Great vid! Another thing you can do with KVM is run your Nextcloud from it. To ensure that you have the maximum space available for your Nextcloud take a large external drive and encrypt it with cryptsetup. Then point the VM to use the device-mapped unencrypted device to use it as a storage device (e.g. /dev/mapper/nameofcrypt). This can't be a pool and must be done by editing the domain xml file. What this means is you can restore the Nextcloud VM easily by taking a dump of the domain file and just import the dump on another box with the drive plugged into it and unlocked. Since the VM is pointing at a device mapper device its really hard for a potential attacker to attack via device renaming. It also means it can be much faster than qcow on a 5400/7200 rpm drive (assuming USB3 and UAS for the external). qcow on SSD is fast, but having large sizes can get costly. Sure you could present extra storage via NFS, or Nextcloud's external storage function, but this keeps everything on a single encrypted storage device (minus backups).
Enjoy your videos sir. Thank you for sharing your knowledge with us. I just tried Virtual Machine Manager, which i think is the same as KVM (?), as opposed to my normal virtualbox and I'm impressed. It works great right out of the box with my new Garauda install. Came with the distro. Much faster than Vbox and no guest modules to install either. Linux ROCKS! Thanks again Rob
Further tip: Instead of installing the VPN code in the host, install it in the VM. That way you can select different IP addresses for different VMs to use, making it one step harder for the bad guys to link your VMs together. Most VPN providers give you a choice of different IP addresses, located in different cities and even different countries. Make sure your banking IP is plausible -- definitely your own country and close to home. I kept on getting extra security checks from my bank, and I found out that these were triggered by doing internet banking from a VPN IP some 200miles from home which is apparently one of the risk factors they use for spotting when a fraudster has got your login credentials.
Awesome video! Also useful for more than just privacy - a stateless VM can protect you from a lot (tho there are exploits that can jump out to host, you're protected from a lot) Rob is by far the best privacy guru!
as soon as the video began, the thought of exploits escaping and accessing the host came to mind. if absolute security is necessary, then i wouldn’t rely on VMs in the way he’s explaining. though the information here is still extremely valuable.
@@johnarnold893 i don’t know. this video is 2 years old and i have no idea what the video is even about other than something to do with VMs. i mentioned “in the way he is explaining”. it would be difficult to properly address the methods i would use since i don’t know what the guy explained in the video because it’s been 2 years. i’m not re-watching this video but if you want to briefly fill me in one what his method involves then it will remind me of the method I would use instead
Thank you so much, Form Sunshine here.Fianily getting some where, paid my dewes. Thank you so much for sharing with me. I will be seeing you. And see that we alll stay safe. (:
Thanks, Rob. Couple of suggestions for consistent and better usage what I do with KVM are `setup and pin vcpu to physical core thread and emualtor pin to run on dedicated physical core thread. For disk related operation I also have seen selecting virtio mode than IDE is really helpful. Sometimes GUI does not respond cleanly with the mouse, so I end up enabling the input device "USB touch tablet" from virt-manager too.`
Hi Rob! I really appreciate your opinions on this subject. May I ask you some doubts I have about software security? How much do you think having well configured SELinux can increase (or decrease) my digital security and privacy? How much do you think using Musl as the C library in my system can increase (or decrease) my digital security? How much do you think LibreSSL is more secure (or insecure) than OpenSSL? How much do you think is the security benefit of running binaries compiled with specific needs in Gentoo? Thank you very much for answering!
You suggest not doing any work on the real computer, just using it to run KVM to support the VMs. If you are doing that, then it makes even more sense to run Xen to support them. The Xen hypervisor is even more efficient than the KVM in the Kernel. That is however a lot of effort--and intimidating for many users. Luckily there is a prepackaged solution: because that is exactly how the qubes OS works. It is Xen under the lid, but all the Xen stuff is wrapped under GUI. It even starts you off with three virtual machines, they suggest for banking, work, and play but you can usethem however you want. By all means use the tips in this video to test out the idea of using VMs. It makes a great intro to virtualisation. By the time you find you only ever use the VMs then think about trying Qubes. There is a great video about Qubes on this channel.
Great video. This is a lot of work and you need to understand a lot of stuff about security and also you need to be very careful when you manage your VMs, backups, external drives, owncloud. This looks like a full time job. We could use at least some automation..
