51–60 of 192 posts
I recently had to dust off tails to do some dark web research on a data breach.
It’s a great “prophylactic” to protect your assets from possible malware while doing research.
Love Tails, but I haven't used it in ten years. I have had Tails and Qubes disposable VMs on my mind though. I switched off of Qubes last year to my own Alpine chroot with a hand crafted kernel and initrd that lives only in memory. I find turning off the computer when I'm finished and having it forget everything to be a very peaceful way to compute. I owe the internet a write up. I feel like ramfs for root filesystem…
my whole PDE (Personal Developer Environment) is within a container. Need python? Shell into (via dmenu) python container. All with complete neovim setup. Need a GUI? No problem. Spawn a container. My lxd profile is set up for this. Use chezmoi for heavy automated stuff.
My base alpine system always stays clean.
I've heard bad things about Tails over the last few years. What with the UK planning to pass that online safety bill, I decided to try out Whonix (which involved learning curves when it came to Linux), which I think is a better way of keeping safe online.
> I've heard bad things about Tails over the last few years. Like what?
Anecdotal evidence, but I've heard numerous complaints from other users about telemetry settings being enabled in the browser and locked.
But worst of all, it uses GNOME.
I suspect you're better off with a more obscure project, because then your adversary is less likely to have a 'ready to go' exploit.
Love Tails, but I haven't used it in ten years. I have had Tails and Qubes disposable VMs on my mind though. I switched off of Qubes last year to my own Alpine chroot with a hand crafted kernel and initrd that lives only in memory. I find turning off the computer when I'm finished and having it forget everything to be a very peaceful way to compute. I owe the internet a write up. I feel like ramfs for root filesystem…
Same here. Dont understand why not more ppl switched to alpine on the desktop. It is my daily driver. Plus LXD for stuff I must do (typically spawn ubuntu, etc.) my whole PDE (Personal Developer Environment) is within a container. Need python? Shell into (via dmenu) python container. All with complete neovim setup. Need a GUI? No problem. Spawn a container. My lxd profile is set up for this. Use chezmoi for heavy aut…
Earlier quoted context omitted.
All known law enforcement attacks against Tor have involved some kind of exploit (e.g., in Tor Browser) that creates a non-Tor connection to collect the user's IP. Tails does not protect against this. Whonix provides much stronger protection against practical, real-world attacks, since the entire operating system is forced through a Tor connection.
Tails has the entire OS as Tor connections only, an escape from the Tor browser would still be stuck in a Tor only OS. What information do you have to the contrary?
Assuming there was an exploit that broke out of the Firefox sand box you are correct that any connection is via tor.
Though tails isn't 100% sure, you could chain a Firefox cve + user land to root and then turn off the to routing rules.
Networking will be set up so the Chrome inner VM can ssh to the tor VM. The tor VM can access only some whitelisted tor nodes.
Now an adversary that uses a Chrome exploit needs to break out of Windows and 2 layers of VM's before they get to my host. Breaking out of a VM is fairly doable, but breaking out of two will require lots of zero-days chained together (expensive).
Same if they find an exploit in tor.
Earlier quoted context omitted.
It's a Tor client. Bypassing censorship is one of Tor's design goals.
If you get canceled and ISPs refuse to give you service Tor is not able to somehow bypass that censorship. If the server your hidden service is hosted on is taken away in a raid. Tor doesn't help you there. Providing limited protection from being deanonymized doesn't mean that you can no longer be censored.