privacyguides
/
privacytools.io
Archived
1
0
Fork 0
Code Issues 304 Pull Requests 47 Activity

VM Page #1064

Closed
ghbjklhv1 wants to merge 14 commits from patch-10 into master
pull from: patch-10
merge into: privacyguides:master
Conversation 4 Commits 14 Files Changed 6 +37
ghbjklhv1 commented 2019-07-30 03:19:23 +00:00 (Migrated from github.com)
Copy Link

Description: Adds notice to using VM
Why?: Applications are inherently insecure, users should run extra-insecure apps in a VM.
- like what QubesOS does.

What is the attached files: I created a PR for this design. It doesn't need to be the final result but I wanted to get the ball rolling. Edits from maintainers are welcomed.

Has this been discussed here: Nope.

**Description**: Adds notice to using VM **Why?**: Applications are inherently insecure, users should run extra-insecure apps in a VM. `-` like what QubesOS does. **What is the attached files**: I created a PR for this design. It doesn't need to be the final result but I wanted to get the ball rolling. Edits from maintainers are welcomed. **Has this been discussed here**: Nope.
victorhck (Migrated from github.com) reviewed 2019-07-30 03:19:23 +00:00
bookercodes (Migrated from github.com) reviewed 2019-07-30 03:19:23 +00:00
privacytoolsIO (Migrated from github.com) reviewed 2019-07-30 03:19:23 +00:00
c0rdis (Migrated from github.com) reviewed 2019-07-30 03:19:23 +00:00
jonah reviewed 2019-07-30 03:19:23 +00:00
jxtsai (Migrated from github.com) reviewed 2019-07-30 03:19:23 +00:00
kewde (Migrated from github.com) reviewed 2019-07-30 03:19:23 +00:00
nitrohorse (Migrated from github.com) reviewed 2019-07-30 03:19:23 +00:00
Vincevrp (Migrated from github.com) reviewed 2019-07-30 03:19:23 +00:00
netlify[bot] commented 2019-07-30 03:20:03 +00:00 (Migrated from github.com)
Copy Link

Deploy preview for privacytools-io ready!

Built with commit e9c3fcff49

https://deploy-preview-1064--privacytools-io.netlify.com

Deploy preview for *privacytools-io* ready! Built with commit e9c3fcff492ce1b38b3373d384bae86be334d740 https://deploy-preview-1064--privacytools-io.netlify.com
Mikaela (Migrated from github.com) reviewed 2019-07-30 11:00:22 +00:00
Mikaela (Migrated from github.com) left a comment

I am indifferent about this PR, but I guess I wish answers to my questions before giving my approval. Questions that I didn't ask yet:

  • I don't see an update for /classic.
  • What is the image source and license?
I am indifferent about this PR, but I guess I wish answers to my questions before giving my approval. Questions that I didn't ask yet: * I don't see an update for /classic. * What is the image source and license?
_includes/nav.html
@ -53,6 +53,8 @@
<a class="dropdown-item" href="/software/networks/"><i class="fas fa-user-secret fa-fw"></i> Self-contained Networks</a>
<a class="dropdown-item" href="/software/cloud/"><i class="fas fa-hdd fa-fw"></i> Self-Hosted Cloud Server</a>
<a class="dropdown-item" href="/software/voip/"><i class="fas fa-phone fa-fw"></i> Video & Voice Messenger</a>
<a class="dropdown-item" href="/vm"><i class="fas fa-phone fa-fw"></i> Virtual Machines</a>
Mikaela (Migrated from github.com) commented 2019-07-30 10:50:56 +00:00

I think you might want to take a different icon here.

I think you might want to take a different icon here. * https://fontawesome.com/icons
_includes/sections/vm.html
Mikaela (Migrated from github.com) commented 2019-07-30 10:58:01 +00:00

I am not sure if this is so useful link, it's possible to break out into vulnerable virtual machine, so it's important to keep it up-to-date and it's also easier to do the reverse.