Thanks for creating such great content! I can't agree with the popular distro thing though. It makes sense, but if you care about your privacy you probably already spoof your web agent to look like a Windows 10, Chrome user. If you want to use something popular, just use Windows 10.
Yes you can spoof some of it. However it is not just a useragent. But yes it's just some extra procedures to remember but you can remove the signature from Linux
All my experience says. If I try to Express my Pro-Russian views somewhere in the Anglo-Saxon world, I am getting to have problems with my computer. So this video is very useful.
I am not really concerned about privacy, but I LOVE me some virtual technology. I am currently running Proxmox and have been having issues with the containers feature. I have just been using the virtual machine feature of my host. The Proxmox solution has qemu running in the background and is web based. I have decided to give containers another go and if they still jam up on me, I might switch to the solution you have here.
Finally connecting to the shitty network from work in a VM while working safely in my pc and with other vms...so glad I can use what I want to work not the programs they buy, which sucks
You are right with how well KVM runs Have you tried using KVM on either Red Hat Enterprise Linux 8 or CentOS 8 I am very happy with CentOS 8 Stream KVM
Thanks for this Rob. Very interesting and informative video. I’ve been using Linux as my primary driver for years but do it the old fashioned way with everything on the main system. You have convinced me to plan out a switch to a host system with multiple VMs. Any suggestions for the best host? As a Ubuntu user I feel that the best host would probably be an LTS version or even Debian stable system. Nothing sexy but well proven. This type of setup will let me play with an up to date Ubuntu VM for work and another VM with Nix on it to play around. Otherwise what are your thoughts on CasaOS vs OpenMediaVault as a file/other stuff/lab machine? Any experience with either. Thanks again. Cheers from Canada! 🎉
i have fully done the switch myself now happily im running mx linux and using vfio to run what i need on win10 in qemu this alone i feel much better doing almost anything by just not using windows to browse and download
Great video Rob, one question I am getting permission denied for QEMU to access the external drive. Is this a problem you have experienced? If so how did you fix it?
After you've mention resolution being part of the fingerprint i've realized why Tor browser have that wierd size of the web content, its to hide your screen resolution, i've checked and indeed when you try to get screen resolution with JS it will return different resolution
Is there an advantage in using a variety of different distros? Is there a disadvantage to tweaking the resolution? Keeping to the standard values hides you in the crowd; setting an unusual value makes you trackable
Very interesting tutorial indeed. Thanks a lot for sharing. A question though: is there a reason so many tutorials around are still using " _apt-get_ " when it's been deprecated for years in favour of " _aptitude_ ", the latter of which has now been deprecated by " _apt_ ". And on Linux Mint, for instance, it doesn't even require " _sudo_ ". Just my 2¢.
@@Eggsr2bcrushed Actually, no; Linux Mint has a Python script in _/usr/local/bin_ named _apt_ , it's not a simple alias. But that doesn't answer my question: why still advertise for apt-get when it's long been deprecated?
Is it possible to set up a "static" VM in KVM? That way, every time you turn it off or restart it returns to a pristine state. Then all data can be stored on a separate encrypted volume.
I still use Virtualbox, because it has a far better GUI and some other advantages. I use a minimal install of Ubuntu 20.04 as host and it runs on ZFS. I have separate VMs for office-work, banking (encrypted by Virtualbox), multimedia, experiments and Windows 10. All VMs use ext4 or ntfs. All VMs, except one and my Host are closed for inbound traffic. I even have an Ubuntu 20.10 VM in which I run QEMU/KVM with as KVM-VMs Windows Vista and Ubuntu 14.04 :) I use it to keep track of the changes to KVM. On my 16GB Ryzen 3 2200G the response times of this double sandwich are still fine, but half a second slower than one level lower. I'm a collector, so I have all Windows VMs (activated), except 8.x and all Ubuntu LTS releases starting with 4.10.
Can anybody help me here... I'm applying for a "work from home" job that requires the use of a Windows Laptop with Windows 10 or above... at home I only have Apple computers and laptops, my question is... if I use a Virtual Machine, can I be 100% ascertained that this will be absolutely compatible and have the same functionality as a Windows Laptop for any Software and functions that the job may require?? Or should I go safer and just simply buy a Windows laptop which is definitely gonna cost me more?? And also, would I then need to install anti-viruses for my Mac to run this Windows? Doesn't Windows 10 and above come with it for free?
