Which OS gives you the most security and privacy?

Status
Not open for further replies.

donline

Distinguished
Apr 20, 2016
505
1
18,995
Hi folks,

Which OS for PC would you recommend for providing the best security (hacking etc) and privacy (from tracking etc)?

Windows vs iOS vs Linux?

Many thanks, D
 
Solution
Linux Mint is based on Ubuntu (which in turn is based on Debian). They're all part of the same Linux family. The Ubuntu people picked and chose which parts of Debian they wanted in an OS to create Ubuntu. The Mint people didn't like some of Ubuntu's choices so they took Ubuntu and replaced some of the parts.

I wouldn't recommend Debian for a beginner. Ubuntu OTOH is perfect for a beginner. If you try Ubuntu and dislike the GUI (the part most people have a problem with), then Mint is a good alternative. And again, I'd suggest you try these in a virtual machine first so you can get an idea what they're like and what the process of using them is like.

donline

Distinguished
Apr 20, 2016
505
1
18,995


Thanks very much Hellfire13!

Which is the best option with Linux? From what I understand there are many 'distributions'/options?

How often are the Linux OS distributions updated/patched and how well are they supported? (e.g. Windows you get regular updates for many years).

Open BSD is a new one to me!! :)
 

donline

Distinguished
Apr 20, 2016
505
1
18,995


Thanks dextermat :)

Which is the best option with Linux? From what I understand there are many 'distributions'/options?

How often are the Linux OS distributions updated/patched and how well are they supported? (e.g. Windows you get regular updates for many years).

 

USAFRet

Titan
Moderator


The popular Linux distros get a major "update" once a year or so.
Regular patches as needed in between.

How long? Years, again for the popular general use ones.
Ubuntu, for instance, has been regularly updated for 13 years (2004). No indication of that stopping anytime soon.

But the best security system exists between your ears.
 

It's worth nothing that OS X is based on FreeBSD. The security problems with OS X mostly stem from Apple trying to make the GUI really easy for people to use. Likewise, Linux properly installed, updated, and used is very secure. But if you're not a Unix guru and this is your first foray into using Linux, you're probably going to make mistakes installing, configuring, and using it which compromise its security.

I'd suggest sticking with the OS you're familiar with and using it with best practices (anti-virus, anti-malware, ad blocker, don't do stupid stuff like run executables emailed to you). Set up VMWare Player or VirtualBox and install Linux in a virtual machine, so you can play with it and get an idea what using it is like. After you're comfortable with Linux, you can make the switch. (If you become comfortable with it. I learned Unix before DOS, and still prefer Unix for command line tasks. But except for OS X, the GUI layer for the Linux distros I've used has been a clumsy and incomplete substitute for the command line. If I didn't use Windows so I know how to support most of my clients, I'd probably be on OS X even though I despise what Apple has turned into in the last 10 years.)
 


Ubuntu, Fedora, Kali...these do get regular updates as far as i know.
 

donline

Distinguished
Apr 20, 2016
505
1
18,995


Thanks USAFRet

Sounds like Ubuntu could be a good option to start with then.

Any thoughts on Linux Mint?

I agree with the security system between your ears and being careful what you do!

By the way, which (free) anti-virus software do you recommend to use with a secure OS?
 

donline

Distinguished
Apr 20, 2016
505
1
18,995


Would you suggest Linux Ubuntu as a good starting point (USAFRet mentioned this)?

What's happened with Apple over the past 10 years by the way? :)

How do you feel about personal privacy when using Windows (10) OS? It seems like it wants to gather a lot of personal data...

Thanks! D
 
Linux Mint is based on Ubuntu (which in turn is based on Debian). They're all part of the same Linux family. The Ubuntu people picked and chose which parts of Debian they wanted in an OS to create Ubuntu. The Mint people didn't like some of Ubuntu's choices so they took Ubuntu and replaced some of the parts.

I wouldn't recommend Debian for a beginner. Ubuntu OTOH is perfect for a beginner. If you try Ubuntu and dislike the GUI (the part most people have a problem with), then Mint is a good alternative. And again, I'd suggest you try these in a virtual machine first so you can get an idea what they're like and what the process of using them is like.
 
Solution

USAFRet

Titan
Moderator
Ubuntu or LinuxMint. Both are good.
I use either and/or both on a daily basis, in VM guests.

Personal privacy in Win 10? That is by far not the most egregious offender.
Applications, your cellphone, websites you go to...all far worse than the OS.
 

donline

Distinguished
Apr 20, 2016
505
1
18,995


Thanks Hellfire13. Which distro would you personally recommend?
 

donline

Distinguished
Apr 20, 2016
505
1
18,995


Thanks Solandri

Sounds like Ubuntu or Mint are good starting options. Is it just me, or does it look like Ubuntu is better supported? I'd like an option that is most secure and updated/supported...
 

donline

Distinguished
Apr 20, 2016
505
1
18,995


Thanks USAFRet

Interesting with Windows 10 compared to apps, cellphones and websites...

What do you think about smartphones? I'm seriously thinking about avoiding them completely... but also considering if I were to have one what might be the best option for personal privacy... any thoughts?

But getting back to OS and PC security, have you seen http://www.youronlinechoices.com/ ? Do you think this service is legit? It looks like you can de-list yourself from advertisers on this website. I was a bit concerned it might be a 'dodgy' website.

Thanks D

 

USAFRet

Titan
Moderator


I'm not the best one to ask about smartphones.
Mine is used for texts from my kids and grandkids, and the occasional voice conversation.
$25 Tracfone, $100/year access, and I don't use all of that $100...lol

That website?
1. It us Europe only, so useless to most of the planet.

