this post was submitted on 08 Oct 2023
26 points (67.1% liked)

Linux

47545 readers
616 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
 

Im very paranoid about getting into piracy and im not sure if i should or it or not but there are so many things i want that i cant afford.

is there a secure linux os that i can use without a vpn? im pretty use to windows 10 but i was told linux mint is good for this kind of stuff, is that true?

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 39 points 1 year ago

The OS you use doesn't really matter, what matters is what VPN server you use and to an extent what client you use. I've used AirVPN for about 3 maybe 4 years now with no issues and they allow port forwarding. qBitTorrent is a well regarded client and provides a setting to bind to a particular network interface (IE the virtual NIC provided by your VPN), this is much more reliable than a VPN client's killswitch feature.

[–] [email protected] 35 points 1 year ago

Does your country care about Piracy?

If yes: you need a VPN, your operating system means nothing.

If no: just torrent lol.

[–] [email protected] 29 points 1 year ago (1 children)

piracy is not that deep… the OS doesn't really matter in this case as what you're concerned about is the ISP, not anything in your own PC. if you don't have a VPN, your ISP could send letters bugging you for downloading stuff. you'd probably have to get dozens of letters before the ISP would cancel your service.

just get a VPN for $5/month and you don't have to worry about it.

[–] [email protected] 5 points 1 year ago

Your advice on ISPs is jurisdiction specific. As an example, in Germany and some other countries, you have private law firms involved, tracking down people with the help of the courts, shaking people down with threats of civil lawsuits. VPNs good, though.

[–] [email protected] 23 points 1 year ago

OS makes no difference.

[–] [email protected] 20 points 1 year ago (2 children)

All that matters is if you trust your VPN. You can torrent on Windows with a good VPN, and you won't get caught. You don't need linux to torrent safely.

If you're worried about copyright notices, VPNs can help with that. If you're worried about viruses, most viruses aim for Windows systems, but you can avoid them by keeping an eye out. There's viruses for macOS and Linux, but due to the smaller scale of users, most people don't bother hosting them online.

If you're afraid your law enforcement is going to bust down your door, that isn't going to happen even if you torrent hundreds of movies and shows a month. They mainly crack down on the people who host the content, your ISP would probably end your service before you went to court.

That said, if you want a more "secure" operating system, Linux can help beyond tormenting. Fedora, Linux Mint, Debian, are all solid choices for your first time use. Just know there's going to be a learning curve, and if it gives you an error, read it carefully and search online, as others have had the issue before and are willing to help.

[–] [email protected] 2 points 1 year ago

thank you for all this info.

[–] [email protected] -4 points 1 year ago (1 children)

Keeping an eye out for viruses? 😂🤣

Guess you missed the recent exploit with RAR archives where malicious actors can execute code without you even knowing, conveniently not long after Windows integrated RAR support.

Keep an eye out for what? Any RAR from this year forward can carry a hidden embedded virus.

[–] [email protected] 6 points 1 year ago (2 children)

Do you mean the winrar exploit? I don't know of or can find any other exploit related to rar files. If this is what you mean, it only affects winrar which is only on windows and most people use 7zip anyways.

load more comments (2 replies)
[–] [email protected] 18 points 1 year ago* (last edited 1 year ago)

The MOST secure? Qubes OS!

https://www.qubes-os.org/

Everything runs inside of a VM. VMs have very limited connectivity between each other you have to explicitly set that up.

So for your privacy, and good hygiene, you would set up a VPN inside of one of the VMs Make that the mandatory networking VM for your torrent VM. Then no matter what, your torrent VM would never leak.

Here is a tutorial https://mullvad.net/en/help/qubes-os-4-and-mullvad-vpn/

It takes a little getting used to, but it's pretty good as a daily driver. Because of the segmentation, even if there is local exploits, it's unlikely that the exploit will expose your other VMs. So your networking VMs are the most at risk, then you're browsing VMs, so you keep your data vaults in different VMs.

They have some great tutorials, it'll runs Linux under Xen as the hypervisor. There's a little gymnastics around copying and pasting between VMs, and moving files, but it's pretty intuitive once you get used to it.