Hopefully, Mr. Braxman is still reviewing comments on this (4 days after release). I am curious what he (and others) think of using VE (Virtual Environments) instead of VM (Virtual Machines). LXC, Docker, Fedora Silverblue... these can achieve similar security and privacy results with less overhead, and better performance, can they not? One replaces installing an entire OS to VM, installing applications + dependencies to that, with a container running only the desired application + dependencies.
Everything going GR8 until: sudo systemctl enable --now libvtrtd Failed to enable unit: Unit file libvtrtd.service does not exist. Dell All-in-One 2330 i7 - 8G RAM - 2T HD - Linux Mint Cinnamon 20. What now?
Another alternative to VMs is using Samdboxes, eg windows sandbox or sandboxie. These may be less resource intensive. Also Microsoft Edge's browser has good sandbox isolation if you need it.
@rob braxman So, how about a little disinfo -- install different "junk" addons to a browser to change the browser's fingerprint every so often (perhaps each browsing session)?
I would like to use mint and jde neon in kvm but can't seem to figure how as it does not recognize them I guess mint could use ubuntu settings Nott sure about the other
I've been running Facebook in its own dedicated browser on a VM for quite a while now. Since I'm already running a bunch of virtual servers in XCP-ng, I put it there.
@@natalieisagirlnow FB has its purpose, i.e. to connect with people... in some cases people I haven't had contact with in decades. But that purpose doesn't monetize Zuckerberg, which I have no interest in doing. So he can shovel ads at me on FB itself, but it won't link to anything else I do online.
@@rancidbeef582 sometimes the cure is worse than the disease. if you really liked them, you wouldn't have lost contact. facebook lives on FoMo like yours. they can't sell you ads, but they have your name, your pictures, your friends, your job, your email
Violence is harming others' freedom in exchange for satisfying their own selfishness. Harming privacy is harming freedom, willing, choices and human rights. That we must defeat these cockroach criminals.
This is a great way to harden your pc for hacker wars and messing with scammers from india. They can try all they want to lock your computer or delete everything you have. Using desktop sharing apps becomes more of a 1 sided battle where they think they're about to hack you but really they opened themselves up for it while you can just restart your Virtual Machine from an image and any and all damage attempted by the bad guys will be instantly undone. You will be laughing and your enemies will be defeated and brought to their knees. You can Sys Key them asymmetrically locking their machines up forever while you skip away without suffering any damages.
This explanation is for running full desktop instances. Docker is a different beast with a different purpose. Docker containers are NOT virtual machines, they're just bundles of software running in a containerized process (a cgroup). I can't help you much in the sense of privacy regarding docker containers but, just for transparency, if you run a docker image that has root access to you root volume, you just cracked open the entire security of your Linux machine (barring password protected encryption zones in your filesystem still not loaded into memory)
Can you teach us how to use the integrated gpu or dedicated gpu, to pass through the kvm to play games? I want to play some windows games. Thank you! (the vm (vkm+qemu) that I tried earlier was kinda laggy)
It's hard to make a useful video for your question. cause you'll want pcie pass through which is highly depending on the gpu and motherboard you have on hand.
Mac address is not visible to a VPN either on the host or VM. It requires additional software (ARP). MacAddress is not part of the TCP/IP protocol. It is used for local name resolution only. But it is used in evil ways by facebook and some apps for device fingerprinting
virtual network is not active when I try to proceed I get an error could not start virtual network 'default': internal error: failed to initialize a valid firewall backend
That is certainly an approach too. I think the way I'm using this is user friendly though. It's simple enough. Anyone who knows some basic Linux can do it.
The moment you started speaking i subscribed.
OMG, I think and act exactly like you.
Frye approves this message.
🤣 🤣 🤣 🤣 🤣 I did too.
OMG I feel so free now, amazing how just 1 strip of velcro changes everything in this external HD + Laptop set-up!
Yeah!
The best tip in a video full of good tips wasn't even an IT thing.
Bravo! Very well done. I've been running VirtualBox for years, but never felt motivated to tinker with anything else, until now. Thanks for sharing!
Great vid!
Another thing you can do with KVM is run your Nextcloud from it. To ensure that you have the maximum space available for your Nextcloud take a large external drive and encrypt it with cryptsetup. Then point the VM to use the device-mapped unencrypted device to use it as a storage device (e.g. /dev/mapper/nameofcrypt). This can't be a pool and must be done by editing the domain xml file.
