[liberationtech] The missing tech between TBB , Whoonix and Tails

[Nathan of Guardian]

On Mon, Jan 19, 2015, at 03:13 AM, Fabio Pietrosanti (naif) - lists
wrote:
> Hi all,
> 
> today when a user need to have some degree of protection for his network
> connectivity, for his browser experience, for his data stored and in the
> end for his "endpoint safety & integrity" (his computer) there are few
> options:
> - Tor Browser Bundle (an App)
> - Tails (an operating system replacement)
> - Whoonix (a virtual machine)
> 
> From a security, technical and usability perspective we acknowledge how
> those approach are different each other.
> 
> I don't see a usable solutions that provide various advantages of Tails
> with the VM approach of Whoonix while behaving with the same usability
> of TBB (being an App).
> 
> To make it short:
> - Tor Browser Bundle is usable, the user does not need to change it's
> "operating environment"
> - Tails it's a pain to install and to use, force the user to change it's
> "operating environment" and use it in an exclusive way

You can run TAILS as an app inside of QEMU or VirtualBox: 
https://tails.boum.org/doc/advanced_topics/virtualization/tails_within_windows/index.en.html

Do you mean something more than that? Obviously work could be done on
one-click boot from a shortcut etc but I think it wouldn't take much.

Obviously it isn't the safest approach, but within your goals it seems a
viable solution.

> - Whoonix it's less a pain to install than Tails, force the user to
> change it's "operating environment" but it can be used in parallel to
> the existing "operating environment" (Windows, MacOS X)
> 
> Now, i see that there is something missing among all that various
> technologies that can be:
> * Deployed as a self-contained app (like TBB)
> * Works in parallel with the existing operating environment of the
> end-user (Like Whoonix)
> * Provide the safety of operating in a Virtual Machine (like Whoonix)
> * Be integrate within the user operating environment (like VMWare
> integration with Windows App)
> 
> The only similar approach i found is this "BitBox" made by the German
> company Sirrix, used by the German Government, that's basically a sort
> of "Whoonix" but usable like-an-app from the end-user perspective:
> http://www.sirrix.com/content/pages/BitBox_en.htm
> 
> It would be a very interesting and challenging project to see Tails or
> Whoonix or TBB to evolve in that direction, opening up tons of new users.
> 
> -- 
> Fabio Pietrosanti (naif)
> HERMES - Center for Transparency and Digital Human Rights
> http://logioshermes.org - https://globaleaks.org - https://tor2web.org -
> https://ahmia.fi
> 
> -- 
> Liberationtech is public & archives are searchable on Google. Violations
> of list guidelines will get you moderated:
> https://mailman.stanford.edu/mailman/listinfo/liberationtech.
> Unsubscribe, change to digest, or change password by emailing moderator
> at companys at stanford.edu.


-- 
  Nathan of Guardian
  nathan at guardianproject.info