4 ms·

>Given the most common network activity is web browsing, it seems like enabling protections in the browser is becoming mandatory for the security-conscious. Wh

>Given the most common network activity is web browsing, it seems like enabling protections in the browser is becoming mandatory for the security-conscious. What I am looking for is an easy way to run something like a LiveCD OS in a VM for browsing. The problem is that I have never found a decent LiveCD that has Firefox with all of the mandatory extensions (uBlock Origin, etc...). I guess I could customize my own LiveCD, but last I looked into it, doing so seemed complex and too time consuming to figure out. Posting this in the hopes of being steered towards a simple solution or to inspire someone to create one.

Godel_unicode 4y ago
Windows AppGuard is close to this, although it’s a hyper-v silo not a full VM. Edge can open links in AppGuard (which is what this technology is called) right from the context menu, super convenient. https://learn.microsoft.com/en-us/deployedge/microsoft-edge-security-windows-defender-application-guard https://learn.microsoft.com/en-us/deployedge/microsoft-edge-...
- wintermutestwin 4y ago
  That sounds interesting and I like that Edge is one of the few browsers that has vertical tabs built in. The thing is that I don't trust MS and assume that they are thieving my data in any way they can...
  - transpute 4y ago
    MS AppGuard is a clone of Bromium, now branded as "SureClick" for Chromium and bundled with HP business laptops/PCs, with a security co-processor ("SureStart") monitoring firmware integrity.
ParetoOptimal 4y ago
> I guess I could customize my own LiveCD, but last I looked into it, doing so seemed complex and too time consuming to figure out. Here's a 5m solution whose starting point might be acceptable: - install Nix - Follow first two steps at https://nixos.wiki/wiki/Creating_a_NixOS_live_CD https://nixos.wiki/wiki/Creating_a_NixOS_live_CD to generate iso
- wintermutestwin 4y ago
  That does look simple! Are the steps: 1. Install Nix in a VM or on a clean HD 2. Customize Firefox to my liking 3. follow the two steps you highlight 4. Load my created iso in a VM Right?
  - ParetoOptimal 4y ago
    > Install Nix in a VM or on a clean HD You should be safe to avoid this unless your threat model includes a trusting trust type exploit on Nix generating the ISO. Also, just realized it'll be a little more complex because you'll want to use home-manager to install Firefox plugins and do about:config configuration. Here are some examples of that in various contexts: https://github.com/search?q=language%3Anix+programs.firefox+settings&type=Code https://github.com/search?q=language%3Anix+programs.firefox+...

Godel_unicode 4y ago

Windows AppGuard is close to this, although it’s a hyper-v silo not a full VM. Edge can open links in AppGuard (which is what this technology is called) right from the context menu, super convenient. https://learn.microsoft.com/en-us/deployedge/microsoft-edge-security-windows-defender-application-guard https://learn.microsoft.com/en-us/deployedge/microsoft-edge-...

wintermutestwin 4y ago
That sounds interesting and I like that Edge is one of the few browsers that has vertical tabs built in. The thing is that I don't trust MS and assume that they are thieving my data in any way they can...
- transpute 4y ago
  MS AppGuard is a clone of Bromium, now branded as "SureClick" for Chromium and bundled with HP business laptops/PCs, with a security co-processor ("SureStart") monitoring firmware integrity.

ParetoOptimal 4y ago

> I guess I could customize my own LiveCD, but last I looked into it, doing so seemed complex and too time consuming to figure out. Here's a 5m solution whose starting point might be acceptable: - install Nix - Follow first two steps at https://nixos.wiki/wiki/Creating_a_NixOS_live_CD https://nixos.wiki/wiki/Creating_a_NixOS_live_CD to generate iso

wintermutestwin 4y ago
That does look simple! Are the steps: 1. Install Nix in a VM or on a clean HD 2. Customize Firefox to my liking 3. follow the two steps you highlight 4. Load my created iso in a VM Right?
- ParetoOptimal 4y ago
  > Install Nix in a VM or on a clean HD You should be safe to avoid this unless your threat model includes a trusting trust type exploit on Nix generating the ISO. Also, just realized it'll be a little more complex because you'll want to use home-manager to install Firefox plugins and do about:config configuration. Here are some examples of that in various contexts: https://github.com/search?q=language%3Anix+programs.firefox+settings&type=Code https://github.com/search?q=language%3Anix+programs.firefox+...