What this means is you can restore the Nextcloud VM easily by taking a dump of the domain file and just import the dump on another box with the drive plugged into it and unlocked. Since the VM is pointing at a device mapper device its really hard for a potential attacker to attack via device renaming.
It also means it can be much faster than qcow on a 5400/7200 rpm drive (assuming USB3 and UAS for the external). qcow on SSD is fast, but having large sizes can get costly.
Sure you could present extra storage via NFS, or Nextcloud's external storage function, but this keeps everything on a single encrypted storage device (minus backups).
Interesting idea!
And is Liz Johnson your real name? Lol
Enjoy your videos sir. Thank you for sharing your knowledge with us. I just tried Virtual Machine Manager, which i think is the same as KVM (?), as opposed to my normal virtualbox and I'm impressed. It works great right out of the box with my new Garauda install. Came with the distro. Much faster than Vbox and no guest modules to install either. Linux ROCKS! Thanks again Rob
This was a great video, Rob. Thanks for all that you do for the privacy-minded community.
Freaking fantastic video. I never stopped to think I could run multiple VMs for various 'online tasks' to isolate myself in terms of privacy.
I HAVE TO GIVE YOU CREDITS. I have been working for years on my privacy on the net, but man you are good. I still can learn somethings from you!
Further tip:
Instead of installing the VPN code in the host, install it in the VM. That way you can select different IP addresses for different VMs to use, making it one step harder for the bad guys to link your VMs together.
Most VPN providers give you a choice of different IP addresses, located in different cities and even different countries.
Make sure your banking IP is plausible -- definitely your own country and close to home. I kept on getting extra security checks from my bank, and I found out that these were triggered by doing internet banking from a VPN IP some 200miles from home which is apparently one of the risk factors they use for spotting when a fraudster has got your login credentials.
I find it worrying that this channel has “only” 45k subs... we’d all be in a better world if these were 100x more!
Because all of his ideas are flawed.
Awesome video! Also useful for more than just privacy - a stateless VM can protect you from a lot (tho there are exploits that can jump out to host, you're protected from a lot)
Rob is by far the best privacy guru!
as soon as the video began, the thought of exploits escaping and accessing the host came to mind. if absolute security is necessary, then i wouldn’t rely on VMs in the way he’s explaining. though the information here is still extremely valuable.
@@ryan-el9er So how would you do it then?
@@johnarnold893 i don’t know. this video is 2 years old and i have no idea what the video is even about other than something to do with VMs. i mentioned “in the way he is explaining”. it would be difficult to properly address the methods i would use since i don’t know what the guy explained in the video because it’s been 2 years.
i’m not re-watching this video but if you want to briefly fill me in one what his method involves then it will remind me of the method I would use instead
You are really helping us making our life simple ans ... private ! Thanks for making these videos
It's my pleasure
Great video Rob, very informative! I use virtualization to look at new distros or versions, but this is a great practical application for using it.
Glad you liked it!
Thank you so much, Form Sunshine here.Fianily getting some where, paid my dewes. Thank you so much for sharing with me. I will be seeing you. And see that we alll stay safe. (:
Thank you Rob.
Very generous of you to share the steps.
Legendary stuff Mr Braxman. Thank you!
Very very informative. I'll have to revisit this topic again in the future.Thank you immensely.
Thank you, great video. Already know virt-manager. Great tips, move to external ssd and stateless vm.
Thanks, Rob. Couple of suggestions for consistent and better usage what I do with KVM are `setup and pin vcpu to physical core thread and emualtor pin to run on dedicated physical core thread. For disk related operation I also have seen selecting virtio mode than IDE is really helpful. Sometimes GUI does not respond cleanly with the mouse, so I end up enabling the input device "USB touch tablet" from virt-manager too.`
Nice tips!
Thank you for this absolutely awseome video. Keep it up!
Hi Rob! I really appreciate your opinions on this subject. May I ask you some doubts I have about software security?
How much do you think having well configured SELinux can increase (or decrease) my digital security and privacy?
How much do you think using Musl as the C library in my system can increase (or decrease) my digital security?
How much do you think LibreSSL is more secure (or insecure) than OpenSSL?
How much do you think is the security benefit of running binaries compiled with specific needs in Gentoo?
