fititnt / AdHocSecurebox

AdHocSecurebox is an opinionated collection of scripts/docs to deal with sensitive data with average hardware and open source software. Work in progress.
The Unlicense
0 stars 0 forks source link

MVP of any FTP/SSH/etc client with GUI on TailsOS #15

Open fititnt opened 4 years ago

fititnt commented 4 years ago

Document (or maybe do some shell scripting) of an minimum viable product (MVP) of any FTP/SSH/etc program with GUI on TailsOS.

fititnt commented 4 years ago

https://apps.kde.org/en/konqueror have lots of feature. But while could be used on some more permanent workstation, it's way too big to re-install all the time (even from cache).

Lets test alternatives

amnesia@amnesia:~/Persistent/git/fititnt/TailsOS-for-non-whistleblowers$ sudo apt install konqueror
[sudo] password for amnesia: 
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following package was automatically installed and is no longer required:
  libpcre2-posix0
Use 'sudo apt autoremove' to remove it.
The following additional packages will be installed:
  baloo-kf5 catdoc dolphin install-info kinit kio kpackagetool5 libaribb24-0 libbasicusageenvironment1 libcddb2 libdbusmenu-qt5-2 libdolphinvcs5 libdvbpsi10 libebml4v5 libepub0 libfam0 libgroupsock8 libixml10
  libkf5archive5 libkf5attica5 libkf5auth-data libkf5auth5 libkf5baloo5 libkf5balooengine5 libkf5baloowidgets5 libkf5bookmarks-data libkf5bookmarks5 libkf5codecs-data libkf5codecs5 libkf5completion-data
  libkf5completion5 libkf5config-data libkf5configcore5 libkf5configgui5 libkf5configwidgets-data libkf5configwidgets5 libkf5coreaddons-data libkf5coreaddons5 libkf5crash5 libkf5dbusaddons-data
  libkf5dbusaddons5 libkf5declarative-data libkf5declarative5 libkf5doctools5 libkf5filemetadata-bin libkf5filemetadata-data libkf5filemetadata3 libkf5globalaccel-bin libkf5globalaccel-data libkf5globalaccel5
  libkf5globalaccelprivate5 libkf5guiaddons5 libkf5i18n-data libkf5i18n5 libkf5iconthemes-data libkf5iconthemes5 libkf5idletime5 libkf5itemviews-data libkf5itemviews5 libkf5jobwidgets-data libkf5jobwidgets5
  libkf5js5 libkf5kcmutils-data libkf5kcmutils5 libkf5kdelibs4support-data libkf5kdelibs4support5 libkf5khtml-data libkf5khtml5 libkf5kiocore5 libkf5kiofilewidgets5 libkf5kiogui5 libkf5kiontlm5
  libkf5kiowidgets5 libkf5konq6 libkf5newstuff-data libkf5newstuff5 libkf5newstuffcore5 libkf5notifications-data libkf5notifications5 libkf5package-data libkf5package5 libkf5parts-data libkf5parts5
  libkf5quickaddons5 libkf5service-bin libkf5service-data libkf5service5 libkf5solid5 libkf5solid5-data libkf5sonnet5-data libkf5sonnetcore5 libkf5sonnetui5 libkf5textwidgets-data libkf5textwidgets5
  libkf5wallet-bin libkf5wallet-data libkf5wallet5 libkf5widgetsaddons-data libkf5widgetsaddons5 libkf5windowsystem-data libkf5windowsystem5 libkf5xmlgui-data libkf5xmlgui5 libkwalletbackend5-5 liblivemedia64
  libmatroska6v5 libminizip1 libopenmpt-modplug1 libphonon4qt5-4 libplacebo7 libpolkit-qt5-1-1 libpoppler-qt5-1 libprotobuf-lite17 libqt5positioning5 libqt5qml5 libqt5quick5 libqt5quickwidgets5 libqt5script5
  libqt5texttospeech5 libqt5webchannel5 libqt5webengine-data libqt5webenginecore5 libqt5webenginewidgets5 libre2-5 libresid-builder0c2a libsdl-image1.2 libsidplay2 libspatialaudio0 libupnp13
  libusageenvironment3 libva-wayland2 libvlc5 libvlccore9 libxcb-xv0 libzip4 phonon4qt5 phonon4qt5-backend-vlc vlc-data vlc-plugin-base vlc-plugin-video-output
Suggested packages:
  dolphin-plugins konq-plugins fam qt5-qmltooling-plugins phonon4qt5-backend-gstreamer
Recommended packages:
  kimageformat-plugins kio-extras ruby kfind libkf5baloowidgets-bin keditbookmarks libkf5config-bin libkf5dbusaddons-bin kpackagelauncherqml libkf5iconthemes-bin kwayland-integration
