1,976 karma · joined January 28, 2013
A separate $40 ARM box, running some kind of open firewall software (openbsd, m0n0wall, pfsense) that blocks all outgoing traffic that isn't tor is also preferred than trusting say, Virtualbox NAT, which likely leaks host IP to the guest and your VM state to the host.
A bonus to having a dedicated system for whatever secret squirrel things you're doing is it's a physical barrier protecting you from yourself, like when Sabu accidentally logged into IRC in the clear. It's also a good idea to build your own Tails source and hardcode a gigantic password into the startup scripts. This is the "I'm too drunk to be doing this" protection should you ever be faced off your ass and think it's a great idea to go on IRC and taunt the feds or check your sales PMs for the booters and carberp mods you're peddling on not_legaL_hax4sale.ru forums. After 10 tries and failing you'll either pass out or hulk smash the box either way you will not wake up in jail.
Another problem is creeping fees. Most clinics, hospitals ect all nickle and dime you for fees here which add up even though they aren't supposed to. Some regional health authorities here charge a flat monthly tax, which if you can't pay or are in arrears you're screwed and have to pay cash to these clinics. Because there is a standardized rate you're going to pay $135 just to talk to a doctor for 5 minutes because there's no low income clinics, all rates are the same.
Source: my young, foolish self who had to pay this out numerous times to clinics for being behind on taxes.
It's good that this works where you live but you need to be hyper vigilant on who is elected to govern your health authority, which is a huge downside of any kind of socialization of medicine. Governments are fleeting, the next one could purposely sabotage it to satisfy insurance lobbyists or be so incompetent they accidentally let it all go to hell.
Canada also heavily relies on US medical labs in Houston. I had to have a blood analysis done as part of a health check for a work contract years ago and my provincial health authority shipped my samples there for testing. It's cheaper for Canada to outsource all this work to Americans wonder what they are paying lab technicians.
http://www.theguardian.com/world/2014/apr/23/teas-prisons-in...
http://www.cnn.com/2014/06/20/justice/texas-prison-heat-laws...
http://www.insideprison.com/prison_stories.asp?story_id=751
http://www.utexas.edu/know/2014/06/26/summer-heat-kills-inma...
I played around with a TurboSim for a while too back when I was testing out a SIM card 'firewall' that would block the carrier programmed SIM from responding to OTA updates or type-0 stealth SMS and other bad things http://www.bladox.com/ then phones with wifi that didn't require a SIM came out.
Watch this http://youtu.be/6wXkI4t7nuc then imagine you are a federal prosecutor tasked with prosecuting Snowden. Go through all his interviews and find crimes he admitted to not related to the 200k docs he sent to journalists to prevent any defense. Bonus points find inconsistent statements you can manipulate to claim he is a liar to further wash away any defense. Automated tools to grab indiscriminate secret docs, illegal transportation, tons of potential crimes there based on his own admissions alone.
A story the media hasn't done yet is how often traveling sex workers use Airbnb for incall. 2-3 workers will travel to different cities together and then use the apartment to turn tricks. Perfect incall solution instead of using hotels which charge extra for guests or clamp down on visitors. I'm sure there's a small minority of tenants using Airbnb to import narcotics or fraud hardware like ATM skimmers too, can always claim the previous tenant ordered the box full of drugs and you had no knowledge.
LibreSSL isn't even production ready yet, getentropy_linux.c is still in the tree getting worked on, and the sysctl method works (for now) with (most) linux kernels as a failsafe API to gather entropy while inside a chroot/file descriptors exhausted.
For all we know next month kernel.org could roll out a new failsafe API for entropy collection and finally kill off sysctl.