Thank you very much for answering!
Great Content ... i refer to this video every time i need to install KVM ... Thanks Man
11:20 Reasons why virtual machines helps privacy.
Man two videos and I already subscribed ! Very informative, thanks, keep up the good work and stay safe :)
thanks for sharing Rob Braxman Tech
You suggest not doing any work on the real computer, just using it to run KVM to support the VMs.
If you are doing that, then it makes even more sense to run Xen to support them. The Xen hypervisor is even more efficient than the KVM in the Kernel.
That is however a lot of effort--and intimidating for many users. Luckily there is a prepackaged solution: because that is exactly how the qubes OS works. It is Xen under the lid, but all the Xen stuff is wrapped under GUI.
It even starts you off with three virtual machines, they suggest for banking, work, and play but you can usethem however you want.
By all means use the tips in this video to test out the idea of using VMs. It makes a great intro to virtualisation. By the time you find you only ever use the VMs then think about trying Qubes.
There is a great video about Qubes on this channel.
Great video. This is a lot of work and you need to understand a lot of stuff about security and also you need to be very careful when you manage your VMs, backups, external drives, owncloud.
This looks like a full time job. We could use at least some automation..
~Nice LARGE fonts used for the command line demo~
Thanks for creating such great content!
I can't agree with the popular distro thing though. It makes sense, but if you care about your privacy you probably already spoof your web agent to look like a Windows 10, Chrome user. If you want to use something popular, just use Windows 10.
Yes you can spoof some of it. However it is not just a useragent. But yes it's just some extra procedures to remember but you can remove the signature from Linux
All my experience says. If I try to Express my Pro-Russian views somewhere in the Anglo-Saxon world, I am getting to have problems with my computer. So this video is very useful.
This is a fantastic video with great ideas! Thanks for making it.
Glad you enjoyed it!
I am not really concerned about privacy, but I LOVE me some virtual technology. I am currently running Proxmox and have been having issues with the containers feature. I have just been using the virtual machine feature of my host. The Proxmox solution has qemu running in the background and is web based. I have decided to give containers another go and if they still jam up on me, I might switch to the solution you have here.
That is awesome! Thank you for this valuable info.
Finally connecting to the shitty network from work in a VM while working safely in my pc and with other vms...so glad I can use what I want to work not the programs they buy, which sucks
You are right with how well KVM runs
Have you tried using KVM on either Red Hat Enterprise Linux 8 or CentOS 8
I am very happy with CentOS 8 Stream KVM
Thanks for this Rob. Very interesting and informative video. I’ve been using Linux as my primary driver for years but do it the old fashioned way with everything on the main system. You have convinced me to plan out a switch to a host system with multiple VMs. Any suggestions for the best host? As a Ubuntu user I feel that the best host would probably be an LTS version or even Debian stable system. Nothing sexy but well proven.
This type of setup will let me play with an up to date Ubuntu VM for work and another VM with Nix on it to play around.
Otherwise what are your thoughts on CasaOS vs OpenMediaVault as a file/other stuff/lab machine? Any experience with either.
Thanks again.
Cheers from Canada! 🎉
i have fully done the switch myself now happily
im running mx linux and using vfio to run what i need on win10 in qemu
this alone i feel much better doing almost anything
by just not using windows to browse and download
I run Facebook in a KVM VM. Have run VMs on my desktops for years.
No, God, no.. You access FB in a KVM.
FFS, "run Facebook" he said xD
Impressive, great and not trivial advices! Thanks for sharing
Glad you enjoyed it!
Great video Rob, one question I am getting permission denied for QEMU to access the external drive. Is this a problem you have experienced? If so how did you fix it?
Excellent... thank you!!
This is really good for developing software on Linux!
You should do a video with hated one and Wolfgang's channel. All of you have great information.
14:48 - i like this idea
Testing cloudflare warp on windows. Looks good
After you've mention resolution being part of the fingerprint i've realized why Tor browser have that wierd size of the web content, its to hide your screen resolution, i've checked and indeed when you try to get screen resolution with JS it will return different resolution
+rep for australia and india! You should definitely add singapore too. It's a the internet hub of asia!.
Protecting against mall wear it’s important. It’s shocking what people wear to the mall. What people wear to Wallmart is even worse.
Great piece.
Thank you Dr Lorre:)
9:00 what if you wanted to add another physical port to another subnet 172.78.8.0 making your VM multi-home?
