Based on everything I've read here, Tails is plenty for a little shopping. But out of curiosity and just trying to expand my knowledge, I have starting playing with running Whonix on a VM also.
So out of curiosity, is there any value from an OpSec standpoint in alternating between Tails and Whonix? Would it break up a pattern, or would it really make no difference? Host machine is Linux for what that's worth.
Different use cases.
Also depends on your bare metal OS. If you are using Whonix on Windows, it's kind of pointless. You should be using Linux bare metal.
For the OpSec standpoint, I feel Whonix is slightly better with user/sysmaint and using two VM's. An exploit would have to be sophisticated to get through both VM's or directly affect the VM software (KVM and VirtualBox are the popular two for this). And if you are running user/sysmaint so your user account doesn't have root access, it would be even more difficult.
Read /d/whonix for more!
Also depends on your bare metal OS. If you are using Whonix on Windows, it's kind of pointless. You should be using Linux bare metal.
For the OpSec standpoint, I feel Whonix is slightly better with user/sysmaint and using two VM's. An exploit would have to be sophisticated to get through both VM's or directly affect the VM software (KVM and VirtualBox are the popular two for this). And if you are running user/sysmaint so your user account doesn't have root access, it would be even more difficult.
Read /d/whonix for more!