I am not sure if this is so useful link, it's possible to break out into vulnerable virtual machine, so it's important to keep it up-to-date and it's also easier to do the reverse.
_includes/sections/vm.html
@ -0,0 +9,4 @@
<ol>
<li><strong>Choosing a strong hyperviser.</strong>
<ul>
<li>Use one that is <a href="https://www.wikipedia.org/wiki/Free_software">free software</a> like QEMU</li>
Mikaela (Migrated from github.com) commented 2019-07-30 10:51:47 +00:00

There is a dot missing in the end while other lines end to a dot.

There is a dot missing in the end while other lines end to a dot.
Mikaela (Migrated from github.com) commented 2019-07-30 10:52:54 +00:00

How about Virtualbox OSE/CE? I don't remember which name it is. I haven't used QEMU personally that I remember of.

How about Virtualbox OSE/CE? I don't remember which name it is. I haven't used QEMU personally that I remember of.
_includes/sections/vm.html
@ -0,0 +10,4 @@
<li><strong>Choosing a strong hyperviser.</strong>
<ul>
<li>Use one that is <a href="https://www.wikipedia.org/wiki/Free_software">free software</a> like QEMU</li>
<li>Stay wary of KVM as it can be a security risk (accesses kernel).</li>
Mikaela (Migrated from github.com) commented 2019-07-30 10:53:06 +00:00

Citation needed?

Citation needed?
_includes/sections/vm.html
@ -0,0 +11,4 @@
<ul>
<li>Use one that is <a href="https://www.wikipedia.org/wiki/Free_software">free software</a> like QEMU</li>
<li>Stay wary of KVM as it can be a security risk (accesses kernel).</li>
<li>Choose one with managable settings like shared clipboard.</li>
Mikaela (Migrated from github.com) commented 2019-07-30 10:54:27 +00:00

Is shared clipboard a secure setting? What if untrusted application from the VM copies a malicious script to your clipboard and you accidentally paste it to your root terminal or it includes sudo while your sudo cooke is still in force? What do you mean with manageable settings here?

Is shared clipboard a secure setting? What if untrusted application from the VM copies a malicious script to your clipboard and you accidentally paste it to your root terminal or it includes `sudo` while your sudo cooke is still in force? What do you mean with manageable settings here?
_includes/sections/vm.html
@ -0,0 +17,4 @@
<li><strong>Choosing an OS.</strong>
<ul>
<li>View our <a href="https://www.privacytools.io/operating-systems/">OS section</a> for information on OSes that respect your privacy.</li>
Mikaela (Migrated from github.com) commented 2019-07-30 10:55:29 +00:00

I wonder if this should directly tell hardware users to use Qubes and for VMs to pick Tails and then mention our OS section for other options?

I wonder if this should directly tell hardware users to use Qubes and for VMs to pick Tails and then mention our OS section for other options?
Mikaela (Migrated from github.com) requested changes 2019-07-30 12:26:34 +00:00
Mikaela (Migrated from github.com) left a comment

I thought I had requested changes, maybe I shouldn't ask editorional for a review. Anyway see my previous comments.

I thought I had requested changes, maybe I shouldn't ask editorional for a review. Anyway see my previous comments.
ghbjklhv1 (Migrated from github.com) reviewed 2019-08-01 04:08:52 +00:00
_includes/sections/vm.html
@ -0,0 +9,4 @@
<ol>
<li><strong>Choosing a strong hyperviser.</strong>
<ul>
<li>Use one that is <a href="https://www.wikipedia.org/wiki/Free_software">free software</a> like QEMU</li>
ghbjklhv1 (Migrated from github.com) commented 2019-08-01 04:08:52 +00:00

If I remember properly, Virtual box uses non-free code for GPU exceleration.

I've looked at others too, like GNOME (Linux) boxes and VMM (OpenBSD and UNIX-based OSes) but they only support a few platforms.

XEN also looked promising, but if I remember properly they don't work on any LIbreboot laptop and many Coreboot machines as they require non-free code for the CPU.

QEMU-kvm may require non-free code as well.

