4 ms·
I'd add apparmor or selinux or virtualization (or all at once) for untrusted closed-source crap like Skype. Well, for things with large attack surface, like web
by andrey_utkin 10y ago
I'd add apparmor or selinux or virtualization (or all at once) for untrusted closed-source crap like Skype. Well, for things with large attack surface, like web browsers, it's important, too.
This is hard to recommend to everybody, but I use SELinux and this way I am more sure that my private keys won't get stolen.
- leni536 10y agoI'm curious, do you run Skype on the same X server as your other software?
- andrey_utkin 10y agoYes I do. And yes I know that clipboard content hijacking is piece of cake with Xorg. By this reason I launch original Skype only when I need it to have a call with my chief. Fortunately, such occasions are rare now. So I just avoid copy-pasting anything sensitive when Skype is launched :) For the rest of time, I use XMPP-Skype transport (gateway) to stay connected with ~100 of my skype contacts. This XMPP-Skype gateway handles 1:1 and groupchats, which is ok for me. I host this system as a public service, so if you are interested, feel free to check http://decent.im http://decent.im . This is a work in progress on deployment of powerful open source stuff in a supercharged and easily reproduceable way, so no slack killer yet, things are dirty, just a handy tool for me (and few other account owners) to aggregate all one's messaging into one, and very flexible, mechanism.