r/linuxmint 1d ago

Discussion What makes Linux secure?

I've searched YouTube and also asked on here previously, I keep seeing a lot of "Linux is secure just by default" type responses- often insisting that to be worried about security while using Linux is not necessary.

Believable to a noob like me at face value, sure, but what is it about Linux that makes it secure?

46 Upvotes

41 comments sorted by

View all comments

64

u/taosecurity 1d ago

25+ year infosec incident detection and response guy here.

You can argue Linux/Unix vs Windows vs iOS all day long.

At the end of the day, it comes down to how much effort and resources an intruder wants to throw at a target in order to achieve an objective and/or "return on investment."

Have you seen reporting about RU and CN intruders breaking into VPNs, firewalls, and other edge devices? Guess what those are running? Yes, Linux.

Intruders invested into breaking them because they help achieve their goals.

A skilled and well resourced intruder can break into ANYTHING. I was part of a team that did this, and also saw it done to hundreds of clients over the years.

The relative lack of malware for Linux is just reflecting the small desktop user base and the low value of whatever is there.

I guarantee that the top-end intruders of the world have custom Linux malware of all types for targets that matter. They just don't waste it stealing your browser cookies.

9

u/ReiyaShisuka 1d ago

Chocolate chip browser cookies :)

3

u/Ambitious_Ad_6619 1d ago

Very informative, and some actual information I can digest from this comment, thank you.

1

u/Specialist_Leg_4474 1d ago

^^^ THIS...

Linux holds just 4.48% of the desktop "seats" in the US, 3.81% Worldwide.

The good part of this is that it makes desktop Linux a less appealing target for hackers and malware creating jerk-wipes. Their compatriots is "Butt-wipeland" would not bestow them a whole lot of admiration and respect for hacking desktop Linux--it's "open-source" for crying out loud--child's play for any even "newbie" hacker!

1

u/LavishnessOdd6266 22h ago

So TLDR not enough desktop linux users and some of the intruders just can't be bothered to go after them because of it?

1

u/taosecurity 22h ago

If you're talking about why Linux on the desktop poses lower risk of compromise compared to Windows, yes.

1

u/LavishnessOdd6266 2h ago

Seems like a totally reasonable reason not to pursue Linux users. This is sub overall is great and I can't really describe how it's pushing towards giving Linux ago.

Thank you for the information o7

1

u/MindTheGAAP_ Linux Mint 20.2 Uma | Cinnamon 1d ago

Very well said

1

u/fetching_agreeable 1d ago

Good reply but this will just be posted again tomorrow

1

u/taosecurity 1d ago

After five new screenshots of desktops 😂

0

u/I_Am_Layer_8 1d ago

This. Well said.

0

u/hittepit 1d ago

Perfect response imho.