On Wednesday, February 1, 2017 at 7:48:06 AM UTC-5, Michael Carbone wrote: > Franz: > > On Wed, Feb 1, 2017 at 2:13 AM, Chris Laprise > > wrote: > > > >> On 01/31/2017 10:47 PM, Gaiko Kyofusho wrote: > >> > >>> I keep reading examples where people are using something like mobile > >>> routers between thier phone/computer and public wifi spots, example like > >>> the blackholecloud <https://blackholecloud.com/>device or apparently > >>> Mike Perry of the tor project told arstechnica < > >>> https://arstechnica.com/security/2016/11/tor-phone-prototyp > >>> e-google-hostility-android-open-source/>that "He suggests leaving the > >>> prototype in airplane mode and connecting to the Internet through a > >>> second, > >>> less-trusted phone, or a cheap Wi-Fi cell router." > >>> > >> > >> This is pretty dubious advice. What is to stop an attacker from breaking > >> into the mobile router and using that as an attack platform to break into > >> your main device? A few minutes...? > > The point of Mike Perry's strategy is to (1) protect against baseband > access/tracking by only using a phone's WiFi and to (2) protect against > the current poor situation of firewalling in Android to *protect against > non-Tor identity leaks*. > > It seems pretty orthogonal to what you want to discuss with this thread > - using mobile routers as a firewall for non-phone devices (Qubes) > against active attackers.
Sorry yes, mentioning MP's use of a phone here was perhaps a bit tangential but as he seems to be a fairly well respected sec/priv person and uses an external/mobile router (a model that I thought could be applied to my Qubes opsec useage if it was applicable/made-sense) I thought I'd ask. Anyway, according to Chris it seems that its a bit moot as I think he confirmed that Qubes separate firewall and net VMs kind of serve the same purpose? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2e6be693-ef51-4c57-83c8-455fca923b68%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