If I remember properly, Virtual box uses non-free code for GPU exceleration. I've looked at others too, like GNOME (Linux) boxes and VMM (OpenBSD and UNIX-based OSes) but they only support a few platforms. XEN also looked promising, but if I remember properly they don't work on any LIbreboot laptop and many Coreboot machines as they require non-free code for the CPU. QEMU-kvm may require non-free code as well.
ghbjklhv1 (Migrated from github.com) reviewed 2019-08-01 04:09:51 +00:00
_includes/sections/vm.html
@ -0,0 +10,4 @@
<li><strong>Choosing a strong hyperviser.</strong>
<ul>
<li>Use one that is <a href="https://www.wikipedia.org/wiki/Free_software">free software</a> like QEMU</li>
<li>Stay wary of KVM as it can be a security risk (accesses kernel).</li>
ghbjklhv1 (Migrated from github.com) commented 2019-08-01 04:09:50 +00:00

KVM's in general widen your attack surface.

For more info just look up the micro vs monolithic kernel debate.
Gives you plenty of information and instances.

KVM's in general widen your attack surface. For more info just look up the micro vs monolithic kernel debate. Gives you plenty of information and instances.
ghbjklhv1 (Migrated from github.com) reviewed 2019-08-01 04:11:10 +00:00
_includes/sections/vm.html
@ -0,0 +11,4 @@
<ul>
<li>Use one that is <a href="https://www.wikipedia.org/wiki/Free_software">free software</a> like QEMU</li>
<li>Stay wary of KVM as it can be a security risk (accesses kernel).</li>
<li>Choose one with managable settings like shared clipboard.</li>
ghbjklhv1 (Migrated from github.com) commented 2019-08-01 04:11:10 +00:00

Is shared clipboard a secure setting?

It is handy, but it generally should be turned off.

manageable settings

I mean that you (the user) should be able to control it.

Not sure what edit your recommending (if any) :)

> Is shared clipboard a secure setting? It is handy, but it generally should be turned off. > manageable settings I mean that you (the user) should be able to control it. __________ Not sure what edit your recommending (if any) :)
ghbjklhv1 (Migrated from github.com) reviewed 2019-08-01 04:13:42 +00:00
_includes/sections/vm.html
@ -0,0 +17,4 @@
<li><strong>Choosing an OS.</strong>
<ul>
<li>View our <a href="https://www.privacytools.io/operating-systems/">OS section</a> for information on OSes that respect your privacy.</li>
ghbjklhv1 (Migrated from github.com) commented 2019-08-01 04:13:42 +00:00

Tails is proprietary, not generally a good OS for stuff like this (uses Debian non-free).

  • Whonix might be a good choice.

Qubes OS is iffy, it doesn't support most privacy focused hardware (Libreboot). It has non-free dependencies: https://github.com/QubesOS/qubes-issues/issues/5163

Tails is proprietary, not generally a good OS for stuff like this (uses Debian `non-free`). - Whonix might be a good choice. Qubes OS is iffy, it doesn't support most privacy focused hardware (Libreboot). It has non-free dependencies: https://github.com/QubesOS/qubes-issues/issues/5163
ghbjklhv1 (Migrated from github.com) reviewed 2019-08-01 04:14:23 +00:00
_includes/sections/vm.html
ghbjklhv1 (Migrated from github.com) commented 2019-08-01 04:14:23 +00:00

If this is the general consensus, I'll remove it.

If this is the general consensus, I'll remove it.
ghbjklhv1 (Migrated from github.com) reviewed 2019-08-01 04:24:13 +00:00
_includes/nav.html
@ -53,6 +53,8 @@
<a class="dropdown-item" href="/software/networks/"><i class="fas fa-user-secret fa-fw"></i> Self-contained Networks</a>
<a class="dropdown-item" href="/software/cloud/"><i class="fas fa-hdd fa-fw"></i> Self-Hosted Cloud Server</a>
<a class="dropdown-item" href="/software/voip/"><i class="fas fa-phone fa-fw"></i> Video & Voice Messenger</a>
<a class="dropdown-item" href="/vm"><i class="fas fa-phone fa-fw"></i> Virtual Machines</a>
ghbjklhv1 (Migrated from github.com) commented 2019-08-01 04:24:13 +00:00

I thought it was Wikipedia which is generall licensed under CC.
However, I cannot refind it.

You may want to purge it before merging.
I'll try to add a new logo. How do I edit the color? All I get is this hot pink. XD

Edit: Super cool tool BTW. Thanks for sharing!

