Linux Support When?
Answers
-
Hello,
Sorry for the discussion. Just as between Community users.
Windows has been announced unsafe operation system.
is this a reference to something recent and specific?
Or is it speaking in general terms?
When is F-Secure taking actions supporting Linux?
They do support Linux, probably. In some ways.
Or did you specifically mean a dedicated security solution like AV / EPP / EDR or sort of stuff for home users (so to speak) and devices like desktops / laptops? Or even something like NGAV, or sort of business solutions like SIEM or data loss preventions, but within 'home use' conception?
I mean, by default Linux distributions, usually, without enabled firewall. Although, they do come without tools like UFW included - but it is possible to install them with basic steps. Or using default stuff like nftables (or iptables).
Should F-Secure also offer its own take on a firewall solution there? In your opinion, what is exactly enough steps in supporting Linux? What kind of solution should be available?
Scanner against malicious files (and sort of things)? Only for Linux-related? Or detecting 'any' for 'any' platforms (against Windows-based executables and so on)?
Behavioral analysis and such tools?
Web Browsing protection and content filtering? This is, actually, the best (as for me) and most desired (by me). I mean, it will be enough 'level' for me. If there will be F-Secure Scam Protection (or so to speak) for some Linux distros.
Something else as a base?
Which 'Linux' exactly should be supported? I do prefer, for example, either Debian or OpenSUSE.
Do you know any cyber security company which is still offering Linux-based solution for home users? Last time I checked - it was, basically, the only one company now. At least, who can provide protection and security at good enough level (based on years of independent testing by different Labs and so). And I mean something more complex than ClamAV or rkhunter.
For instance, looks like companies like ESET and Sophos discontinued their solutions for Linux platform within Home versions. Rather than starting to provide it.
As such, if your question is more than general one (because if so - the answer would come as soon as a sufficient market or user demand became apparent) - then I am sure that as soon as some legislation or laws will enter. Or some interesting ways to provide it (by F-Secure) to wide range of Linux-related devices (or, otherwise, somehow only 'small' portion of certain Linux distribution).
// as a generic stuff:
For example, to secure a Debian home desktop - basic steps are: installing a minimal system, if fancy - encrypting the disk (LUKS), enabling a firewall (for example, ufw), and disabling unused services (if somehow enabled; such as SSH, FTP, telnet, vnc and so on; based on own needs). There are also stuff like AppArmor to enhance level of 'security'. Other basic things like 'not using Administrator rights' per daily user and so on.
How to prevent against malicious websites? Or random malware (which still will require user interaction)? And what about zero-interaction (which are, probably, mostly exploits against stuff not intended to run on home desktop computers or laptops)?
And why exactly supporting Linux? As an alternative OS to Windows - I would prefer OpenBSD, for example. Though any of three (potential Linux distribution, Windows and OpenBSD) would be relatively at same level of safe / unsafe quality (depends on configuration).
-
Nice list of reasons why Linux should be supported. Windows gathers data about you and sells it to third parties. That's enough to mark it unsafe for me.
I have F-Secure Total that includes VPN, Password Vault, Scam Protection and ID monitoring on top of Virus Scanner. Would be nice to have these on Linux (Any Linux). Now I need to cancel my subscription because I can't use it anymore. I can use the freed money to get VPN from another provider. The rest I can self-host. -
Yes, but it is not exactly something completely fresh (it can be partially eliminated and mitigated; but in part, yes, it cannot.. and 'this part' also poses a certain risk to any other operating system being safe/unsafe, though).
Also, from that perspective, Linux (as such, or just certain distros) should have been supported from the start. The point that Microsoft products were the ones primarily susceptible to viruses and other malicious software in the past is not particularly compelling (but will explain why things turned out that way) then.
It was mostly interesting for me "why now" as a sure start point of supporting Linux (or, well, when did '''since Windows has been announced unsafe operation system''' happen).
I see your position. As I've already written, I would also gladly use F-Secure solutions on Debian or OpenSUSE systems; as well as with OpenBSD. And with a full pleasure I would happily replace any Windows desktop / PC device (despite certain advantages in terms of security, functionality and abilities).
There (https://community.f-secure.com/en/categories/Idea_Exchange) are already some feature requests on Linux topic (covering both a general solution and specific sides). You can upvote them for more visibility for developers, probably.
It would be good if one of the official representatives stated the current position (previous statements were along the lines of "no plans for now, but they are monitoring the situation"). But as my own view: I think something more real or 'easy-to-expect' is somehow or somewhat web-based protection or solution. For example, something what other companies have tried or are still doing with Chromebooks / ChromeOS.
Then again, Linux support will likely require some manual interaction with set-up. Is that desirable as a 'general available' solution?
I think for Linux desktops (home users): actual threats are something like cryptojackers / cryptominers, tricky websites which will try to exploit browser's permissions, malicious addons/extensions, phishing or sort of infostealers; and, in general, other platforms-based malware (as possibility to transfer malicious Windows-related executable or sort of).
Other stuff, probably, would be misconfigured system or using too much unnecessary (for home use) things in system. What would open doors for vulnerabilities or exposing something without covering it with secure layer. Or even traditional ways to botnets.
Or using third-party ways like downloading direct packages or from unhealthy moderated sources.
I am not sure, but I think it is not that easy to provide security solution against this (without some 'time' and 'resources' to put into it). Blocking access to known harmful domains and other resources with weak ratings and reputations would be relatively successful against a subset of attack vectors.
That's why I'd be happy if at least something like Scam Protection (or a more powerful and feature-wide browser extension), along with features like a Password Vault and ID Monitoring, were available on Linux. As for a full-fledged antivirus, scanner or the kind of real-time protection against every threat covered on Windows - I am not so sure that I do able to expect or I would complain of missing it. And I am not sure about VPN (as of their current design).
My point is that something like this would likely be somewhat easier or faster for the developers to implement. However, feature requests usually imply a full suite or a version that is completely close to the "TOTAL" app available for Windows or macOS.
Thus, I am interested in if or what can be enough for "supporting Linux". Again if it is 'paid' solution, if F-Secure repositories should be included and so on (how much "friendly" for user).
