Whonix / _: Recent posts

corridor, a Tor traffic whitelisting gateway, a clearnet leak tester

After making the second step, posting how to use corridor, a Tor traffic whitelisting gateway with Qubes-Whonix, I will hereby do the first step, posting a general announcement of an interesting third party project, corridor. Please forget about Whonix for a moment, and I will explain what the corridor project by default is doing.... read more

Posted by SourceForge Robot 2016-07-20

Using corridor, a Tor traffic whitelisting gateway with Qubes-Whonix

corridor is a Tor traffic whitelisting gateway. It is a filtering gateway. Not a proxying gateway.

It can also be used as a BridgeFirewall.

This is not necessarily more anonymous. It is an additional fail-save Tor traffic whitelisting firewall that would protect from accidental clearnet leaks (hypothetical clearnet leak bugs in Whonix). As corridor's project description states, quote "it cannot prevent malware on a client computer from finding out your clearnet IP address". corridor is mostly useful for developers and auditors of Whonix, perhaps also for advanced users who would like to have an additional safety net. It cannot protect from hypothetical Qubes ProxyVM leak bugs either, a physically isolated, standalone corridor-Gateway would be better and could cover that.... read more

Posted by SourceForge Robot 2016-07-20

combining Tor with a VPN or proxy can make you less anonymous

Warning

Using a VPN, proxy or SSH can can negatively affect anonymity under some circumstances. [1] [2]
To explain why that is, some background information is required so you can draw conclusions and take actions to avoid this risk. See below. ... read more

Posted by SourceForge Robot 2016-07-18

Your MAC Address Randomization attempts are futile!

The following paper explains why.

[

Why MAC Address Randomization is not Enough:
An Analysis of Wi-Fi Network Discovery Mechanisms](http://papers.mathyvanhoef.com/asiaccs2016.pdf)

The above interesting paper has been found by HulaHoop and added to Whonix MAC address documentation.... read more

Posted by SourceForge Robot 2016-07-07

Gathering Feedback of new Whonix Homepage Draft

We have been discussing a new Whonix homepage (old) and new Whonix download page (old) for a while now. The draft has been created by Ego and we are now be counseled by ura design, Elio Qoshi (@elioqoshi) (who has recently refined Whonix logo).... read more

Posted by SourceForge Robot 2016-07-04

Whonix logo has been refined

We are excited to reveal that our very own Whonix logo has been slightly refined, offering now better support for smaller screens and more mediums. We also have new profile image based on the logo for social media usage.

Head over to the Whonix blog or Whonix social media accounts to check it out:
- https://www.whonix.org/blog/
- https://www.facebook.com/Whonix/posts/1138354749540112
- https://twitter.com/Whonix/status/7474134011319787521
- https://facebook.com/sharer.php?u=https://www.whonix.org/wiki/Portal... read more

Posted by SourceForge Robot 2016-06-28

Looking for firejail / seccomp maintainer for better security!

(repost)

firejail is a sandbox to restrict the application environment.

Please contribute. Task:

  • play around with firejail in Whoinx
  • see how it goes
  • report (and possibly fix) issues upstream in firejail
  • test the Tor Browser firejail profile, consider packaging it
  • maintain firejail profiles in Whonix... read more
Posted by SourceForge Robot 2016-06-27

testing refined Whonix logo

There will be a more detailed announcement later.

The post testing refined Whonix logo appeared first on Whonix.
link

Posted by SourceForge Robot 2016-06-27

Qubes separate VPN-Gateway between anon-whonix and sys-whonix – Connecting to Tor before a VPN (User -> Tor -> VPN -> Internet)

Posted by SourceForge Robot 2016-06-20

Connecting to Lantern before Tor (User -> Lantern -> Tor -> Internet)

Lantern is a censorship circumvention tool, an alternative to Tor bridges.

Testers only! As an exercise and proof of concept, I quickly put together a documentation chapter for Connecting to Lantern before Tor (User -> Lantern -> Tor -> Internet). Qubes-Whonix only! Non-Qubes-Whonix is unsupported.... read more

Posted by SourceForge Robot 2016-06-10

Connecting to JonDonym before Tor (User -> JonDonym -> Tor -> Internet)

Testers only! As an exercise and proof of concept, I quickly put together a documentation chapter for Connecting to JonDonym before Tor (User -> JonDonym -> Tor -> Internet). Qubes-Whonix only! Non-Qubes-Whonix is unsupported.... read more

Posted by SourceForge Robot 2016-06-06

Whonix 13 released!

Qubes-Whonix:

Either start with fresh templates. I.e. uninstall qubes-template-whonix-gw and qubes-template-whonix-ws. Then, to install, run in dom0:

`sudo qubes-dom0-update qubes-template-whonix-gw qubes-template-whonix-ws

Or you can also upgrade from Whonix's repository. Please refer to the following instructions: <https://www.whonix.org/wiki/Upgrading_Whonix_12_to_Whonix_13>
`... read more

Posted by SourceForge Robot 2016-05-31

Whonix 13.0.0.1.1 – Testers Wanted!

