Hi Giulio, Giulio: > 1) Most website with a login do have https. Yea especially now compared with a few years ago. Some still don't unfortunately!
> 2) Which type of files are you talking about? If we are not talking about > executables (i hope not) then Qubes do have disposable vms which should > prevent an attacker from accessing sensitive files or gaining persistance. Mostly pdfs/documents and maybe media files, but maybe also things like game roms to play in an emulator. Nothing super important but i still want to avoid compromise especially if i'm transfering files to a usb stick/another computer. I need to get in the habit of opening files in dispvms tho. > As a general rule, mixing any of your tor activities with your non tor > activities do break the very purpose of tor, especially if you use the same > accounts in and out. Yea using the same accounts for things in and out of tor is pretty pointless. It seems pretty safe tho to use the same site in and out of tor if you're doing different things and therefore not linked? (as long as it's not at the same time) > My suggestion is to first try to understand what the purpose of tor is and > against which type of adversary you need protection and then make your > choices on that basis. As far as what kind of adversary i'm thinking about here i guess ones with alot of resources, who think using tor is inherently bad/suspicious, and so operate exit nodes to scoop up data on tor users, and try to compromise random users to see what they're up to. -Jackie -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c71de19c-0510-0b00-d1a0-2d8c98e026c6%40riseup.net. For more options, visit https://groups.google.com/d/optout.
