I need a way of connecting to a remote server anonymously and running (with further possibility of visual manipulation) a graphical Web Browser (not text-based) - Tor has been chosen for this and therefore SOCKS support is likely a requirement. The server is currently running the latest testing release of Debian and comes with full root access. I am looking at tunneling the underlying traffic through the SSH protocol (forwarding ports, X or just utilizing the Dynamic SOCKS capability).
The initial setup looks like this: I make a connection through SOCKS5 to the remote end point via SSH and run some command.
Multiple choices come to mind, but some of them might also be more exposing than others (location / info leaking).
Is tunneling X a good idea - won't that leak something related to my original host? What about running a VNC service - I could setup a static port forwarding just for that, but won't it also expose any of my internal data (like querying my network adapters and sharing that as some protocol metadata with the server I'm connected to)? Last, but not least, I could also use the SOCKS capability integrated into the browser on my localhost and simply re-route traffic through SSH (the -D flag of the sshd), but that also seems to be not without drawbacks / shortcomings (security measures must be taken - starting a private session, using something like a NoScript add-on, relying on the browser settings not to fail and route everything through SOCKS (including DNS lookup). The most important thing to consider here is not to compromise identity (as well as to the server in the middle) or the and still be able to control the browser on the remote end.
My local host can either be a Windows or a Linux OS - any would do.
Thoughts / suggestions? Thanks.