| Safe Browsing - the VM way |
|
|
|
|
A Virtual Machine, as name indicates, is special software layer which behaves almost like a independent PC running on top of operating system. This Virtual PC can support another operating system. For safe browsing, it is good idea to access internet on virtual machines because there is layer between host operating system and guest operating system. A virtual machine can be used for unsafe browsing as this machine can be destroyed without harming personal data. Of course, data on virtual machine will be lost. Another way is to use a virtual machine to access financial or sensitive information. Virtualization layer between Host OS and Guest OS render most of the hacking techniques ineffective. However, this technique does not protect against key loggers as keyboard (or any computer peripheral) is still controlled by Host OS. To prevent key loggers to have access to personal information, a password manager can be used. Please note, these machines are as effective as the user so always be cautious regardless. There are bunch of virtual machines available for free and few of them are listed here.
VMware is market leader in virtualization market. and are available for free download. VMware also hosts virtual machines, called Virtual Appliance. One can download different "Appliances" and try them out. is Virtual Machine for casual browsing as it does not have powerful mechanism to protect sensitive data. Also VMware is not portable i.e. can not be carried on USB drive
Metropipe offers VM for private access and provide somewhat protection and anonymity. However, their free offering is not powerful enough. Paid service do provide better protection. This system is build using Damn Small Linux! (DSL) and Qemu and reasonably fast and can be carried on USB drive.
This is VMware based portable system. Moka5 provides interface to manage various Moka5 based Virtual Machines. Fearless browser is one of the Moka5 VM which is combination of Linux+Firefox+Tor. Tor network is very interesting technology to provide users reasonable anonymity for free.
This is one of the most comprehensive secure system, I could find (See also). Incognito is Gentoo Linux based LiveCD. One can boot this live CD or run this live CD as virtual machine in Qemu. Please note that Incognito authors does not recommend running Incognito inside virtual machine and rightfully so as VMs does not provide protection against Key loggers. However, problem with booting from LiveCD is that it does not preserve user data. Incognito does provide mechanism to create bootable USB drive and store user data on USB drive. Incognito comes in two flavors, tiny edition (50MB) and full edition (350MB).
I modified Incognito to meet following
Keyloggers can be defeated even if Incognito is running inside VM. If passwords are stored in firefox built in password manager then it will never be typed and then password is safe. Login password or password for password manager may still be available to key loggers however these passords are for your local VM machine.
Custom Incognito Incognito liveCD is hacked to make user data persist while running it under Qemu. Modified Tiny Incognito can be downloaded from download section. Size of download is ~100MB (= 50MB (Incognito HD) + 30 MB (User Data) + Qemu + Incognito Boot ISO). Full version of Incognito is also available, however, I am not able to find a place to host such a large file (400 MB). If you are interested, please email me . Custom PVPM Incognito system is too resource intensive for old machines. A custom PVPM is available for download . This is based on Damn Small Linux! and idea is copied from Metropipe PVPM.
Only registered users can write comments!
Powered by
|
|||||||
| Last Updated on Thursday, 20 March 2008 07:00 |