2. The VAST majority of people simply do not notice or care. Or know what "companies" are 3 levels behind the website you might be on.
For instance, if I go through the UK link (I'm in the USA)...I can find that an entity called "33Across" has implanted a cookie on my PC.
Who? I have no interaction with them, never been to their website. I know not what they do.
Further research leads to http://33across.com/
"Traffic building and monetization tools created for publishing powerhouses"

And this means what to me? Who are they? Where are they located?
Don't know, mostly don't care.

Marketing and advertising is a very data-intensive business. You are merely a product to be bought and sold.
Your presence, your eyeballs, your mouse clicks.

And advertisers do not have to "collect", people give that away freely. Hence 99% of the data on Facebook.


You want absolute privacy? Pay cash. Stay offline. Completely.
 

donline

Distinguished
Apr 20, 2016
505
1
18,995


Thanks USAFRet, all good points.

I'm a bit of a hermit when it comes to phones and I'm quite happy to use a 'dumb'/basic phone, but was considering venturing into the world of smartphones... though I'm unsure it's worth it considering the cost (in terms of personal privacy) vs benefits.

I honestly did not realise that so much data was being mined from just browsing the web... I'm amazed by all the tracking and advertisers. There should surely be more choice in this and what data gets collected (with/without permission).

I was hoping there could be a 'middle path' to be online and still retain personal privacy and freedom... but perhaps that is just a dream :)



 

donline

Distinguished
Apr 20, 2016
505
1
18,995


P.S. I forgot to ask you, what VM software do you use/recommend if I want to play around with Linux within Windows 10? Thanks :)
 

USAFRet

Titan
Moderator


I use VirtualBox. Daily.
I almost always have a Linux VM running. Usually to check out potentially sketchy websites. Like the one you linked...;)

And also for my dev functions. A Server2012 and a couple of Win 7 and Win 10 clients, in their own little network.
 

donline

Distinguished
Apr 20, 2016
505
1
18,995


Thanks for the VM recommendation :)

VM is new to me. So how does VM help when opening up potentially unsafe files etc? Does it sandbox them or something?

By the way, was the youronlinechoices.com website legitimate/safe? :/
 

USAFRet

Titan
Moderator


A VM is its own OS and PC. Linux, in this case.
Being Linux, won't get affected by normal Windows issues.
And being in a VM, won't (mostly) affect the host OS. Win 10 Pro, in this case.

If, for whatever reason, that VM were to become completely corrupted...a recovery from an earlier snapshot is minutes away.


That site seemed to be "OK'. Not that it really does a lot of useful stuff for the normal person.
 

donline

Distinguished
Apr 20, 2016
505
1
18,995


Sounds great with VM!
There was quite a lot of info on the VirtualBox page, but from what I understand I would need to select the 'VirtualBox 5.2.6 platform packages > Windows hosts' download/link, is that correct? (I'm running Win10).

Once that's installed, can I just go to ubuntu.com and install and run it within the VM? There were options for 'Ubuntu 16.04.3 LTS' and 'Ubuntu 17.10.1' - which might you recommend?

By the way, the 'youronlinechoices.com' link was from gooogle's ads settings page ('Opt out of more ads' link near the bottom of the page) (https://adssettings.google.com/authenticated), so I guess it should be ok :)

This is fun stuff, thanks for helping out! :)
 

USAFRet

Titan
Moderator


You can use either Windows or Linux as the host. And run either or both as guests.

For instance, this is my normal Win 10 PC, with 4 x VM's running. Spread across 2 screens.
G7Ro10y.png

From L to R
LinuxMint
Win 10 Pro (long running test to see how an Unactivated Win 10 works. 13 months, no change)
Win 10 (verifying the install routine)
Server2012

I could squeeze in a couple more Linux instances if I wanted to. All running and accessible at the same time.


And the "youronlinechoices" being there just means that they paid google for the space. Doesn't mean it is good.
 

Ubuntu is better "supported" simply in that it has the most number of users.

https://www.linuxcounter.net/statistics/distributions

But as I said, Mint is just Ubuntu with some of the packages replaced with different packages (a package contains a specific feature, like a program or driver). And both are based on the Debian packaging system. It's a command line packaging system (there are GUIs for it on both Ubuntu and Mint, but those are basically translation layers for the command line commands). So theoretically you could install Ubuntu, and mess with the packages installed to create Mint. Or you could do a raw Debian install and recreate Ubuntu by picking the same packages to install. Ubuntu and Mint have just done the picking for you (Ubuntu also creates some of their own unique packages, but you can theoretically install those separately onto a non-Ubuntu system too if you wish).

Each package has its own development team (open source project) and puts out updates on their own schedule. So "support" is a bit of a misnomer. The support basically amounts to avoiding package conflicts in the default distro, making sure the installer can handle all the different hardware out there, and notifying you if a package has stopped development (no more security updates) or replacing it with a different package that does pretty much the same thing but is still under development.

Start with Ubuntu. And if the GUI drives you nuts, give Mint a shot (they aim for a more Windows-like GUI).
 

donline

Distinguished
Apr 20, 2016
505
1
18,995


Thanks USAFRet... I enjoyed seeing the screenshots :) Nice setup you have going on there!

Good point about the website link on the gooogle page.

By the way, why does Windows 10 have different versions (e.g. 1511, 1607, 1709) (and builds within those)? Should folks install the latest (1709) version for the best security or would version 1607, for example, still be fine?

 
Status
Not open for further replies.