4

I am mildly paranoid about protecting the security of my financial accounts. I often use Tails on a live USB for its light weight and amnesia. However, I also require the use of Chrome to visit some sites that I trust. Tails is unable to accomodate Chrome at this time. I would use Ubuntu on a live USB, but I find it very tedious and slow to install Chrome for every boot.

Would it be more secure to use a Ubuntu virtual machine and virtual keyboard, or do a full install of Ubuntu on a USB 3.0 drive? The former option would be more practical, is it safe enough?

I am green, other suggestions welcome, of course.

Chris
  • 41
  • 1
  • If you're really that paranoid you have to go with the USB drive, a virtual machine wouldn't do anything against a compromised host. – AndrolGenhald Jan 09 '18 at 17:41
  • Even if the host is Windows 10 and VM is Ubuntu? – Chris Jan 09 '18 at 17:44
  • See [this](https://security.stackexchange.com/a/172136/151903) for instance. – AndrolGenhald Jan 09 '18 at 17:57
  • 1
    Possible duplicate of [Are virtual keyboards not necessary anymore to protect against keyloggers?](https://security.stackexchange.com/questions/172135/are-virtual-keyboards-not-necessary-anymore-to-protect-against-keyloggers) – Mike Ounsworth Jan 09 '18 at 19:37
  • I'm not sure why the version of Windows in relevant. Either you trust the host OS to be malware-free (in which case, just do your banking directly on the host), or you're assuming the host is compromised, in which case any VM running inside it is theoretically also compromised. – Mike Ounsworth Jan 09 '18 at 19:38
  • If you are using a virtual keyboard malware on the host can just watch the mouse location and see what you have typed... – jrtapsell Jan 09 '18 at 20:57

1 Answers1

1

The problem, as stated, seems to boil down to the simple question: do you trust your host OS to be malware-free? If yes, then just use that for your banking. If not, then running a VM inside an infested host will not give you the level of tin-foil-hattery that you're looking for.

AndrolGenhald
  • 15,436
  • 5
  • 45
  • 50
Mike Ounsworth
  • 57,707
  • 21
  • 150
  • 207