I thought it was Wikipedia which is generall licensed under CC. However, I cannot refind it. You may want to purge it before merging. I'll try to add a new logo. How do I edit the color? All I get is this hot pink. XD Edit: Super cool tool BTW. Thanks for sharing!
ghbjklhv1 (Migrated from github.com) reviewed 2019-08-01 04:32:15 +00:00
_includes/nav.html
@ -53,6 +53,8 @@
<a class="dropdown-item" href="/software/networks/"><i class="fas fa-user-secret fa-fw"></i> Self-contained Networks</a>
<a class="dropdown-item" href="/software/cloud/"><i class="fas fa-hdd fa-fw"></i> Self-Hosted Cloud Server</a>
<a class="dropdown-item" href="/software/voip/"><i class="fas fa-phone fa-fw"></i> Video & Voice Messenger</a>
<a class="dropdown-item" href="/vm"><i class="fas fa-phone fa-fw"></i> Virtual Machines</a>
ghbjklhv1 (Migrated from github.com) commented 2019-08-01 04:32:14 +00:00

As for the nav, I'm thinking cubes:

https://fontawesome.com/icons/cubes?style=solid

As cubes has now become a method to explain isolation.
How do I add images to nav?

As for the nav, I'm thinking cubes: https://fontawesome.com/icons/cubes?style=solid As cubes has now become a method to explain isolation. How do I add images to nav?
Mikaela commented 2019-08-01 12:10:48 +00:00 (Migrated from github.com)
Copy Link

@blacklight447-ptio I am assigning this to you as I think this is more of your cup of tea.

@blacklight447-ptio I am assigning this to you as I think this is more of your cup of tea.
👍 1
jonah reviewed 2019-08-01 20:15:01 +00:00
_includes/nav.html
@ -53,6 +53,8 @@
<a class="dropdown-item" href="/software/networks/"><i class="fas fa-user-secret fa-fw"></i> Self-contained Networks</a>
<a class="dropdown-item" href="/software/cloud/"><i class="fas fa-hdd fa-fw"></i> Self-Hosted Cloud Server</a>
<a class="dropdown-item" href="/software/voip/"><i class="fas fa-phone fa-fw"></i> Video & Voice Messenger</a>
<a class="dropdown-item" href="/vm"><i class="fas fa-phone fa-fw"></i> Virtual Machines</a>
jonah commented 2019-08-01 20:15:00 +00:00

The <i class="fas fa-phone fa-fw"></i> is the icon, which you would want to change to <i class="fas fa-cubes fa-fw"></i>

The `<i class="fas fa-phone fa-fw"></i>` is the icon, which you would want to change to `<i class="fas fa-cubes fa-fw"></i>`
blacklight447 (Migrated from github.com) reviewed 2019-08-09 22:01:59 +00:00
blacklight447 (Migrated from github.com) left a comment

I am unsure about this one, as it adds quite a bit of complicated information that can confuse non tech savvy users. maybe it would be more appropriate to make some sort of blog post about the topic on write.privacytools.io, and link to it for our advanced users who need a bit of extra security, and have the technical knowledge to run a VM?

I am unsure about this one, as it adds quite a bit of complicated information that can confuse non tech savvy users. maybe it would be more appropriate to make some sort of blog post about the topic on write.privacytools.io, and link to it for our advanced users who need a bit of extra security, and have the technical knowledge to run a VM?
ghbjklhv1 commented 2019-08-12 00:49:46 +00:00 (Migrated from github.com)
Copy Link

I am unsure about this one, as it adds quite a bit of complicated information that can confuse non tech savvy users. maybe it would be more appropriate to make some sort of blog post about the topic on write.privacytools.io, and link to it for our advanced users who need a bit of extra security, and have the technical knowledge to run a VM?

@blacklight447-ptio VMs shouldn't be that hard, however I do understand your point.
Would it be better to recommend simplistic managers, like GNOME Boxes?

