Re: dual booting for security

I have a similar concern about my windoze laptop.  Windoze rarely runs 
more than a year for me before becoming either infected or slows down 
due to registry bloat.  I have scripts running to test software 
installation/deinstallation which eventually wrecks the registry.  So, 
about 5 years ago I wiped it, installed OpenSuse and set it up 
securely.  I use shorewall for a firewall because it is very flexible 
with regard to both incoming and outgoing vpn's.
When I was happy that the linux system was secure I installed VirtualBox 
(which was property of Sun at the time, now Oracle which I have 
misgivings about, but I can always switch to KVM).  I built a windoze 
image on virtualbox with everything it needed and then cloned it.  I 
keep the clone around in case I have to trash the one I'm using and 
start over.  The windows system I use has all the usual office software 
but all the data files are on the host linux. (shared via smb).  I run 
Office fullscreen using seemless mode.  I do not use the browser or 
email clients on windows.  The laptop has two SSD's one for the windows 
vm image and the other for the linux host.  That may be overkill for 
your friend but is makes the windows apps perform at near native speed.
So far this setup gives me the best of both worlds and has proven to be 
secure.  No windows viruses but I NEVER install downloaded software on it.

ttfn..
wcn

On 11/15/2015 11:58 PM, caziz wrote:
> If dead serious, unplug internet, turn off wireless,
> use read only Linux live DVDs (I like Mint 17.2 XFCE)
> and store encrypted on USB sticks only - never touch HDD while running.
> For that little bit more, needs memory flush on exit.
>
> Pain in the Ass but closer to what he wants.
>
> ....  or openBSD in iron assed tighten everything down mode.
>
>
> On 15-11-15 06:06 PM, Ralph Boland wrote:
>> I have a writer friend who is paranoid that someone will break into
>> his Windows machine
>> and steal stuff he hasn't published yet.
>> I suggested that he try Linux but I am wondering if it would be better
>> that he dual booted
>> Linux on top of his Windows OS and use Windows for Internet stuff
>> (He downloads lots of movies and does other standard Internet stuff.)
>> and use Linux
>> for his writing.  If he never connects to the Internet from the Linux
>> side of the partition
>> of the HD then noone should be able to see his Linux Partition even if
>> they break into
>> his Windows OS.  Well, that's the idea;  I don't know how sound it is.
>> Is this a good
>> idea?
>>
>> I assume he would use libre
>> office and convert it to Word for sending to the publishers.
>> I assume Literature publishers use Word and not Latex or anything 
>> else; right?
>>
>> Which version of Linux would be a good choice for him to use?
>> I use Debian but he knows little about computers so something easier 
>> to use
>> would be better and more importantly, for him, a very secure version 
>> of Linux
>> would be better.
>> Note:  He suffers from ADHD and is sloppy about security.  I am doing
>> what I can.
>>
>> Ralph (Rocky) Boland
>>
>> _______________________________________________
>> clug-talk mailing list
>> [email protected]
>> http://clug.ca/mailman/listinfo/clug-talk_clug.ca
>> Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
>> **Please remove these lines when replying
>>
>
>
> _______________________________________________
> clug-talk mailing list
> [email protected]
> http://clug.ca/mailman/listinfo/clug-talk_clug.ca
> Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
> **Please remove these lines when replying
>


_______________________________________________
clug-talk mailing list
[email protected]
http://clug.ca/mailman/listinfo/clug-talk_clug.ca
Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
**Please remove these lines when replying