Re: [qubes-users] Tool to record Whonix / Tor browsing history..?
On 08/14/2016 06:33 PM, Unman wrote: > On Fri, Aug 12, 2016 at 02:58:26PM +, Manuel Amador (Rudd-O) wrote: >> On 08/12/2016 01:39 PM, neilhard...@gmail.com wrote: >>> I would like to be able to do something like: >>> >>> 1. Use Whonix/Tor as a disposable VM >>> >>> 2. Record browsing history using an external software >>> >>> One of the reasons I don't use Tor that much (other than slow speed, >>> captchas etc) is because I actually want to have a record of the websites I >>> have visited. >>> >>> We know that it could be risky to have the Tor browser itself record >>> history, if it gets hacked. >>> >>> But to have some tool running outside of the VM would be useful.. >> >> For the same reason that attackers outside the VM can't see what you're >> visiting, you yourself won't be able to see it either. >> >> What you want is not doable. >> >> If you want to have a record of sites you visit, then tell the Tor >> Browser to record your browsing history, and hope that works for you. >> >> -- >> Rudd-O >> http://rudd-o.com/ >> > > It should be possible to insert a proxy between the browser and the Tor > gateway, and sniff the traffic there. > You could use a crafted tcpdump filter to some effect, but you wont just > get a record of websites, but all requests, so you will have to do some > post processing on the file to identify the websites. Not difficult, but > probably wont be exactly what you want. It will, of course, also include > all resource requests: that could be interesting, and might surprise > you. > > unman > I was thinking something like have the Tor Browser record history in a disposable VM, and have a Qubes RPC pull the Firefox profile to a separate VM. More options like parsing the SQLite database could be included to increase usability. https://support.mozilla.org/en-US/kb/profiles-where-firefox-stores-user-data -- kulinacs -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/76bc7cdc-d0d9-faaa-27b1-292674c1900d%40kulinacs.com. For more options, visit https://groups.google.com/d/optout. signature.asc Description: OpenPGP digital signature
Re: [qubes-users] Tool to record Whonix / Tor browsing history..?
On Fri, Aug 12, 2016 at 02:58:26PM +, Manuel Amador (Rudd-O) wrote: > On 08/12/2016 01:39 PM, neilhard...@gmail.com wrote: > > I would like to be able to do something like: > > > > 1. Use Whonix/Tor as a disposable VM > > > > 2. Record browsing history using an external software > > > > One of the reasons I don't use Tor that much (other than slow speed, > > captchas etc) is because I actually want to have a record of the websites I > > have visited. > > > > We know that it could be risky to have the Tor browser itself record > > history, if it gets hacked. > > > > But to have some tool running outside of the VM would be useful.. > > For the same reason that attackers outside the VM can't see what you're > visiting, you yourself won't be able to see it either. > > What you want is not doable. > > If you want to have a record of sites you visit, then tell the Tor > Browser to record your browsing history, and hope that works for you. > > -- > Rudd-O > http://rudd-o.com/ > It should be possible to insert a proxy between the browser and the Tor gateway, and sniff the traffic there. You could use a crafted tcpdump filter to some effect, but you wont just get a record of websites, but all requests, so you will have to do some post processing on the file to identify the websites. Not difficult, but probably wont be exactly what you want. It will, of course, also include all resource requests: that could be interesting, and might surprise you. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20160814233352.GB4457%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Tool to record Whonix / Tor browsing history..?
Manuel Amador (Rudd-O): > On 08/12/2016 01:39 PM, neilhard...@gmail.com wrote: >> I would like to be able to do something like: >> >> 1. Use Whonix/Tor as a disposable VM >> >> 2. Record browsing history using an external software >> >> One of the reasons I don't use Tor that much (other than slow speed, >> captchas etc) is because I actually want to have a record of the websites I >> have visited. >> >> We know that it could be risky to have the Tor browser itself record >> history, if it gets hacked. >> >> But to have some tool running outside of the VM would be useful.. > > For the same reason that attackers outside the VM can't see what you're > visiting, you yourself won't be able to see it either. > > What you want is not doable. > > If you want to have a record of sites you visit, then tell the Tor > Browser to record your browsing history, and hope that works for you. > You could also simply fire up a text editor (gedit etc) in another VM and record what you want that way. Trying to automate the process would be a bad idea for security, especially if using Whonix as a dispVM. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/28f04dba-7a03-9468-cf85-ba68ea502216%40riseup.net. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Tool to record Whonix / Tor browsing history..?
On 08/12/2016 01:39 PM, neilhard...@gmail.com wrote: > I would like to be able to do something like: > > 1. Use Whonix/Tor as a disposable VM > > 2. Record browsing history using an external software > > One of the reasons I don't use Tor that much (other than slow speed, captchas > etc) is because I actually want to have a record of the websites I have > visited. > > We know that it could be risky to have the Tor browser itself record history, > if it gets hacked. > > But to have some tool running outside of the VM would be useful.. For the same reason that attackers outside the VM can't see what you're visiting, you yourself won't be able to see it either. What you want is not doable. If you want to have a record of sites you visit, then tell the Tor Browser to record your browsing history, and hope that works for you. -- Rudd-O http://rudd-o.com/ -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/08b6dcb5-7ae2-ae0a-36eb-e384cfd8fc64%40rudd-o.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Tool to record Whonix / Tor browsing history..?
I would like to be able to do something like: 1. Use Whonix/Tor as a disposable VM 2. Record browsing history using an external software One of the reasons I don't use Tor that much (other than slow speed, captchas etc) is because I actually want to have a record of the websites I have visited. We know that it could be risky to have the Tor browser itself record history, if it gets hacked. But to have some tool running outside of the VM would be useful.. Is that possible..? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/72cae3bb-8359-49b3-91db-12e3b9e12c2a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.