Re: [tor-talk] Tor Jumphost

[krishna e bera <keb@xxxxxxxxxxxxxx>]

On 14-06-10 02:12 PM, Wayland Morgan wrote:
> I have been considering potentially building some type of remote
> jumphost for a University research setting that automatically connects
> its users to the Tor network and am looking for feedback/implementation
> ideas.
> 
> A few assumptions:
> 
> 1) the users of the host trust me as the operator
> 2) as soon as they log off of the host, all information about their
> usage is purged.
> 3) would like to do this with Windows, as it is compatible with RDP and
> would require less user education.
> 
> Basically I want to provide an environment for users that requires
> little or no configuration on their part that they can use to browse the
> web anonymously. One of the things that is attractive about the jumphost
> approach is that I can control the patch level of the browser bundle
> thereby ensuring that it is up to date and also restrict use of any
> other software that could perhaps compromise the integrity of the user's
> identity.
> 
> Thoughts?

4) you trust the users ?

5) you trust the websites they will visit ?

Hopefully you will be reloading from a drive-image nightly, and before
doing any TBB or other updates.
If one of your RDP users manages to accidentally infect or purposely pwn
the box, assumptions 1 and 2 would no longer hold.

Security on Windows or any OS is much harder to maintain once users have
something like shell access.  Also, TBB flouts one of the potential
Windows safeguards, that executables shouldnt sit in the user filespace.

-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk