Hi, Am 05.04.2011 17:57, schrieb Varuna Seneviratna: > Am I safe when surfing the web with > default Firewall setting? Well, you'll never be safe, that is for sure ;). Security is always a trade-off. What kind of environment are you using your computer in? The firewall is probably only necessary and helpful when you are connected to the Internet directly. As soon as you are behind a router its not that important any more, because your PC can't be reached directly anymore. So, it may be helpful in public sites for instance. However you should be aware of the fact that there are various other threads, which are most likely more often exploited. So as soon as you are using your browser you live in danger of becoming hacked by some scripts or exploits within various engines and/or plugins you run. On the other hand its a big improvement in security when using Linux instead of Windows, because as long as Linux is in a minority there won't be as much hacks/exploits for it. It may be that Linux is more secure than Windows in general, but that is another question I don't want to raise. I think the biggest thread actually is to use Adobe's plugins, namely Flash and Reader. Because they are so widely spread, they get exploited very often. I don't know exactly whether the Linux versions of these plugins are any better of, but for instance the 64-bit version is not, because its in a beta state and doesn't get updated that often. There are also some JavaScript exploits which can at least make your browser crash. Probably there are also some bigger threads than that possible. All in all: Security is a big and complex issue and you're never 100 percent safe. You just make trade offs between security and convenience and/or usability. But you should be relatively safe by using Linux, at least by now. The firewall itself doesn't protect you in any sense from exploits within your browser, but can provide some kind of security, especially in situations where you are connected directly to the Internet or when connected with other clients you don't trust or know. Best regards, Karol Babioch
Attachment:
signature.asc
Description: OpenPGP digital signature
-- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
