Hi, I have put your live version on usb stick but the option to download any browser in the system maintenance boot is greyed out.
As a general comment, my threat risk is severe and I would therefore prefer not to install the system on usb stick. It would be really helpful if the original image could come with a default browser so there is no need to download anything in the live version.
I would be very grateful if you would consider adding that feature - I believe it would enhance security even further. Like Tails, without Tor - which unfortunately my banks won’t allow.
Thanks
Jules
UPDATE: I may have been too quick to request support. I can now download browsers. I think it was a problem with my ethernet over usb adapter and your usb guard.
We added that feature some time back, and it sounds like you got it working, so that’s good
It’s worth noting that relying on the live ISO as your compute environment may actually be detrimental if you are likely to be a victim of targetted attacks. Software goes out of date quickly, and out-of-date software can have serious security vulnerabilities that the hardening measures of Kicksecure may not be able to fully mitigate. It isn’t easy to update the software on a live USB due to the read-only nature of the live ISO filesystem. If you want to avoid this risk, it would likely be better to fully install Kicksecure to a USB drive. Use it in LIVE Mode | USER session for general compute tasks, and boot into PERSISTENT Mode | SYSMAINT Session only when you need to install software (i.e. a browser) and update already-installed software. This will give you many of the benefits of the live ISO while avoiding many of the risks. There is a higher chance of a persistent compromise occurring if malware gains root access even in a live session, but that could happen even when using the live ISO (though it’s more frustrating for the attacker on the live ISO for technical reasons).
