5 ms·

I feel like Tor Browser should just spin up a fresh VM with a minimal Linux distribution and fullscreen Tor browser, with the VM's only networking tunneled thro

I feel like Tor Browser should just spin up a fresh VM with a minimal Linux distribution and fullscreen Tor browser, with the VM's only networking tunneled through Tor. I think Hyper-V can do graphics as well and it looks like bhyve added some sort of graphics support earlier this year, but xhyve has none. Not sure if there are any other lightweight hypervisors that support graphics (or maybe just use a protocol like X11 or VNC?). Docker for Mac and Docker for Windows have done a great job of hiding the fact that it's using virtualization from users (but doesn't need graphics, of course)

ikeboy 10y ago
One word: whonix.
- giancarlostoro 10y ago
  ParrotSec OS is another OS that tries to fully block all connections not going through Tor, out of the box.
- nilved 10y ago
  Another: Qubes
secant 10y ago
A slight aside, but is Docker on Unix running natively then?
- tlrobinson 10y ago
  Typically yes, unless you set it up in a VM yourself (or using docker-machine)
easychewie 10y ago
> fullscreen Tor browser Tor recommends not going full-screen, since window size can be used as one of several identifiers.
- tlrobinson 10y ago
  I mean fullscreen within the VM's desktop (no need for normal GNOME/KDE/whatever desktop), which itself may not be fullscreen on host OS. It would act like a native app. If you quit the browser it shuts down the VM.
  - gruez 10y ago
    >I mean fullscreen within the VM's desktop so like... maximized?
  - zwindl 10y ago
    Ah, You mean the VM only have one program which is Tor browser, and when Tor terminated the VM should terminated with it.
- micaksica 10y ago
  The VM can go "full screen" and lock the height/width in X, then.
  - trome 10y ago
    We could do stretching then when the user tries to enbiggen it, that way they don't get deanonymized!
    - micaksica 10y ago
      It is basically impossible to fully anonymize a browser as long as JavaScript+plugins are running. EFF's Panopticlick [1] and browserleaks [2] are good at explaining some of these fingerprinting vectors. [1] https://panopticlick.eff.org/ https://panopticlick.eff.org/ [2] http://browserleaks.com/ http://browserleaks.com/
- homakov 10y ago
  This is worst part of Tor browsing for me. 1000x800?! Are you kidding! Must be upped to macbook's 1680, or whatever is most popular resolution of a modern display
mtgx 10y ago
So basically Whonix? https://www.whonix.org/ https://www.whonix.org/
pjmlp 10y ago
Yes it can. It is a type 1 hypervisor and DX is supported since a few versions. Also the foundation of Windows 10 containers and secure kernel.

ikeboy 10y ago

One word: whonix.

giancarlostoro 10y ago
ParrotSec OS is another OS that tries to fully block all connections not going through Tor, out of the box.
nilved 10y ago
Another: Qubes

secant 10y ago

A slight aside, but is Docker on Unix running natively then?

tlrobinson 10y ago
Typically yes, unless you set it up in a VM yourself (or using docker-machine)

easychewie 10y ago

> fullscreen Tor browser Tor recommends not going full-screen, since window size can be used as one of several identifiers.

tlrobinson 10y ago
I mean fullscreen within the VM's desktop (no need for normal GNOME/KDE/whatever desktop), which itself may not be fullscreen on host OS. It would act like a native app. If you quit the browser it shuts down the VM.
- gruez 10y ago
  >I mean fullscreen within the VM's desktop so like... maximized?
- zwindl 10y ago
  Ah, You mean the VM only have one program which is Tor browser, and when Tor terminated the VM should terminated with it.
micaksica 10y ago
The VM can go "full screen" and lock the height/width in X, then.
- trome 10y ago
  We could do stretching then when the user tries to enbiggen it, that way they don't get deanonymized!
  - micaksica 10y ago
    It is basically impossible to fully anonymize a browser as long as JavaScript+plugins are running. EFF's Panopticlick [1] and browserleaks [2] are good at explaining some of these fingerprinting vectors. [1] https://panopticlick.eff.org/ https://panopticlick.eff.org/ [2] http://browserleaks.com/ http://browserleaks.com/
homakov 10y ago
This is worst part of Tor browsing for me. 1000x800?! Are you kidding! Must be upped to macbook's 1680, or whatever is most popular resolution of a modern display

mtgx 10y ago

So basically Whonix? https://www.whonix.org/ https://www.whonix.org/

pjmlp 10y ago

Yes it can. It is a type 1 hypervisor and DX is supported since a few versions. Also the foundation of Windows 10 containers and secure kernel.