Is there an advantage in using a variety of different distros?
Is there a disadvantage to tweaking the resolution? Keeping to the standard values hides you in the crowd; setting an unusual value makes you trackable
I'm new to the channel great information.
Fantastic! Thank you.
Very interesting tutorial indeed. Thanks a lot for sharing. A question though: is there a reason so many tutorials around are still using " _apt-get_ " when it's been deprecated for years in favour of " _aptitude_ ", the latter of which has now been deprecated by " _apt_ ". And on Linux Mint, for instance, it doesn't even require " _sudo_ ". Just my 2¢.
It does still need sudo, but linux mint aliases apt to sudo apt by default.
@@Eggsr2bcrushed Actually, no; Linux Mint has a Python script in _/usr/local/bin_ named _apt_ , it's not a simple alias. But that doesn't answer my question: why still advertise for apt-get when it's long been deprecated?
speechless ... ------ subscribed
Great videos always
Great stuff. I got lost on the backup part, but that's OK...
Awesome content! Thank you very much!
If you install Linux guests, you don't even need ISO images. You can just use, a FTP/HTTP url to the distro installer.
Sir, you are awesome.
What brand/model machine do you use as a laptop and how much RAM you have?
I love this guy :)
what is the song playing while the ubuntu VM is installing?
You are a legend!!
Why does the VPN have to be run the host machine and not run on the VM itself?
Mr. Braxman?
What about OpenBSD?
I've heard it's the most secure OS available.
Excellent!
Thank you Rob
Is it possible to set up a "static" VM in KVM? That way, every time you turn it off or restart it returns to a pristine state. Then all data can be stored on a separate encrypted volume.
Just do a clone and delete it afterwards.
I still use Virtualbox, because it has a far better GUI and some other advantages. I use a minimal install of Ubuntu 20.04 as host and it runs on ZFS. I have separate VMs for office-work, banking (encrypted by Virtualbox), multimedia, experiments and Windows 10. All VMs use ext4 or ntfs. All VMs, except one and my Host are closed for inbound traffic.
I even have an Ubuntu 20.10 VM in which I run QEMU/KVM with as KVM-VMs Windows Vista and Ubuntu 14.04 :) I use it to keep track of the changes to KVM.
On my 16GB Ryzen 3 2200G the response times of this double sandwich are still fine, but half a second slower than one level lower. I'm a collector, so I have all Windows VMs (activated), except 8.x and all Ubuntu LTS releases starting with 4.10.
Can anybody help me here... I'm applying for a "work from home" job that requires the use of a Windows Laptop with Windows 10 or above... at home I only have Apple computers and laptops, my question is... if I use a Virtual Machine, can I be 100% ascertained that this will be absolutely compatible and have the same functionality as a Windows Laptop for any Software and functions that the job may require?? Or should I go safer and just simply buy a Windows laptop which is definitely gonna cost me more?? And also, would I then need to install anti-viruses for my Mac to run this Windows? Doesn't Windows 10 and above come with it for free?
Hopefully, Mr. Braxman is still reviewing comments on this (4 days after release). I am curious what he (and others) think of using VE (Virtual Environments) instead of VM (Virtual Machines). LXC, Docker, Fedora Silverblue... these can achieve similar security and privacy results with less overhead, and better performance, can they not? One replaces installing an entire OS to VM, installing applications + dependencies to that, with a container running only the desired application + dependencies.
I discuss those virtual environments elsewhere like chroot. Those are fine though they're not usually suited for a casual user with a GUI as you know.
the usage of systemd in qubes and whonix discourages me from using these gnu+linux distributions. i prefer heads gnu+linux.
Everything going GR8 until: sudo systemctl enable --now libvtrtd
Failed to enable unit: Unit file libvtrtd.service does not exist.
Dell All-in-One 2330 i7 - 8G RAM - 2T HD - Linux Mint Cinnamon 20. What now?
Rob,
I bought a new car. Any thoughts on UCONNECT? Seems like they will track you and sell data?
Another alternative to VMs is using Samdboxes, eg windows sandbox or sandboxie. These may be less resource intensive. Also Microsoft Edge's browser has good sandbox isolation if you need it.
the lbry link is not int he description anymore :(
Thanks sir!
