johnyju...@sigaint.org:
> 
>> I just use Whonix within Qubes and I like it. I'm glad it comes out of
>> the box since 3.1
> 
> I've retreated to only using Fedora.  Setting up Tor and Firefox (with
> noscript, ssl observatory, adblocker) to use it as a proxy is essentially
> the same effect as Whonix (or tbb).  Even if tor/firefox are on the same
> vm rather than separated, you're behind sys-net and sys-firewall, so your
> real world address isn't going to leak.  Another two VM's on top of that
> (whonix-gw and whonix-ws) is a bit of overkill IMO, and a memory pig.

Running Tor in the same VM as the browser won't keep your public IP from
leaking to the same extent as using Whonix.  For example, if Firefox
gets pwned, it can simply generate a request to whatismyip.com without
going through Tor, and then send the result to whoever it likes.

(Unless I'm misunderstanding what you're doing.)

Cheers,
-Jeremy Rand

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/204c1635-520a-e9c4-aa87-edc40e59b59f%40airmail.cc.
For more options, visit https://groups.google.com/d/optout.

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to