Qubes-Whonix:
https://www.whonix.org/blog/qubes-whonix-13-0-0-0-7-testers-wanted

Non-Qubes-Whonix:
https://download.whonix.org/13.0.0.1.1/

You can also upgrade existing installations. For now by upgrading from Whonix's testers repository. More info:
https://www.whonix.org/wiki/Upgrading_Whonix_12_to_Whonix_13... read more

Posted by SourceForge Robot 2016-05-16

Qubes-Whonix 13.0.0.0.7 – Testers Wanted!

Qubes-Whonix only!

Either start with fresh templates. I.e. uninstall qubes-template-whonix-gw and qubes-template-whonix-ws. Then, to install, run in dom0:

sudo qubes-dom0-update --enablerepo=qubes-dom0-unstable qubes-template-whonix-gw qubes-template-whonix-ws

Or you can also upgrade from Whonix testers repository. Please refer to the following instructions:
https://www.whonix.org/wiki/Upgrading_Whonix_12_to_Whonix_13... read more

Posted by SourceForge Robot 2016-05-11

Qubes OS looking for developers!

The Qubes OS team is looking for several additional team members:

  • Debian template manager
  • stable release manager
  • core developer

You can read more in their posting. From my experience working with the Qubes OS team, they are easy to work with.

In my view, the Debian template maintainer and core developer positions are good ways to get a position in a Libre Software project, by starting as a volunteer working on open tasks. Be helpful. Relieve more work from existing developers than adding to their plate. This is the most convincing thing you can do.... read more

Posted by SourceForge Robot 2016-05-06

most encryption will be broken

In ~10 years Quantum Computers will break todays common asymmetric public-key cryptography algorithms used for web encryption (https), e-mail encryption (gnupg…), ssh and others. See Post-Quantum Cryptography (PQCrypto).

The post most encryption will be broken appeared first on Whonix.
link

Posted by SourceForge Robot 2016-05-05

bounty overview – Mai 2016

Get paid to work on programming tasks! Up to $ 3.000 USD per task.

List of bounties and details:

Posted by SourceForge Robot 2016-05-04

Whonix on distrowatch

Posted by SourceForge Robot 2016-04-20

‘sudo apt-get install whonix’ Part II

Many packages developed under the Whonix umbrella are independent
packages in their own right and should be available to users whether
they use Whonix directly or not.

Another long term goal is bringing some of Whonix's major software
packages with their security and privacy enhancements to Debian host
systems via our repository.

To try it out, follow the instructions on the wiki.... read more

Posted by SourceForge Robot 2016-04-20

‘sudo apt-get install whonix’ Part I

The ability to install Whonix meta-packages packages from a repository
is currently under heavy development and almost finished. With this
announcement we ask that you consider donating to sustain and accelerate
progress.

How it Works:

In two steps a user is able to convert plain Debian VMs into Whonix:

1. First by adding the Whonix repo URLs to the apt sources list
(optionally: check instructions for anonymous repo downloads)... read more

Posted by SourceForge Robot 2016-04-19

Bounty! $ 3.000 USD – Build Debian Packages from Source Code

Short:

Ticket updated, shortened discussion here:
https://github.com/Whonix/Whonix/issues/400

On bountysource.com showing the $ 3000 USD bounty (with old lengthy discussion):
https://www.bountysource.com/issues/9115540-build-debian-packages-from-source-code

Long:

The old discussion got too lengthy. Since no one was working on the ticket… I restarted the discussion. Meaning, I created a backup of the old discussion using webcitation, went through all the existing discussion, summarized it, and answered all questions and confusion in the initial ticket description before they come up again, and deleted all comments. That should help everyone interested working on the ticket understand what it's about and save time by skipping reading and parsing the lengthy previous discussion.... read more

Posted by SourceForge Robot 2016-04-02

bounty overview – April 2016

Get paid to work on programming tasks! Up to $ 3.000 USD per task.

List of bounties and details:

Posted by SourceForge Robot 2016-04-02

Biometric Fingerprinting, Mass Surveillance and You

Tracking techniques have become more sophisticated with time. They advanced from simple cookies to browser/device fingerprinting (which Tor Browser focuses on defeating) to user behavior fingerprinting. The latter is about profiling how a user types on a keyboard or uses a mouse.

Keystroke dynamics have been around for a while but the massive scale of deployment is new and comes with serious implications for anonymous users. This technology is already used by PRISM partners, banks and massive online courses.... read more

Posted by SourceForge Robot 2016-03-16

Hardware Endorsed by the FSF

The Free Software Foundation endorses hardware that is Libre software friendly and respects your freedom and privacy. Take a look and consider supporting the OEMs behind these great projects:

https://www.fsf.org/resources/hw/endorsement/respects-your-freedom

The post Hardware Endorsed by the FSF appeared first on Whonix.
link

Posted by SourceForge Robot 2016-03-15

audit if torbrowser-launcher GnuPG signature verification bypass attack applies to Whonix or other projects

Issue of torbrowser-launcher using gpg command line.

[or call it an issue of the gnupg interface and its difficulty using it inside scripts, unfinished python gpg libraries etc.]

https://github.com/micahflee/torbrowser-launcher/issues/229... read more

Posted by SourceForge Robot 2016-03-15

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:





No, thanks