Do you have a secure surfstation?

[henri]

Hi folks,

at the moment I have the PC of a good friend of mine at home who asked me, if I could set up a really secure surfstation on it.
No, he does not want to do ellegal stuff but is very paranoid about his company's researches and data even in the case of housebreaking and a theft of his computer.
Before, he always used a knoppix-cd to join the web, but now, he also want's to save some websites he visited to disk and also want's to print them and view a video before going to sleep. He already knows KDE very well, so this is going to be the WM for the box.

Oh, no problem was my answer, why not use tor on a gentoo box with encrypted partitions?
So I first tried tor on one of my own pcs with privoxy but that seemed to be too slow for everyday use to me.
Allright, maybe my tor and privoxy setup also may need some tuning, I just set it up like it's told in the wiki to test it.

But this lead me to the question, if any other gentoo user has realised a really secure and anounymized surfstation which would be, in the best case, military-save.

So let me ask you:
- How do you have realised, or would realise such a setup?
- Which are the important topics to notice?
- Are there any special tools to keep the system clean (browser-history, thumbnails etc, just to name a few points)

Many thanks in advance,
yours Henri

[jamapii]

A virtual machine with a small virtual disk, that can be restored from a master copy at all times.

Go via squid, optionally ad adzapper, privoxy, whatever...

Import a single download directory via NFS (there might be better alternatives).

[zyko]

Your post is vague in some points. Are we talking about industrial espionage, governmental repression, or do we just not want our moms to find out we were looking at those nudy-websites?
To answer your question, it must be clearly defined what the exact scenarios are that we need to prevent. The whole subject is just too complex for blanket statements.