  libkf5kdelibs4support5-bin libkf5khtml-bin qml-module-org-kde-newstuff libkf5parts-plugins media-player-info sonnet-plugins qtwayland5 libkf5xmlgui-bin geoclue-2.0 libvlc-bin libproxy-tools
The following NEW packages will be installed:
  baloo-kf5 catdoc dolphin install-info kinit kio konqueror kpackagetool5 libaribb24-0 libbasicusageenvironment1 libcddb2 libdbusmenu-qt5-2 libdolphinvcs5 libdvbpsi10 libebml4v5 libepub0 libfam0 libgroupsock8
  libixml10 libkf5archive5 libkf5attica5 libkf5auth-data libkf5auth5 libkf5baloo5 libkf5balooengine5 libkf5baloowidgets5 libkf5bookmarks-data libkf5bookmarks5 libkf5codecs-data libkf5codecs5
  libkf5completion-data libkf5completion5 libkf5config-data libkf5configcore5 libkf5configgui5 libkf5configwidgets-data libkf5configwidgets5 libkf5coreaddons-data libkf5coreaddons5 libkf5crash5
  libkf5dbusaddons-data libkf5dbusaddons5 libkf5declarative-data libkf5declarative5 libkf5doctools5 libkf5filemetadata-bin libkf5filemetadata-data libkf5filemetadata3 libkf5globalaccel-bin
  libkf5globalaccel-data libkf5globalaccel5 libkf5globalaccelprivate5 libkf5guiaddons5 libkf5i18n-data libkf5i18n5 libkf5iconthemes-data libkf5iconthemes5 libkf5idletime5 libkf5itemviews-data libkf5itemviews5
  libkf5jobwidgets-data libkf5jobwidgets5 libkf5js5 libkf5kcmutils-data libkf5kcmutils5 libkf5kdelibs4support-data libkf5kdelibs4support5 libkf5khtml-data libkf5khtml5 libkf5kiocore5 libkf5kiofilewidgets5
  libkf5kiogui5 libkf5kiontlm5 libkf5kiowidgets5 libkf5konq6 libkf5newstuff-data libkf5newstuff5 libkf5newstuffcore5 libkf5notifications-data libkf5notifications5 libkf5package-data libkf5package5
  libkf5parts-data libkf5parts5 libkf5quickaddons5 libkf5service-bin libkf5service-data libkf5service5 libkf5solid5 libkf5solid5-data libkf5sonnet5-data libkf5sonnetcore5 libkf5sonnetui5
  libkf5textwidgets-data libkf5textwidgets5 libkf5wallet-bin libkf5wallet-data libkf5wallet5 libkf5widgetsaddons-data libkf5widgetsaddons5 libkf5windowsystem-data libkf5windowsystem5 libkf5xmlgui-data
  libkf5xmlgui5 libkwalletbackend5-5 liblivemedia64 libmatroska6v5 libminizip1 libopenmpt-modplug1 libphonon4qt5-4 libplacebo7 libpolkit-qt5-1-1 libpoppler-qt5-1 libprotobuf-lite17 libqt5positioning5
  libqt5qml5 libqt5quick5 libqt5quickwidgets5 libqt5script5 libqt5texttospeech5 libqt5webchannel5 libqt5webengine-data libqt5webenginecore5 libqt5webenginewidgets5 libre2-5 libresid-builder0c2a
  libsdl-image1.2 libsidplay2 libspatialaudio0 libupnp13 libusageenvironment3 libva-wayland2 libvlc5 libvlccore9 libxcb-xv0 libzip4 phonon4qt5 phonon4qt5-backend-vlc vlc-data vlc-plugin-base
  vlc-plugin-video-output
0 upgraded, 141 newly installed, 0 to remove and 5 not upgraded.
Need to get 76.8 MB of archives.
After this operation, 318 MB of additional disk space will be used.
Do you want to continue? [Y/n] y
Get:1 tor+http://vwakviie2ienjx6t.onion/debian buster/main amd64 install-info amd64 6.5.0.dfsg.1-4+b1 [343 kB]
Get:2 tor+http://vwakviie2ienjx6t.onion/debian buster/main amd64 libqt5script5 amd64 5.11.3+dfsg-3 [739 kB]
Get:3 tor+http://vwakviie2ienjx6t.onion/debian buster/main amd64 libkf5archive5 amd64 5.54.0-1 [85.4 kB]                                                                                                         
Get:4 tor+http://vwakviie2ienjx6t.onion/debian buster/main amd64 libkf5auth-data all 5.54.0-2 [22.4 kB]                                                                                                          
Get:5 tor+http://vwakviie2ienjx6t.onion/debian buster/main amd64 libkf5coreaddons-data all 5.54.0-1 [106 kB]                                                                                                     
Get:6 tor+http://vwakviie2ienjx6t.onion/debian buster/main amd64 libfam0 amd64 2.7.0-17.3 [27.0 kB]      

