Linux Mint and I mostly use for Minecraft and Stellaris.
  • I have my daily driver laptop, which duel boots between Linux Mint and QubesOS.
  • I have my file and dev server (it runs a bunch of virtual machines I use for various projects) which runs Debian and shares all my files over sshfs.
  • I have my backup server which rsyncs with the fileserver and runs Debian. The motherboard is like 12 years old, but it is pretty much just a house for a bunch of 8 TB drives.
  • I have the living room TV, which is an older Dell All In One that runs Linux Mint.
  • I have a weird frankenputer with a beefy GPU in it (better than the GPU in my gaming machine) that runs Debian and gets used for locally hosted AI experimentation. A friend gave me the GPU for Christmas and I had nothing to put it in, so I threw shit together from a bunch of the old PCs sitting in closets / garages around my house. Because I’m that guy.

And like… when I took the survey, I answered “yes” to having a firewall, even though I don’t run one locally on any of PCs (except the laptop, when it’s booted into Qubes because duh). BUT all of these are behind an OpenWRT router that DOES run a firewall, which I’ve spent a bunch of time messing with and customizing to get it working the way I want and put in personalized rules for the various systems. Which my wife and son LOVE (“Dad, the internet’s down again!”).

Sturgist@lemmy.ca on 07 Jan 14:15 collapse

I have my daily driver laptop, which duel boots between Linux Mint and QubesOS.

Which one wins? Is pistols at dawn? I have so many questions!

thebardingreen@lemmy.starlightkel.xyz on 07 Jan 19:04 collapse

Qubes wins that fight, as it is technically a posse. DOM0 is the sheriff.

seal51890@lemmy.ml on 03 Jan 12:25 next collapse

Okay, my survey is complete. I posted updated results, with data from 150 responses. The wording on question 2 and 3 might have been too confusing, sorry for that.

OmegaLemmy@discuss.online on 03 Jan 14:04 next collapse

Wtf I’m the only one who waits months to update?

devilish666@lemmy.world on 03 Jan 18:25 next collapse

That’s me, tbh it’s annoying to install update if there are 5 or 10 packages to update.
I just wait until it show much more update, so…usually i waited 3 month max

OmegaLemmy@discuss.online on 03 Jan 18:52 collapse

Me and my 4000 packages waiting to update

devilish666@lemmy.world on 03 Jan 19:26 collapse

4000 packages update ??? nah…it’s rookie number bro, just wait loooooong enough so when you updated your system will crashed or show tons of error message after reboot

OmegaLemmy@discuss.online on 03 Jan 21:43 collapse

Never experienced this

bunitor@lemmy.eco.br on 03 Jan 22:58 collapse

if you don’t mind me asking: why? in my experience, keeping the system up to date is usually effortless

OmegaLemmy@discuss.online on 03 Jan 23:16 collapse

I don’t wanna restart, and I don’t really care enough

I update when I think I have nothing else to do or when it’s important enough (new Nvidia drivers, a remote execution patch, new gnome update)

bunitor@lemmy.eco.br on 04 Jan 01:06 collapse

oh, i forgot gnome forces you to reboot after each update (plasma just installs the updates in the background after you ask it to)

OmegaLemmy@discuss.online on 04 Jan 09:38 collapse

it’s good practice to restart either way

comfy@lemmy.ml on 04 Jan 01:40 next collapse

When was this questionnaire posted? I didn’t see it and get a chance to answer.

Also, I treat servers different to desktops due to different threat models. The server automatically applies security updates and keeps most feature updates sitting for a while for stability, but on desktop I just install everything within a couple of days.

monovergent@lemmy.ml on 06 Jan 17:53 collapse

It’s nice getting a glimpse as to what fraction of Linux users are using disk encryption. Full disk encryption is becoming the default on mainstream OSes, but not in most of the Linux installers I’ve encountered. Always made me curious just how many people went out of their way to encrypt their Linux install.

I personally encrypt everything except for VMs already in an encrypted device or USB drives that need to work with non-Linux machines. It’d be interesting to hear what other people’s reasons to encrypt their disks or not are.