Security Basics mailing list archives
Re: Secure Internet Browsing
From: Orlin Gueorguiev <orlin () baturov com>
Date: Wed, 9 Jan 2008 17:37:32 +0100
If you need a computer for only browzing, you can just use a live cd(whitout mounting a hdd). This will however mean, that you will be unable to save any information on the hard disk. However you can save it on an online storage or better: usb. If you use an encrypted file system on this device and not allowed executing files from the usb, more of your problems should be out. Every restart of the system will trow you to a secure enviroment. The first Live CD was Knoppix, not a bad distro. Almoast every Linux distro has a live cd... check what programs (and versions) come on those cds and if not setisfied, try this: http://gentoo-wiki.com/HOWTO_Gentoo_LiveCD_and_LiveUSB Regards, Orlin На Wednesday 26 December 2007 17:08:04 Rodrigo Blanco написа:
Hello list, these days I have been taking a look at the solution for secure Internet browsing based on VMWare player + Browser Appliance (Ubuntu virtual image running firefox). I especially like three things of it: apprently more resistant to virus / spyware / malware, browser does not run with admin / root privileges and the auto-revert feature, that will automatically revert the machine to its original state, no matter what visited sites have added (cookies, malware...) to the client. I had already heard of other solutions, more suitable for corporate environments, such as a Citrix-based IE browser, on a machine that is re-built everyday (maybe through some virtualization solution) so that any infection is automatically eliminated daily. While these solutions will help prevent against spyware, malware and viruses, I still have the feeling they still would be vulnerable to keyloggers or resident programs able to capture mouse / GUI events. I.e. if the machine running the VMPlayer has a keylogger running, it would still be able to capture keystrokes sent to the Browser Appliance virtual machine. What is your opinion? Do you know of solutions that will provide a "reasonably complete" security for browsing? Are they suitable for both home and corporate environments? Thanks for any comments and kind regards, Rodrigo.
Current thread:
- Re: Secure Internet Browsing Orlin Gueorguiev (Jan 09)
- RE: Secure Internet Browsing Shamanovsky, Victor (x2035) (Jan 14)
- Re: Secure Internet Browsing Chad Perrin (Jan 17)
- Re: Secure Internet Browsing v0r4r3 (Jan 17)
- Re: Secure Internet Browsing brian . bevers (Jan 17)
- Re: Secure Internet Browsing Chad Perrin (Jan 17)
- Re: Secure Internet Browsing Liam Jewell (Jan 17)
- RE: Secure Internet Browsing Shamanovsky, Victor (x2035) (Jan 14)
- <Possible follow-ups>
- Re: Re: Secure Internet Browsing ljjewell (Jan 17)
- Re: Secure Internet Browsing krymson (Jan 17)
- RE: Secure Internet Browsing Timmothy Lester (Jan 18)
- Re: Secure Internet Browsing scott (Jan 18)
- RE: Secure Internet Browsing Timmothy Lester (Jan 18)
- Re: Re: Secure Internet Browsing fac51 (Jan 18)