# (...)

Get:141 tor+http://vwakviie2ienjx6t.onion/debian buster/main amd64 konqueror amd64 4:18.12.0-1 [7,425 kB]                                                                                                        
Fetched 76.8 MB in 12min 6s (106 kB/s)                                                                                                                                                                           
E: Failed to fetch tor+http://vwakviie2ienjx6t.onion/debian/pool/main/k/knotifications/libkf5notifications-data_5.54.0-1_all.deb  Timed out while waiting to read 'first part of response' from proxy socks5h://127.0.0.1:9050 [IP: 127.0.0.1 9050]
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
amnesia@amnesia:~/Persistent/git/fititnt/TailsOS-for-non-whistleblowers$ 
fititnt commented 4 years ago

Humm. This gnome-online-accounts (if have integration with some online end-user storage spaces, like google drive) may be interesting instead of other software.

Not that I would use then. But over other proprietary alternatives could be useful, in special for one-time installs

#### https://github.com/fititnt/TailsOS-for-non-whistleblowers/issues/15
# MVP of any FTP/SSH/etc client with GUI on TailsOS
## https://linuxnewbieguide.org/how-to-use-google-drive-in-linux/
#
sudo apt-get install gnome-control-center gnome-online-accounts

# amnesia@amnesia:~/Persistent/git/fititnt/TailsOS-for-non-whistleblowers$ sudo apt-get install gnome-control-center gnome-online-accounts
# [sudo] password for amnesia: 
# Reading package lists... Done
# Building dependency tree       
# Reading state information... Done
# The following additional packages will be installed:
#   apg cheese-common gnome-control-center-data libcheese-gtk25 libcheese8 libcolord-gtk1 libgoa-backend-1.0-1
# Suggested packages:
#   gnome-software | gnome-packagekit libcanberra-gtk-module libcanberra-gtk3-module
# Recommended packages:
#   gnome-user-share rygel | rygel-tracker libnss-myhostname pulseaudio-module-bluetooth realmd
# The following NEW packages will be installed:
#   apg cheese-common gnome-control-center gnome-control-center-data gnome-online-accounts libcheese-gtk25 libcheese8 libcolord-gtk1 libgoa-backend-1.0-1
# 0 upgraded, 9 newly installed, 0 to remove and 5 not upgraded.
# Need to get 6,701 kB/6,843 kB of archives.
# After this operation, 26.0 MB of additional disk space will be used.
# Do you want to continue? [Y/n] y

Screenshot from 2020-10-24 19-41-16

fititnt commented 4 years ago

Quick test, without extra configuration, the gnome-online-accounts (maybe because of the same reasons we fixed at Tails v4.12 (tor network) error curl: (7) Failed to connect to example.org port 443: Connection refused & curl --socks5 127.0.0.1:9050 #17 ?) will not work.

This is likely to be by design on Tails since I will supose that, since these softwares where not pre-configuret to go via tor, the Tails default firewall will block even outgoing connections. So actually protect user from randon software that would expose the IP adress. Nice.

Google Account

Screenshot from 2020-10-24 19-46-48

Microsoft

Screenshot from 2020-10-24 19-48-10

IMAP and SMTP

Screenshot from 2020-10-24 19-48-49