Re:Tails is a portable OS that protects against surveillance...
by crimmin on Thursday September 14, 2023 @12:23PM
(#37511014)
It's a bit more secure if you use a proper write once DVD as well to read the live cd. It's a bit slower to boot but the best way to prevent persistence is always to make it virtually physically impossible by not having any physical storage mediums connected
Re:Tails is a portable OS that protects against surveillance...
by londons_explore on Thursday September 14, 2023 @12:25PM
(#37511045)
I think the main concern of most tor-users is that their real IP address (and hence location) is leaked.
For that, just a run-of-the-mill firefox exploit is all that is needed, and suddenly exploit code can do a wifi scan and get a very precise location.
Re:Tails is a portable OS that protects against surveillance...
by nonameiguess on Thursday September 14, 2023 @02:42PM
(#37513008)
Honestly, if this is a serious concern and you're already willing to go to all the other trouble, you may as well do your most sensitive Internet browsing from your car, connecting only to public WiFi in parking lots, in cities you don't actually live in, and never stay connected for more than a few hours at at time. Or take a hint from history's most secure criminals and don't do any of this yourself at all. Use paid underlings who fear you more than they fear prison and are willing to do time rather than rat you out.
Re:Tails is a portable OS that protects against surveillance...
by Syonyk on Thursday September 14, 2023 @12:56PM
(#37511508)
You've just independently developed something almost identical to the Whonix system. :) May as well use the pre-built VMs that do it for you.
Re:Tails is a portable OS that protects against surveillance...
by londons_explore on Thursday September 14, 2023 @01:11PM
(#37511729)
Pre built VM's mean an adversary probably has pre-built exploits...
Networking will be set up so the Chrome inner VM can ssh to the tor VM. The tor VM can access only some whitelisted tor nodes.
Now an adversary that uses a Chrome exploit needs to break out of Windows and 2 layers of VM's before they get to my host.
Same if they find an exploit in tor.