Home » Blogs » deekayen's blog

Paranoid USB Ubuntu

Download Ubuntu alternate i386 install. x86-64 is nice, but you don't necessarily know you'll be booting a portable drive on a 64bit machine.

Select the USA - Dvorak region.

Create a 100mb /boot partition as ext3 and the rest as a physical volume for encryption. Use twofish 256, *not* the default aes. Then in the encrypted partition, mount / as ext3. If you have lots of extra space, you might make a LVM inside the encrypted partition that contains swap, /, and /home.

Create the account with a name and login of anonymous.

Install JonDo.

Mozilla addons:

• Adblock Plus
• Google Advertising Cookie Opt-out
• BetterPrivacy
• SkipScreen
• Targeted Advertising Cookie Opt-Out (TACO)
• Torbutton
• NoScript
• Customize Google
• Redirect Cleaner
• Facebook Beacon Blocker
• FireGPG
• Flashblock
• RefControl
• Scroogle or Scroogle

In about:config, toggle dom.storage.enabled to false.

Mozilla (non-privacy related)

• URL Fixer
• Resurrect
• Tab Mix Plus
• Screengrab!
• Web Developer

Thunderbird

• Enigmail
• SendVia

Misc

• Setup Medibuntu repo
• TrueCrypt
• Tor

apt-get update

apt-get upgrade

apt-get purge ubuntuone-client-gnome empathy evolution evolution-common evolution-couchdb evolution-data-server evolution-exchange evolution-indicator evolution-plugins evolution-webcal f-spot xsane xsane-common

edit fstab to not mount /boot by default

apt-get install revelation aircrack-ng vidalia build-essential fakeroot devscripts ettercap-gtk pidgin-otr transmission htop clamtk ndisgtk gnome-rdp filezilla gstm mumble wifi-radar gpa gtkhash gufw thunderbird cvs gettext sshfs gnome-do openssh-server nmap skype macchanger-gtk arp-scan

apt-get install mysql-server apache2 apache2-threaded-dev php5 php5-cgi php5-cli php5-gd php5-common php-pear php5-curl php5-mysql cvs curl php5-mcrypt php5-dev libapache2-mod-php5 gawk patch w32codecs libdvdcss2 non-free-codecs ubuntu-restricted-extras openjdk-6-jre workrave

apt-get purge postfix

Use shred -uzv instead of rm to delete files.

To get automatic hash verification for downloads, use torrent options. In transmission, you can configure it to only accepted encrypted communication from peers and to talk to the tracker through tor.

Create a menu launcher for macchanger-gtk. Use arp-scan by doing something like sudo arp-scan -l -I eth1

Upgrade the GPG signature hash. Sig hashes in high grade SHA will be truncated with traditional 1024D keys, so this probably involves upgrading to a 4096R/4096 key. 1024D key used as an example:

Attachment	Size
idea.c	14.58 KB

Submitted by deekayen on Fri, 10/09/2009 - 11:44pm

deekayen's blog | Printer-friendly version