And this is still useful even if you're not running a VPN, because you are segmenting your different programs, so you get data hygiene even if you don't get a anonymity

[–] [email protected] 15 points 1 year ago

If you’re not using a VPN your ip will be visible no matter which OS you are using.

[–] [email protected] 15 points 1 year ago (1 children)

Let me make an analogy. Your house is like your OS, your house can be very secure, or not at all, it can be very customisable or completely pre-made, it can be completely a black box where you never know how it's wired or where are the pipes and for some reason the kitchen lights turn off the bathroom ones and it's illegal to open the walls, or it can be an open plan where everyone can know how it's wired and where the pipes go.

The internet is the post network, you can send letters to anyone in the world. Your local post office branch is your ISP, you send letters to them, and they redirect it to whoever you addressed them to.

HTTP is like writing letters in plain English and address them to the person you want. If your local post office wanted they can open the letter, read what you wrote, and know what you said and to who.

HTTPS is like writing a letter in a code/encryption only you and the person you're sending the letter to know. Your local post office knows who you're sending it to, but can't know what you're saying.

A VPN is like a friend who go you can send letters to asking him to send a letter to someone else. Now if the post office sees your letters they can't know to who they're actually addressed nor what they say.

Torrenting is like posting things to a bulletin board, except this is done through the post. The content of the bulletin board are public, so you can't hide the information that you want to watch X movie, if you send the letter through the post they know that you're sending it to the bulletin board, and even if it was encrypted they can read it, what's more when someone sees the board and replies to you the post know what he's replying to, so they know you're getting the movie you asked for.

On this analogy, does it really matter how secure your house is? Not really. The only way you're safe is by instead of posting it on the board yourself asking a friend (VPN) to post it for you and receive the responses and send them to you, and between you and your friend you have a code (HTTPS) so that the post office can't read what you are talking about.

There are reasons why you would want to have a VPN outside torrenting, if you use public internet, e.g. coffee shops or shopping malls, you should be very careful, because on those networks someone can stand between you and who you're trying to contact and pretend to be them and you would be giving your password and bank details to that person thinking you're talking to the bank. This is called a man-in-the-middle attack, but if you're sending those details to your friend for him to send to the bank you know your friend's address so that's harder to take, also your connection to him is encrypted, and your bank details are encrypted so that not even your friend can read them, so it's extra secure.

Also a VPN is not that expensive, the one I use costs €49 a year, if you go monthly it's €7, for the security they offer it's a no brainer.

[–] Zeroc00l 3 points 1 year ago (1 children)

A great description. Although regarding VPN's and public wifi, I don't know of any banking or similar sites that aren't using https nowadays, so man in the middle attacks aren't such a danger. Not to say you shouldn't use a VPN anyway, you might as well always be connected to one.

[–] [email protected] 3 points 1 year ago

TLS mitigates MITM, but doesn't completely prevents it. A MITM can emit their own certificates, that's not unheard of, although harder than regular attacks.

[–] [email protected] 14 points 1 year ago

You should use a vpn tho. I use mullvad, the client has a killswitch. Qbittorrent also has one as you can select that vpn connection in the settings. The distro you use does not matter however.

[–] [email protected] 12 points 1 year ago

This is what my "friend" is using. It's basically a vpn client with a kill switch that stops torrent client when vpn tunnel is down. https://github.com/haugene/docker-transmission-openvpn

[–] [email protected] 9 points 1 year ago

No need to be that paranoid. If you want to be basically bulletproof, pay for a cheap seedbox hosted in a friendly country (ultraseedbox is a good choice), and do your torrenting there. Then use any free or cheap SFTP program to transfer it to your computer.

Plex or Jellyfin are good ways to view the content either directly from your seedbox or off of your local computer, and I know that Plex has encrypted connection options. Jellyfin probably does too.

[–] [email protected] 7 points 1 year ago (1 children)

My favorite setup was a headless Raspberry Pi Zero plugged in and hidden behind furniture in the common areas of a high-rise condo building where I rented a unit for a few months. They have gigabit Internet access. Remote into it, schedule a batch download, then retrieve it from the Zero later. It was cool, but inconvenient. Proof of concept only really.

