Avatar of jana
janaFlag for United States of America asked on

Running Tor under a Windows 10 VM

Read an article regarding recommendation on using Tor and found in that Windows is not recommended for Tor.  Within the article it is recommended to use Whonix not Windows.

Pixhttp://www.hongkiat.com/blog/do-donts-tor-network/

In the article it says "That is why you shouldn’t be browsing websites through Tor on Windows systems".

If we install Whonix in one of our Windows 10 Hyper-v VM, and run Tor from there, not from Windows, will it still not the best choice?
(We understand since it's still under the W10 then it's the same recommendation of the article but we wanted EE insight)
Tor

Avatar of undefined
Last Comment
John

8/22/2022 - Mon
John

If we install Whonix in one of our Windows 10 Hyper-v VM, and run Tor from there, not from Windows

The way you describe, "Whonix" is still running in Windows and then, depending on how you isolate (or do not isolate) the VM, security may still be an issue.

Windows 10 is very secure. Even parts of EMET have been included. So the proposition that Windows should not be used is at once older than me (and I am nearly dead of old age) and flawed.

Make sure what you are trying to use needs to be used.

Whonix is supposed to be an anonymous operating system. Unless it is completely disconnected, there is no such thing.
ASKER
jana

We thought maybe the actual VM running Whonix would somehow encrypt the data so when it's being pass to the Windows 10 host PC, it's somewhat secure. (we are just assuming something like, not an expert on the subject).

What do you think? You think that the data passe from VM (whonix) to the HOST (w10) is exposed?
ASKER CERTIFIED SOLUTION
John

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
ASKER
jana

Yes, that is what we want to do; use Tor.

We were going to installed Tor right off the bat to our windows 10 computer until we came upon the link we place in the beginning; thus, the reason we place the question.

Question:
If the article we placed correct, that there are privacy issues even if we use Tor within the windows platform?
Your help has saved me hundreds of hours of internet surfing.
fblack61
John

Properly secured, Windows should be as secure as WHONIX and not compromise your privacy. By "properly secured" I mean fully updated.
ASKER
jana

Yes, understood and make sense, but why would the article implies that with Windows 10 Tor would be affected as to privacy?

If w10 if fully updated, why would it be at risk still using Tor?

You said iun ID: 41564435, If the VM is in bridged mode, it's similar as to using Internet Explore within Windows.  However, in NAT mode, the traffic between host and guest stays inside the host machine.  What did u mean by this?
SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ASKER
jana

Ok, to understand, if we install whonix on a VM, then install TOR in it, the communication between TOR and the internet, would it be at risk still using Tor?
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
John

Virtual Machines do not add to or mitigate risks. Running TOR inside WHONIX has the very same risks (however small) within a Virtual Machine as on a physical host machine.
ASKER
jana

Ok, understood; running TOR in the host or in a VM is the same.  That said, what is your recommendation to install TOR, in VM or HOST?
John

It does matter in terms of security, just your needs. You can do it either way. The outcome is the same.
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
John

@rayluvs - Thanks and I was happy to help.