this post was submitted on 04 Jul 2024
185 points (97.9% liked)
Linux
47930 readers
1210 users here now
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I'm also based in the UK. I don't run a business but have occasionally encountered problems trying to use Librewolf on the web, especially with Noscript on.
I tried to use Qubes to separate my activities into VMs but I found it difficult. So I did my own, less extreme, approach using KVM.
I created a virtual machine which only has Chrome on it. This is what I use for accessing my bank, Paypal and doing online shopping.
I have a second machine I use for Whatsapp and email and finally a third with Librewolf for general web browsing.
Each uses the same VPN service but different servers.
I only use Freetube and Retroarch on my main machine.
This is on a very beefy Thinkpad I essentially use as a desktop in my office. I use a smaller machine downstairs with VNC on it as a remote when I'm sat on my sofa.
This sounds smart
This sounds ridiculous. So much work and overhead just to usea web browser?
It's not just browsing discussed there. Re-read that again with cybersecurity in mind... online banking shouldn't be done whilst you're sharing a browser with tiktok (as an example)
Yep, there's private / incognito modes, but they just drop all the local session data, they're not any more secure.
Why? Be specific because unless something has gone horribly wrong sites can't access data from other sites or tabs unless they're cooperating. In which case they do so with session data.
And you could simply have a separate Firefox profile rather than spinning up an entire virtual machine.
Neat, Mozilla’s VPN supports setting servers on a per-container basis.
Though gotta watch for DNS leaks apparently.
XSS springs to mind.
And spinning up a VM (or container) is not that hard nowadays.
This does absolutely nothing to defend against XSS.
This is the problem with paranoia-based security. You create needless overhead thinking you're "more secure," but you're not. Not in any way that really matters, at least.
This is what Firefox containers are for. Put the predatory sites in a container so they can't see out of it.
They can't "see out" of their own tab either. Websites can only access data in the browser that they create.
Sure they can, with cookies or tracking pixels for example.
It's not that much work. I created a VM which is running the same distro as the host. I removed all of the apps except for the terminal. Then I cloned it for each VM I need.
The Whatsapp/ email client VM and the Librewolf VM start with my OS so it's like having them in separate windows. The others I only start if needs be.
It's a lot of effort for the benefit you get, which is practically nothing. Especially considering there are even easier ways to get the same result
Such as?
Just use tabs they can't access each other's data. Or use a tab session manager. Or separate Firefox profiles.
I don't trust Chrome, Zoom or Teams, but sometimes have to use them. I will keep them in a separate VM but will look into Firefox profiles.
So it's just paranoia then... Which makes sense as it's way over the top.
Heck, even just creating separate system accounts and doing 'sudo -u social firefox' would be easier than spinning and maintaining VMs...