4 ms·
I can imagine for high-value target there are stacking exploits: 1) escape from browser into VM 2) escape from VM into host 3) run exploit on host
by coolspot 6y ago
I can imagine for high-value target there are stacking exploits:
1) escape from browser into VM
2) escape from VM into host
3) run exploit on host
- mirimir 6y agoTrue. However, such high-value targets would be isolating the Tor process and apps at the hardware level. It's over my head, but I can imagine elements from Tinfoil Chat and Qubes Air. And yes, vulnerabilities in Tor have been exploited. So it's prudent to hit Tor via nested VPN chains, just in case.
- aspenmayer 6y agoCould you use a ring of VPSs spawning independent VM sessions, which are randomly connected to as needed, and puppeted by scripts or ML, used by others in the meantime, and torn down randomly and on a schedule. Cloud hop in the noise.
- throwawey 6y agoThey don't need to stack anything. Everything that solely uses tor for protectioncan be pwned by pwning Tor. Happens once in while.