Creating a TOR profile that is isolated for anonymity?

jmb988

I've created a user profile I intend to use for TOR only. I've created a tor SSID on my home network that routes an entire VLAN over tor using transparent proxy. I intend to only connect to that ssid in the tor profile to keep it isolated from personal data I.e a different identity.

As the owner profile is always active in the background, and will essentially have access to the tor SSID I'm connected to, will it send any data over the tor connection that could be personal/identifying?

My aim is to only have the tor profile use this connection and everything else is at rest while the session is active. Granting me a secure profile with an off device gateway, similar to Whonix.

I'm just concerned with the main owner profile still running and sending something over that makes tor pointless in the first place.

DeletedUser87

jmb988 The owner profile wouldn't send anything over the connection of the second user. If you want to turn off internet for owner completely, consider RethinkDNS. There you can configure to block all connections in the firewall and just set "block connections without VPN" in system settings.

jmb988

DeletedUser87 so with this rethinkdns, how would I block the owner profile specifically. Would I run this in the tor profile or the owner? If ran in the owner profile would it go to rest when using the tor profile etc?

Still trying to understand how Graphene handles connections with owner in background. I have lots of personal info in the owner profile and worried it'll send something identifying while connected to the tor SSID.

Thank you for the response.

DeletedUser87

jmb988 I already wrote in DeletedUser87 that it wouldn't. Internet access is per profile. So this would be the way.

DeletedUser87

jmb988 you can use the option to "block everything except bypassed apps and IPs". By default, nothing is set to bypass the firewall, so that would put the device offline. If you want, you could also set it as "always on VPN" with the aforementioned system setting option enabled and then just "stop" RethinkDNS in the app itself. This automatically kills all internet traffic, since the device needs the VPN to work. 2 options to solve the same problem.

jmb988

DeletedUser87 Thanks for the response. So I'd run this in the owner profile and set it to block all? Because all profiles share the same connection in the background, wouldn't that also block the tor profile from the internet?

jmb988

DeletedUser87 So every profile does indeed have an isolated network? I read that it all uses owner for system services, which is why owner must be unlocked first on boot. All profiles share owner, So if owner has airplane mode on, when you go into a profile it too has airplane mode on as it did in owner. If you turn airplane mode off in a profile and go back to owner, its now off when it wasnt before, indicating they can communicate between profiles. Which is where the concern comes from that a piece of system data in owner profile could be identifiable, and is routed through tor as the owner shares the connection while running and why you cant "End session" the owner profile as its being used for services in the background.

Sorry, I'm trying to word it as best as I can. I appreciate the replies.

DeletedUser87

jmb988 the owner doesn't share the routed connection. What you are referring to, are just global toggles for system functions. VPN and DNS (among other things) are per profile.