4 ms·
Why doesn't Tor browser just automagically run a read-only lightweight Linux VM who's only program is Firefox, and only network connection is proxied through To
by tlrobinson 10y ago
Why doesn't Tor browser just automagically run a read-only lightweight Linux VM who's only program is Firefox, and only network connection is proxied through Tor? Seems like that would solve almost every fingerprinting and sandbox escape vulnerability.
- moondev 10y agohttps://github.com/paulczar/docker-torbrowser https://github.com/paulczar/docker-torbrowser
- chimeracoder 10y agoThat shares your X11 session, which is a security nightmare. If you're running an untrusted application, you should absolutely not give it access to your X11 session. (There are other reasons you might want to have a Tor browser running inside a container, but if the main goal is to nullify fingerprinting and sandbox exploits, you're better off just using an actual VM).
- noja 10y agoWayland is less of a security nightmare, how would it work with Wayland?
- orf 10y agoSeems OK until you want to upload a file somewhere.
- tlrobinson 10y agoThat doesn't seem like a particularly hard problem to solve.
- BuuQu9hu 10y agoSee Qubes, Whonix, Tails, Subgraph etc.