I'd like to know if it is possible to set a Virtual Machine as a protection against traceability. I would want my traffic to be impossible (or hard) to link to my current computer.

I guess that the specific element that ties a traffic to a machine (namely, a person) is the MAC adress. Thus, I thought that with a Virtual Machine, it would become much harder to tie a specific person to a specific traffic.

Is this assumption correct ?

EDIT : Rephrased, sorry for unclearness

closed as unclear what you're asking by Xander, TildalWave, Mark, schroeder, Gilles Sep 12 '14 at 21:52

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 5
    Untraceable for who? When doing what? – Xander Sep 12 '14 at 18:02
  • Do you want your traffic to be untraceable to your location? Do you want your identity to be untraceable as opposed to your usual machine? Do you want your VM to not look like a VM? – schroeder Sep 12 '14 at 21:45
  • MAC address is not readable outside your local network, so that's not a concern. MAC addresses can also be spoofed to the local network. – schroeder Sep 15 '14 at 14:16

Absolutely nothing is "completely untraceable." You can hide your identity with proxies, tor, VPN etc.. but it is still very easy to out yourself.


First: MAC address don't mean anything outside of the local network.

If you use bridge, the MAC of the virtual machine will be sent to the local network, but not on the Internet (like every MAC: real, virtual or faked). If you use NAT, the virtual MAC will not exist outside of your computer.

However, the virtual machine can leak data about the physical machine under special circunstances. If you read the Security chapter on VirtualBox site, you will see some recomendations about this.

A virtual machine can be reasonably secure if you follow the rules (those are good rules), but to be completely untraceable you will have to disconnect the physical host from the internet.

Not the answer you're looking for? Browse other questions tagged or ask your own question.