Comment by 1dontnkow_

tldr: Qubes OS, disposable vms, don't run the malware, physical isolation sounds better but is its own can of worms.

> I'm actually curios to know how do you people visit the link securely?

Disposable vm with a connection to tor. Then copied to a disposable vm with access only to one port on my llm server the one running llama.cpp.

> I guess a VM but could in theory something be resilient enough to misuse the Shared Clipboard or something to access your host machine?

When I am doing this kind of thing i have some rules.

Rule #1 Do not run the malware.

Rule #2 No copying from the analysis vm.

Given the malware is not run it's highly unlikely that any Xen vulnerabilities can be exploited or llama.cpp vulnerabilities for that matter.

Ideally I would not be using my own llm server but proxying the requests through another vm that contains temporary credentials to a llm provider. But I did not have the time to set that up.

> Also what is your go to OS?

Qubes OS

> Hm, when I think of it an old Raspberry Pi could be my go to for this, but always physically.

Physical isolation has it's own issues. If you don't airgap the device it could exploit other devices in your network, old residential routers are not exactly bulletproof especially from the lan side. Additionally, physical devices could be vulnerable to bios and UEFI firmware persistence mechanisms.