PORTALofPi

grugq released this 5 years ago... https://github.com/grugq/portal https://github.com/grugq/PORTALofPi

See the following: https://github.com/grugq/PORTALofPi https://www.portalmasq.com/portal-defcon.pdf

If you're going to build a secure laptop, why not go all out and remove your WiFi and bluetooth cards and connect to a Raspberry Pi or old router running PORTAL? :) https://github.com/grugq/PORTALofPi

One such appliance/distro is the "Personal Onion Router To Assure Liberty", there's even a raspberry pi version: https://github.com/grugq/PORTALofPi

Thanks for letting me know. ;) There is an issue for the torrc that is open on github, but it hasn't been applied yet. You might want to test it and see if it works for you. https://github.com/grugq/PORTALofPi/issues/16

for anyone clicking around like me searching for the code, and more description on the bird name(assuming it's some mozilla thing), it is[1] (and the repo [2]) i was assuming this would be some sort of xulrunner app(for some reason a non native chat client strikes me odd for some reason, but meh). it's actually an old seamonkey "fork" from what i gather, but i'm not sure if that's still the case. can someone comment on why a browser is more desirable? i'm guessing it's, because of random bugs appearing where dns or other things may be leaked, and crossplatform support.[3] i'm starting to think that the "right"(there i said it) way to deal with all this is if we follow with the portal approach[4](someone had a debian version, feel free to post the link). but instead of running portal on a seperate device it'll be a container in a container

You could try setting up TheGrugq's PortalofPi and route your computer through the Pi. https://github.com/grugq/PORTALofPi "A dedicated hardware device which forces all internet traffic to be sent over the Tor network. This significantly increases the odds of using Tor effectively, and reduces the potential to make fatal mistakes. " https://github.com/grugq/portal

Please, use something open source and truly secure: PORTAL on a Raspberry Pi. Developed by @thegrugq, reviewed and trusted by many. For a really lighter pricetag (the price of a RPi). https://github.com/grugq/PORTALofPi P.O.R.T.A.L. Personal Onion Router To Assure Liberty https://github.com/grugq/portal A Linux router that connects to Tor over one interface and shares the connection over another one. Simple and secure.

The "OPSEC for Hackers" guy, @grugq, is also developing a Tor appliance. PORTAL is opensource (unlike the SafePlug) and targets the Raspberry Pi. https://github.com/grugq/PORTALofPi

You got that so close, but wrong. Cloud services are inherently insecure because you don't have physical control over the devices containing your data. You have to trust that the remote end is secure, and exploiting trust is what intelligence agencies do best. For an encrypted router, here is my script for making a RaspberryPi into a PORTAL: https://github.com/grugq/PORTALofPi And an older blog post on why encryption and tradecraft only get you so far: http://grugq.github.io/blog/2013/03/12/anonymity-is-hard/ Here is the Ruckus Society's manual on "security culture" which has some brief info on why you need physical control over your data storage devices. Includes also some pointers on how to establish strong(er) physical security for your data. http://ruckus.org/article.php?id=789

There is some more indepth info on problems with trusting Tor (or any off the shelf "anonymity" solution) here: http://grugq.github.io/blog/2013/06/14/you-cant-get-there-fr... Also there's a more secure version of the RaspberryPi Tor router here: https://github.com/grugq/PORTALofPi It was submitted by someone last night under a terrible title, so it died a sad death in the "new" page.

See also: The Grugq's PORTAL of Pi project: https://github.com/grugq/PORTALofPi and its cousin for OpenWRT-based personal routers: https://github.com/grugq/portal