Hacker News new | ask | show | jobs
by snazz 2791 days ago
No malware-checking system is going to be anywhere near 100% effective. Although you should use antimalware on Windows, your strongest defense is preventative. Aside from being careful with what you download, using a modern (sandboxed) web browser, and using the full set of mandatory access control features built into Windows, I’d recommend using an adblocker to prevent malvertising and better control the code that your web browser executes.

On Linux, there’s no good way to scan for malware because that’s not the focus of most work done on Linux security. Use SELinux (or AppArmor, if that’s your thing), a firewall, and only get software from trusted repositories. Verify the checksums of ISOs for live USBs and use the same sort of common-sense that you would on Windows. Furthermore, you might want to consider moving from Xorg to Wayland since any process running as your user on your display in Xorg can act as a keylogger[0].

[0]: https://security.stackexchange.com/questions/170596/is-it-po...