FAQ and quirks
Anyone who needs a minimal, nonpersistent session geared towards security and sensible privacy. Specific cases include network diagnostics, personal penetration testing, file recovery, and general usage.
crunkbong scripts play nice with other applications.
Whereas lots of graphical utilities and sessions perform the same function, they will not work in a console session, and many of them will actually impair cli utilities. crunkbong is designed to be used in a graphical OR console session, so I designed an environment that works for console and graphical utilities alike. The "bright" and "wefe" scripts are two examples: because they work in the console, they also work in the gui (through a terminal), and are not invasive towards other utilities that perform the same purpose. So, if a user installs crunkbong, and wants to use KDE, for example, the KDE session utilities will not be impaired by crunkbong scripts.
The intent is to keep as minimal a session as the user desires. For a graphical session, run startx. Your two options for window managers are openbox and dwm. Either can be specified in ~/.xinitrc
Use a terminal; press ctrl+D in openbox to run dmenu_run; or press alt+P in dwm for dmenu_run.
In openbox, right-click on the taskbar or desktop. In dwm, there is none, and you should use dmenu_run as described above.
As it turns out, menus have unreasonable dependencies. This includes: dbus, alien file managers, session-only requirements (eg, KDE dependencies), and so forth. An alternative I investigated was a MiYO perl utility that generated a menu; perl, however, added some 35mb to the base. For this project's goals, more storage space for little gain just isn't worth it. If you know of any sensible alternatives, feel free to leave a request!
Crunkbong is made to be used in a live session. If you desire a menu, feel free to install one within a live session, or modify the iso.
Short answer: probably not. Tor may be anonymous, but whoever controls the nodes controls your session. NSA leaks revealed some crucial information that is worth reading for anyone who believes tor to be a holy grail of anonymity. A proxy or VPN is a better solution.
https://www.schneier.com/blog/archives/2013/10/how_the_nsa_att.html
Short answer: KPTI. The meltdown and spectre fiasco blindsided kernel developers (although the Linux kernel has received serious security criticism for a very long time). KPTI mitigates meltdown flaws. Unfortunately, the patch is only applied on x86_64. It is also said to help with address-space randomization.
Upon request, I can develop a 32-bit version. Crunkbong, like a patch, can be applied to any devuan-based system, and it would be trivial to install its features to any minimal install or debootstrapped devuan build or any of its many derivatives.