Re: dual booting for security

Maybe Qubes <https://www.qubes-os.org>?

On Mon, Nov 16, 2015 at 2:05 PM, Wendell Nichols <[email protected]> wrote:

> I have a similar concern about my windoze laptop.  Windoze rarely runs
> more than a year for me before becoming either infected or slows down due
> to registry bloat.  I have scripts running to test software
> installation/deinstallation which eventually wrecks the registry.  So,
> about 5 years ago I wiped it, installed OpenSuse and set it up securely.  I
> use shorewall for a firewall because it is very flexible with regard to
> both incoming and outgoing vpn's.
> When I was happy that the linux system was secure I installed VirtualBox
> (which was property of Sun at the time, now Oracle which I have misgivings
> about, but I can always switch to KVM).  I built a windoze image on
> virtualbox with everything it needed and then cloned it.  I keep the clone
> around in case I have to trash the one I'm using and start over.  The
> windows system I use has all the usual office software but all the data
> files are on the host linux. (shared via smb).  I run Office fullscreen
> using seemless mode.  I do not use the browser or email clients on
> windows.  The laptop has two SSD's one for the windows vm image and the
> other for the linux host.  That may be overkill for your friend but is
> makes the windows apps perform at near native speed.
> So far this setup gives me the best of both worlds and has proven to be
> secure.  No windows viruses but I NEVER install downloaded software on it.
>
> ttfn..
> wcn
>
>
> On 11/15/2015 11:58 PM, caziz wrote:
>
>> If dead serious, unplug internet, turn off wireless,
>> use read only Linux live DVDs (I like Mint 17.2 XFCE)
>> and store encrypted on USB sticks only - never touch HDD while running.
>> For that little bit more, needs memory flush on exit.
>>
>> Pain in the Ass but closer to what he wants.
>>
>> ....  or openBSD in iron assed tighten everything down mode.
>>
>>
>> On 15-11-15 06:06 PM, Ralph Boland wrote:
>>
>>> I have a writer friend who is paranoid that someone will break into
>>> his Windows machine
>>> and steal stuff he hasn't published yet.
>>> I suggested that he try Linux but I am wondering if it would be better
>>> that he dual booted
>>> Linux on top of his Windows OS and use Windows for Internet stuff
>>> (He downloads lots of movies and does other standard Internet stuff.)
>>> and use Linux
>>> for his writing.  If he never connects to the Internet from the Linux
>>> side of the partition
>>> of the HD then noone should be able to see his Linux Partition even if
>>> they break into
>>> his Windows OS.  Well, that's the idea;  I don't know how sound it is.
>>> Is this a good
>>> idea?
>>>
>>> I assume he would use libre
>>> office and convert it to Word for sending to the publishers.
>>> I assume Literature publishers use Word and not Latex or anything else;
>>> right?
>>>
>>> Which version of Linux would be a good choice for him to use?
>>> I use Debian but he knows little about computers so something easier to
>>> use
>>> would be better and more importantly, for him, a very secure version of
>>> Linux
>>> would be better.
>>> Note:  He suffers from ADHD and is sloppy about security.  I am doing
>>> what I can.
>>>
>>> Ralph (Rocky) Boland
>>>
>>> _______________________________________________
>>> clug-talk mailing list
>>> [email protected]
>>> http://clug.ca/mailman/listinfo/clug-talk_clug.ca
>>> Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
>>> **Please remove these lines when replying
>>>
>>>
>>
>> _______________________________________________
>> clug-talk mailing list
>> [email protected]
>> http://clug.ca/mailman/listinfo/clug-talk_clug.ca
>> Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
>> **Please remove these lines when replying
>>
>>
>
> _______________________________________________
> clug-talk mailing list
> [email protected]
> http://clug.ca/mailman/listinfo/clug-talk_clug.ca
> Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
> **Please remove these lines when replying
>

_______________________________________________
clug-talk mailing list
[email protected]
http://clug.ca/mailman/listinfo/clug-talk_clug.ca
Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
**Please remove these lines when replying