5 ms·
It's trivial to use iptables to block all traffic except to the SOCKS proxy port on Tor, or even forcibly redirect it all through Tor directly using the transpa
by makomk 10y ago
It's trivial to use iptables to block all traffic except to the SOCKS proxy port on Tor, or even forcibly redirect it all through Tor directly using the transparent proxying support.
- kbart 10y agoYou can do all that on a host PC as well. I still don't see what additional layer of security Raspberry Pi adds here. Or am I missing something?
- JupiterMoon 10y agoThe idea is that even if the host PC is pwned the Pi will still route the traffic from it via Tor.
- robjan 10y agoIf the host PC is pwned then it can still disclose useful information about itself (files, Geo locations, mac addresses) - it will just be routed over TOR.
- mirimir 10y agoTrue. So it must not contain anything that's associated with you, in any way. Buy with cash. No geolocation data. Dedicated LAN. No sneaker net sharing. Compartmentalization.
- JupiterMoon 10y agoTotally agreed. I nearly edited my comment yesterday to include this actually. It is just one potential brick in your security wall.