I'm really enjoying using this software, but would like to upgrade my ubuntu by network tor with TBB using the command apt-get update
and upgrade
. I need advice if this is possible or compromise my operating system to a serious security risk. Updating the conventional way is too risky for me, because my ISP monitors me, my internet only works with proxy restrictive. I need to install the free software that I would question why I need them.
2 Answers
If you only used signed repositories for your software, then you should be fine. Both Debian and Ubuntu sign their archives by default, and apt complains as soon as you add an insecure source to its list. Thus, it should not matter how you download the packages - their integrity gets verified by the system before installing and everything should be secure.
To use Tor to update your system or install packages it's probably better to just install the tor packages from deb.torproject.org - see the docs on the Tor-website for installation instructions.
Once the package is installed, you should be able to run commands such as these in a root shell:
# torify apt-get update
# torify apt-get install ri-li
I believe this question is about performing apt-get over the Tor network through TBB.
What you need to do is configure your apt to use a proxy. The proxy is localhost:9150 by default.
Not tried this myself so no guarantees.
-
This does not answer the main question - if it is a good idea. Commented Nov 23, 2013 at 22:50
apt-get
. How about using a mirror of the Tor site?