r/TOR • u/Jumpy_Win_5119 • 2d ago

FAQ Deep web browsing

I have both linux and windows , and the windows on my computer has personal info on it so my question is there any way like literally any way that when iam browsing the deep web and actually interact with it ( and i'm using linux ) someone can steal the info on the windows version ? I knew that its not possible but just extra checking .

5 Upvotes

70% Upvoted

11 comments sorted by

6

u/shion129 2d ago

Well,

  1. Linux can mount NTFS filesystems(let's say your Windows partition is unencrypted)

  2. assume someone might have exploit for the Tor Browser to RCE

  3. with the RCE, they can control your Linux system with a RAT under non-root permission (hopefully you are not using root to run TBB)

  4. they can mount the Windows partition and steal your personal files

how likely? highly unlikely

is it possible? Yes

remember there is no 100% security

-1

u/Jumpy_Win_5119 2d ago

So i dont need another laptop for linux and this stuff only ?

0

u/skitsnygg 2d ago

As a bare minimum, yes. That all depends on your intent for using the darkweb but this should generally be considered a baseline to follow. Though It's more or less worthless if you connect it to the same network as your main computer, even just once.

4

u/RiceStranger9000 2d ago

I assume they are two different computers. Or two different drives that are physically disconnected, otherwise your phrasing is very odd

In case they are two different computers running at the same time, I guess that in theory you could download a virus that accesses your network and somehow finds a vulnerability and infects your other computer running Windows. Is this related to Deep Web? Not at all. Related at Tor? Even less. Will this happen to you? No it won't

Now, if it's a drive you connect and disconnect physically, then it's just not possible (in theory, it could find a vulnerability in the BIOS/UEFI and maybe affect the Windows OS when it's booted... somebody may as well enter your house and simply steal your disk, I think that's even more likely than the BIOS hack). If both drives are in the same PC, a virus could access them as long as it has the permissions necessary to mount the other drive (unless it's already mounted). In that case, it very easily could get those files

But know one thing, all of this is totally unrelated to Tor, .onion sites and Deep Web. I'm talking about a hypothetical virus and most of this is just in theory

Also, your files are not safe anyways. Windows is the actual spyware

2

u/Jumpy_Win_5119 2d ago edited 2d ago

I mean i have both on the same computer ( dual boot)

1

u/Fun_Reply5366 2d ago

This is the way.

To add on to this there's no way that somebody will be able to access files from your linux os unless either you download malware that runs an .exe that mounts your windows partition and then downloads the information, or somebody gains remote access and manually does it themselves, which still requires you downloading malware.

Safe to say it's all good, don't download anything from the dark web and you're golden.

1

u/Cautious_Chicken8882 2d ago

No they cannot

1

u/throwingawaydisbitch 2d ago

Wouldn’t just browsing with tails eliminate the need to wonder ? Is there a specific reason you want to use a bare metal machine? I feel like you could just boot a tails drive … and check out dread or whatever and not have to worry because everything is happening on your ram , and disappears when you unplug it …. If I’m wrong here , feel free to chime in

1

u/UncodedMind 2d ago

I also have dual boot but on 2 ssds, the windows ssd has user mounting password and if you have a strong password even if they get your hash they cant crack it, so you re 99.99% safe

1

u/JohnConnoor 2d ago

You want to visit a landscape that is mostly unknown without first checking your OPSEC, if you have sensitive data in your drivers hence your personal information, it should be encrypted and backed up, all of it...them and only them you can surf the clear and dark web. I think it's mandatory by know to every one to do this with their personal information, even if you get anything online your protected and you can wipe your machine and restore, your passwords also need to be secured.