> I am unsure about this one, as it adds quite a bit of complicated information that can confuse non tech savvy users. maybe it would be more appropriate to make some sort of blog post about the topic on write.privacytools.io, and link to it for our advanced users who need a bit of extra security, and have the technical knowledge to run a VM? @blacklight447-ptio VMs shouldn't be that hard, however I do understand your point. Would it be better to recommend simplistic managers, like GNOME Boxes?
djoate (Migrated from github.com) requested changes 2019-10-26 21:06:11 +00:00
djoate (Migrated from github.com) left a comment

If this page is targeting non-tech-savvy users, I think more explanations are needed in general (e.g. what is a hypervisor?). Also, information such as "security risk (accesses kernel)" should be supplemented with a "Related Information" subsection (e.g. see related information on warrant canaries: https://www.privacytools.io/providers/#wc)

If this page is targeting non-tech-savvy users, I think more explanations are needed in general (e.g. what is a hypervisor?). Also, information such as "security risk (accesses kernel)" should be supplemented with a "Related Information" subsection (e.g. see related information on warrant canaries: https://www.privacytools.io/providers/#wc)
_includes/sections/vm.html
@ -0,0 +1,24 @@
<h1 id="win10" class="anchor"><a href="#vm"><i class="fas fa-link anchor-icon"></i></a> Use VMs for isolation.</h1>
djoate (Migrated from github.com) commented 2019-10-26 20:51:11 +00:00 
<h1 id="win10" class="anchor"><a href="#vm"><i class="fas fa-link anchor-icon"></i></a> Getting started with VMs</h1>

I've noticed that headers on this site tend summarize the content, but the content currently is more about how to get started with VMs. Also, the headers on PTIO don't end with periods.

```suggestion <h1 id="win10" class="anchor"><a href="#vm"><i class="fas fa-link anchor-icon"></i></a> Getting started with VMs</h1> ``` I've noticed that headers on this site tend summarize the content, but the content currently is more about how to get started with VMs. Also, the headers on PTIO don't end with periods.
_includes/sections/vm.html
@ -0,0 +1,24 @@
<h1 id="win10" class="anchor"><a href="#vm"><i class="fas fa-link anchor-icon"></i></a> Use VMs for isolation.</h1>
<div class="alert alert-warning" role="alert">
<strong> When opening up insecure applications use a VM!</strong>
djoate (Migrated from github.com) commented 2019-10-26 20:43:02 +00:00 
  <strong> When opening up insecure applications, use a VM!</strong>
```suggestion <strong> When opening up insecure applications, use a VM!</strong> ```
_includes/sections/vm.html
@ -0,0 +7,4 @@
<img src="/assets/img/layout/desktop-solid.svg" width="367" height="369" class="img-fluid float-right" alt="desktop-icon" style="margin-left:10px;">
<ol>
<li><strong>Choosing a strong hyperviser.</strong>
djoate (Migrated from github.com) commented 2019-10-26 20:42:42 +00:00 
  <li><strong>Choosing a strong hypervisor</strong>
```suggestion <li><strong>Choosing a strong hypervisor</strong> ```
_includes/sections/vm.html
@ -0,0 +9,4 @@
<ol>
<li><strong>Choosing a strong hyperviser.</strong>
<ul>
<li>Use one that is <a href="https://www.wikipedia.org/wiki/Free_software">free software</a> like QEMU</li>
djoate (Migrated from github.com) commented 2019-10-26 20:55:16 +00:00 
      <li>Use one that is <a href="https://www.wikipedia.org/wiki/Free_software">free software</a> like QEMU.</li>
```suggestion <li>Use one that is <a href="https://www.wikipedia.org/wiki/Free_software">free software</a> like QEMU.</li> ```
_includes/sections/vm.html
@ -0,0 +11,4 @@
<ul>
<li>Use one that is <a href="https://www.wikipedia.org/wiki/Free_software">free software</a> like QEMU</li>
<li>Stay wary of KVM as it can be a security risk (accesses kernel).</li>
<li>Choose one with managable settings like shared clipboard.</li>
djoate (Migrated from github.com) commented 2019-10-26 20:58:48 +00:00 
      <li>Choose one with manageable settings like shared clipboard.</li>
```suggestion <li>Choose one with manageable settings like shared clipboard.</li> ```
_includes/sections/vm.html
@ -0,0 +15,4 @@
</ul>
</li>
<li><strong>Choosing an OS.</strong>
djoate (Migrated from github.com) commented 2019-10-26 20:56:00 +00:00 
  <li><strong>Choosing an operating system</strong>
```suggestion <li><strong>Choosing an operating system</strong> ```
pages/vm.html
@ -0,0 +1,8 @@
---
layout: page
permalink: /vm/
title: "Virtual Machine"
djoate (Migrated from github.com) commented 2019-10-26 20:52:45 +00:00 
title: "Virtual Machines"
```suggestion title: "Virtual Machines" ```
pages/vm.html
@ -0,0 +2,4 @@
layout: page
permalink: /vm/
title: "Virtual Machine"
description: "Use a VM for insecure applications"
djoate (Migrated from github.com) commented 2019-10-26 20:53:47 +00:00 
description: "Use a VM for isolating insecure applications."
```suggestion description: "Use a VM for isolating insecure applications." ```
jonah commented 2019-10-31 02:24:09 +00:00
Copy Link