[–] [email protected] 3 points 1 year ago

Cool project but doesn't really address OPs concerns.

[–] [email protected] 4 points 1 year ago (1 children)

Doesnt matter. Most Linux Distros use some bullshit DNS provider like Cloudflare or Google by default. Also, no Distro has a VPN preinstalled and you should not torrent over Tor.

So get a VPN that supports port forwarding, maybe host your own on an anonymous VPS. then use qbittorrent Flatpak, on any Linux Distro with automatic security updates and a firewall

[–] [email protected] 8 points 1 year ago (1 children)

Most distros use whatever DNS provider your router's DHCP gives them. That's not something the OS normally decides. Some browsers are taking upon themselves to use DNS over HTTPS, which often does use Cloudflare or Google, but that's not the OS doing it.

[–] [email protected] 1 points 1 year ago

True. And the second option in systemd-resolved would be to use some of the ones I mentioned.

[–] [email protected] 2 points 1 year ago

You can use a seedbox and are fine without VPN

[–] [email protected] 2 points 1 year ago

You can pirate without a VPN, just don't use torrents. All major file hosts (like MEGA, Google Drive, etc.) use HTTPS. Your ISP can see that you're downloading from them, but they can't tell what you're downloading nor whether it's pirated content. People get busted for torrents all the time, downloading from other places (NOT P2P!)? Practically unheard of.

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago) (2 children)

Any distro is fine for piracy, ~~you could also set up tor tunnel for torrents~~ Only if your client supports it if ISP is something your worried about or just use a free VPN service

[–] [email protected] 3 points 1 year ago (1 children)

Dear god, don't use free VPNs. If they're not charging you,.they're making money somehow, generally by selling your personal data.

[–] [email protected] 2 points 1 year ago

I'd agree but if all I wanted was to torrent without my ISP knowing then its not important, personally I use paid for VPN service but I'd class myself as a privacy advocate

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

Literally stop being paranoid and do it. Prosecuting individuals for reproducing copyrighted material is almost never enforced unless you're directly angering the copyright holder.

"security" in /Linux distributions is using up-to-date software and having common sense OPSEC. I suggest you read up on the computer science of torrenting first and then pick your preferred libre bittorrent client with a VPN.

Sorry if I sound a bit standoffish but you have to rid yourself of the idea that there exists a "secure linux os." The only increased security with libre software is your own knowledge and know how.

[–] [email protected] 1 points 1 year ago (1 children)

As others have said, you OS is irrelevant. Windows would be no worse in this instance.

Instead, use a block list with your torrent software. Something like this: https://github.com/Naunter/BT_BlockLists/

And remember to keep it up to date.

[–] [email protected] 4 points 1 year ago

I consider blocklists snake oil, anyone can still get your IP just asking the tracker for a full list. If they can connect to you or not is almost irrelevant at that point.

[–] [email protected] 1 points 1 year ago
[–] [email protected] 1 points 1 year ago* (last edited 1 year ago) (2 children)

You don't need Linux to torrent. The VPN is so your ISP doesn't send you love letters. That's the useful thing. Once you have a VPN, there's no reason to be paranoid about conventional piracy behavior.

If you're paranoid anyway, it's more than just your choice of distro. OpenBSD is kinda made for paranoia, but you still have to think about who you're hiding from, how much is at risk if you get caught, how much time and money it's worth investing to protect yourself, what threats you're up against etc. Like, are you more afraid of downloading malware or being caught breaking the law?

If you just want some movies and music, get a vpn and go nuts. If you have no vpn, you can avoid being noticed by not sharing stuff that's popular when it's popular, like blockbuster movies.

Tails is a USB bootable linux distro folks use to buy drugs, FYI. Tor is helpful for staying anonymous from some companies and governments. I2P may be more private than Tor. Like, if you're afraid your government will put you in jail for political beliefs, then you start looking at in-depth OPSEC.

[–] [email protected] 4 points 1 year ago

TAILs forces all traffic through Tor. It's disallowed etiquette to use Tor for torrenting.

So dont use TAILs for this.

[–] [email protected] 3 points 1 year ago

Never torrent over Tor, torrent over I2P it actually supports it and has its own torrent client i2psnark