Hacker News new | ask | show | jobs
by FDSGSG 1546 days ago
>But a browser escape is different than obtaining root on an OS that doesnt even enable root by default

A linux LPE is worth a small fraction of the money a Firefox escape is. Far easier to come by, far weaker defences.

At least tails seems to use network namespaces now, so deanonymization without root might not be as trivial as it was before.

1 comments

where is a good place to discuss current and proposed Tails OPSEC

most of the stuff I find on Tor is very outdated, still enough relevant to piecemeal some decent OPSEC, but being able to bounce ideas of people objectively seems to be lacking - or I don't know the communities

there is the tor reddit page, but reddit is periodically hostile to tor connections. dread on tor is often down, so thats annoying, but I found onion services within tor often had the best information on using tor

I'd stick to the tor IRC channels on OFTC for informed conversations.

/d/OPSEC and dread in general is a cesspit with few quality conversations.