Seems out of scope for this project as @blacklight447-ptio mentioned.

Seems out of scope for this project as @blacklight447-ptio mentioned.
This repo is archived. You cannot comment on pull requests.
Reviewers
No reviewers
jonah
victorhck
bookercodes
privacytoolsIO
c0rdis
jxtsai
kewde
nitrohorse
Vincevrp
Mikaela
djoate
Labels
Clear labels   
🔍🤖 Search Engines

   
approved

approved, waiting for a PR

  
dependencies

Pull requests that update a dependency file

  
duplicate

   
feedback wanted

   
high priority

   
I2P

The Invisible Internet Project (I2P)

  
iOS

   
low priority

   
OS

Operating Systems

  
Self-contained networks

   
Social media

   
stale

A label for stalebot if it gets added

  
streaming

Anything related to media streaming.

  
todo

   
Tor

Anything covering the Tor network

  
WIP

active work in progress, do not merge or PR (yet)!

  
wontfix

Issues or bugs that will not be fixed and/or do not have significant impact on the project.

  
XMPP

Extensible Messaging and Presence Protocol

  
[m]

Matrix protocol

  
₿ cryptocurrency

   
ℹ️ help wanted

   
↔️ file sharing

   
⚙️ web extensions

Browser Extension related issues

  
✨ enhancement

   
❌ software removal

   
💬 discussion

   
🤖 Android

   
🐛 bug

   
💢 conflicting

   
📝 correction

Correction of content on the website

  
🆘 critical

   
📧 email

   
🔒 file encryption

   
📁 file storage

   
🦊 Firefox

Firefox & forks, about:config etc.

  
💻 hardware

   
🌐 hosting

   
🏠 housekeeping

Anything primarily related to site cleanup.

  
🔐 password managers

   
🧰 productivity tools

   
🔎 research required

   
🌐 Social News Aggregators

   
🆕 software suggestion

   
👥 team chat

   
🔒 VPN

Virtual Private Network

  
🌐 website issue

*Technical* issues with the website.

  
🚫 Windows

   
👁️ browsers

   
🖊️ digital notebooks

   
🗄️ DNS

Domain Name System

  
🗨️ instant messaging (im)

   
🇦🇶 translations

Anything covering a translated version of the site

No Label
🔍🤖 Search Engines
approved
dependencies
duplicate
feedback wanted
high priority
I2P
iOS
low priority
OS
Self-contained networks
Social media
stale
streaming
todo
Tor
WIP
wontfix
XMPP
[m]
₿ cryptocurrency
ℹ️ help wanted
↔️ file sharing
⚙️ web extensions
✨ enhancement
❌ software removal
💬 discussion
🤖 Android
🐛 bug
💢 conflicting
📝 correction
🆘 critical
📧 email
🔒 file encryption
📁 file storage
🦊 Firefox
💻 hardware
🌐 hosting
🏠 housekeeping
🔐 password managers
🧰 productivity tools
🔎 research required
🌐 Social News Aggregators
🆕 software suggestion
👥 team chat
🔒 VPN
🌐 website issue
🚫 Windows
👁️ browsers
🖊️ digital notebooks
🗄️ DNS
🗨️ instant messaging (im)
🇦🇶 translations
Milestone
Clear milestone
No items
No Milestone
Assignees
Clear assignees
No Assignees
1 Participants
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: privacyguides/privacytools.io#1064
No description provided.
Delete Branch "patch-10"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?