Re:Belarus finally bans Tor
by makomk on Friday December 09, 2016 @05:36AM
(#13137920)
It's trivial to use iptables to block all traffic except to the SOCKS proxy port on Tor, or even forcibly redirect it all through Tor directly using the transparent proxying support.
[ Parent
| on HN ]
You can do all that on a host PC as well. I still don't see what additional layer of security Raspberry Pi adds here. Or am I missing something?
Re:Belarus finally bans Tor
by JupiterMoon on Friday December 09, 2016 @06:15AM
(#13138066)
The idea is that even if the host PC is pwned the Pi will still route the traffic from it via Tor.
If the host PC is pwned then it can still disclose useful information about itself (files, Geo locations, mac addresses) - it will just be routed over TOR.
True. So it must not contain anything that's associated with you, in any way. Buy with cash. No geolocation data. Dedicated LAN. No sneaker net sharing. Compartmentalization.
Re:Belarus finally bans Tor
by JupiterMoon on Saturday December 10, 2016 @05:57AM
(#13145102)
Totally agreed. I nearly edited my comment yesterday to include this actually.
It is just one potential brick in your security wall.