[Gllug] Open Source Hardware User Group meeting on Thursday.

Dennis Furey dennis at basis.uklinux.net
Wed Apr 28 09:01:39 UTC 2010


On Tue, Apr 27, 2010 at 10:24:42PM -0700, Walter Stanish wrote:
> If you are that paranoid - and there is call for it - consider 'new user
> profile
> running in a cut-down, custom-compiled browser in a new virtual machine
> with highly restricted permissions, accessed via VNC exclusively' as your
> new default browser....
> 

Great ideas, and not so far fetched. I do something like that. The
browser runs inside VirtualBox, which is restored from a snapshot of a
fresh installation for every session, with no connections allowed from
the VM to the host system, and no persistent virtual file storage at
all except for a small bookmarks file on a separately mounted virtual
disk just large enough to hold it. All http traffic gets ssh tunneled
over my wireless network to a local proxy server on another machine
with a wired connection to the router, also with no sensitive
information on it, and ssh tunneled from there to a machine in my
office that goes through my university's proxy server which is used by
thousands of people.
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug




More information about the GLLUG mailing list