4 ms·
"buy a $35 raspberry pi and stuff it between your computer and the internet and route all traffic through it through tor? Too many zero days out there in browse
by kbart 10y ago
"buy a $35 raspberry pi and stuff it between your computer and the internet and route all traffic through it through tor? Too many zero days out there in browsers, flash, java, office"
How does Raspberry Pi help here? If it routes traffic at IP level, it will be transparent at an application level. Firewall/IDS won't help against zero days either.
- mavdi 10y agoIndeed. People are wrong with such confidence these days.
- mirimir 10y agoYes, that's a serious problem. But being wrong in parent's direction isn't so bad ;) Over-engineering and prudence is my mantra.
- makomk 10y agoIt's trivial to use iptables to block all traffic except to the SOCKS proxy port on Tor, or even forcibly redirect it all through Tor directly using the transparent proxying support.
- kbart 10y agoYou can do all that on a host PC as well. I still don't see what additional layer of security Raspberry Pi adds here. Or am I missing something?
- JupiterMoon 10y agoThe idea is that even if the host PC is pwned the Pi will still route the traffic from it via Tor.
- robjan 10y agoIf the host PC is pwned then it can still disclose useful information about itself (files, Geo locations, mac addresses) - it will just be routed over TOR.
- mirimir 10y agoTrue. So it must not contain anything that's associated with you, in any way. Buy with cash. No geolocation data. Dedicated LAN. No sneaker net sharing. Compartmentalization.
- JupiterMoon 10y agoTotally agreed. I nearly edited my comment yesterday to include this actually. It is just one potential brick in your security wall.