A basic security question (connection between gateway and workstation)

[Patrick]

@347VifNYuhLFwj8c

also the gateway is basically just redirecting the incoming traffic from the virtual network through tor.

Whonix Networking Implementation - Developer Documentation - Feedback Wanted!

The diff between Debian buster and Whonix related to changes to network configuration. Whonix Networking Implementation - Developer Documentation was just now updated. On above page you can find all changes that Whonix applies related to networking: Location of the files on the disk in installed Whonix. The location of the file in Whonix source code on the disk. A link to the web version of the file on github. A comment if not installed by default gateway or workstation only Non-Qubes-Who…

@347VifNYuhLFwj8c

Afaik ssh is not installed or enabled by default

correct

@347VifNYuhLFwj8c

So the workstation should not be able to do anything to the gateway, right?

correct

@347VifNYuhLFwj8c

I am asking this because I recently set up a new pair of gateway and workstation and I downloaded a potentially dangerous file and I executed it on the workstation. Afterwards I realised that I forgot to change the standard password on the gateway. I don’t think that my identity has been leaked or that the gateway has actually been compromised. But I have been wondering if this was unsafe.

I also think the gateway password doesn’t help much since. It would require an exploit to get access to the gateway.