@rob braxman So, how about a little disinfo -- install different "junk" addons to a browser to change the browser's fingerprint every so often (perhaps each browsing session)?
Love your videos.
Glad you like them!
I would like to use mint and jde neon in kvm but can't seem to figure how as it does not recognize them I guess mint could use ubuntu settings Nott sure about the other
Thanks for info.
you doing this in a virtual machine or on bare bones?
Hi Rob, are you interested in creating a video on KVM using a Bridge instead of NAT?
Thanks.
I've been running Facebook in its own dedicated browser on a VM for quite a while now. Since I'm already running a bunch of virtual servers in XCP-ng, I put it there.
why run it at all?
@@natalieisagirlnow FB has its purpose, i.e. to connect with people... in some cases people I haven't had contact with in decades. But that purpose doesn't monetize Zuckerberg, which I have no interest in doing. So he can shovel ads at me on FB itself, but it won't link to anything else I do online.
@@rancidbeef582 sometimes the cure is worse than the disease. if you really liked them, you wouldn't have lost contact. facebook lives on FoMo like yours. they can't sell you ads, but they have your name, your pictures, your friends, your job, your email
@@natalieisagirlnow Don't assume I've given them all that.
@@rancidbeef582 if you don't, they call you a fake and delete you
@Rob Braxman Tech , is this better in comparison with Qubes OS?
These have different use purposes.
Violence is harming others' freedom in exchange for satisfying their own selfishness. Harming privacy is harming freedom, willing, choices and human rights. That we must defeat these cockroach criminals.
Well said
Rob Braxman Tech Thank you
Great info
For the command 'sudo systemctl enable --now libvirtd' I receive this error:
'Failed to execute operation: Too many levels of symbolic links'
@@florinlinux4326 this one of the commands in the instructions showed in this video. You don't have to reply if you don't know the answer.
Sir, i have a manjaro distro, and if i use your first command in the terminal it returns 0. How to proceed from there? Thanks
Was the first command not just checking if your cpu can virtualize? Maybe your cpu can't virtualize?
This is a great way to harden your pc for hacker wars and messing with scammers from india. They can try all they want to lock your computer or delete everything you have. Using desktop sharing apps becomes more of a 1 sided battle where they think they're about to hack you but really they opened themselves up for it while you can just restart your Virtual Machine from an image and any and all damage attempted by the bad guys will be instantly undone. You will be laughing and your enemies will be defeated and brought to their knees. You can Sys Key them asymmetrically locking their machines up forever while you skip away without suffering any damages.
And what about using containers like Docker, can they help privacy?
This explanation is for running full desktop instances.
Docker is a different beast with a different purpose. Docker containers are NOT virtual machines, they're just bundles of software running in a containerized process (a cgroup). I can't help you much in the sense of privacy regarding docker containers but, just for transparency, if you run a docker image that has root access to you root volume, you just cracked open the entire security of your Linux machine (barring password protected encryption zones in your filesystem still not loaded into memory)
Can you teach us how to use the integrated gpu or dedicated gpu, to pass through the kvm to play games?
I want to play some windows games. Thank you!
(the vm (vkm+qemu) that I tried earlier was kinda laggy)
It's hard to make a useful video for your question. cause you'll want pcie pass through which is highly depending on the gpu and motherboard you have on hand.
Am wondering: if you are in KVM container and the host machine is connected through a VPN, can they still get the MAC address of the hardware?
Mac address is not visible to a VPN either on the host or VM. It requires additional software (ARP). MacAddress is not part of the TCP/IP protocol. It is used for local name resolution only. But it is used in evil ways by facebook and some apps for device fingerprinting
@@robbraxmantech Thanks Rob! You have the best channel on YT!
What is the song playing at 8:00 ?
How safe is Google Fiber internet
virtual network is not active when I try to proceed I get an error could not start virtual network 'default': internal error: failed to initialize a valid firewall backend
sudo apt install ebtables iptables dnsmasq then: sudo sudo systemctl restart libvirtd Next restart your virtual machine.
Lots of interesting security stuff in this video but I have been moving to containers - more recently podman - instead of VMs . .
That is certainly an approach too. I think the way I'm using this is user friendly though. It's simple enough. Anyone who knows some basic Linux can do it.
@@robbraxmantech Agreed - I'm glad I had your channel pointed out to me and will now have to check out more of your videos!
yes for developers containers is more advanced session, with kubernetes etc...