Force VirtualBox VMs to use Tor.

Virtual machines are a great tool to run untrusted piece of software. Most of the time, the default networking configuration uses a bridge to allow VMs to communicate. One caveat about this approach is that both VMs and the host will be able to access the same network (like my personal trusted LAN for instance…), something that I definitely don’t want. Multiple solutions exist to isolate the untrusted VMs from the host LAN.


2016 has been a busy year, a lot of changes happened to me. I: gained some experience about how to deal and manage very large storage clusters during my internship, met very nice people, and some others way less interesting, founded my own company, went to Tallinn, went to Helsinki, gave a talk at La Nuit du Hack along with jvoisin about Tails, moved to Montréal and discovered new feelings at -30°C,

Montréal - the end.

The past six months in Montréal have been incredible. I’ve discovered new Canadian people, ate Poutine, felt frozen nose and fingers by -30°C… Although I didn’t have time to travel as much as I’ve planned, it was still an amazing journey. Montréal is a very nice city where it’s pleasant to live. It’s not so crowded and there are a lot of parks in addition of the majestuous Mont-Royal. A selection of pictures during my stay: Gallery - Montréal & Gallery - Chicoutimi

Orchestre à vents de musiques de films - Zelda: Twilight Princess

A friend invited me to her concert Zelda: Twilight Princess by the Orchestre à vents de musiques de films (OVMF) in Montréal. It’s composed of around fifty musicians who perform films and video games soundtracks with a lot of musical arrangements done by the conductor Jocelyn Leblanc (who founded this orchestra in 2000). All performances are usually sold-out several months before so I have been pretty lucky to get a ticket.

I'm now part of Malwarebytes

I have been working on AdwCleaner for some time now, and it has progressively gained more and more users. The last few months have seen a huge spike in detections rates (600 million of malicious elements have been detected in 10 weeks). The same trend was observed with our userbase, with an increase in top-500 companies but also individuals. To follow this trend, the development is focused on upcoming features (including a CLI), but also on being more efficient to handle PUP, including the most virulent ones.

10 new Tor Bridges

It was quite a long time since the last new Tor relays I launched. I temporary received an useless server with a bunch of IPs, so it was the perfect match to provide new Tor Bridges. Bridges are not public Tor relays, thus they are used to provide access to the Tor network to censored users. There are several ways to get a bridge: some bridges addresses are hardcoded in the Tor Browser Bundle at each release, but they can also be retrieved by email or by a web portail, BridgeDB.

[UPDATE] PGP Key revocation

I’m planning to revoke my pgp key D4B6 7EF6 E356 7C8F 6C18 95E5 4FDF 316A 30ED A25C on the 2016-12-18. I created it in 2013, and quite a lot of stuff happened in these years: it’s time to roll my current key. I’ll publish the new one around a month before the expiration date (so mid-November). It will be signed with the current key. Also, you can find and verify the digest of my current fingerprints: fr33tux.

Montréal - Semaine 1

Comme expliqué en début d’année, 2016 fait place nette aux voyages. Et aujourd’hui, c’est direction Montréal, au Québec ! La chaleur est bien présente et provoque des orages réguliers.. Mais le ciel est bleu la plupart du temps. Quelques photos prises dans la ville : Gallery - Montréal

Tails talk during the Nuit du Hack 2016

With jvoisin, I gave a talk during the Nuit du Hack 2016 in a Disneyland’s Hotel in Paris : Tails - security, maintainability and usability, pick three ! The talk was in English (I’m so sorry for my rude accent!) and was pretty well received. Thanks to jvoisin for the invitation and to the whole organisation for the event. The slides are available here, and the sources may be available on the Tails website soon.