share a file with friends or other people without trusting any third party
Maybe coincidence, but here’s Onionshare
Free App Lets the Next Snowden Send Big Files Securely and Anonymously
http://www.reddit.com/r/netsec/comments/265d7e/onionshare_securely_and_anonymously_share_a_file/
Patrick, could this have value as an integration or documentation for Whonix?
This project got a lot of press and attention.
Onionshare could be simple. Since apparently is uses Tor’s ControlPort, thanks to Control Port Filter Proxy (https://www.whonix.org/wiki/Dev/CPFP) and thanks to dummytor (https://www.whonix.org/wiki/Dev/Dummy_Tor), probably no changes on Whonix-Workstation are required.
On Whonix-Gateway, CPFP needs an additional configuration snippet. Check CPFP’s log for commands, that onionshare not yet has access to.
A quick look at onionshare’s code tells me, that the following instructions could be sufficient to get it started:
I might try myself at some point. I am waiting for a secure method to get the software:
This would require some code changes in CPFP. Globing matches instead of exact matches for the whitelist, because onionshare uses for example.
But that’s not the biggest issue. I did some experimental CPFP changes on my hdd and came as far as this.
Calculating SHA1 checksum.
Connecting to Tor control port to set up hidden service on port 52825.
Traceback (most recent call last):
File "/usr/bin/onionshare", line 10, in <module>
onionshare.main()
File "/usr/lib/python2.7/dist-packages/onionshare/onionshare.py", line 146, in main
onion_host = get_hidden_service_hostname(port)
File "/usr/lib/python2.7/dist-packages/onionshare/onionshare.py", line 57, in get_hidden_service_hostname
return open(hostname_file, 'r').read().strip()
IOError: [Errno 2] No such file or directory: '/tmp/onionshare_hidden_service_52825/hostname'
The problem is, that to get the .onion address, onionshare has to read a file on the hdd. But Tor runs on a different system than onionshare. Tor lacks a feature to set/get onion key and hostname through Tor Control Protocol:
Same issue as with torsion:
Ideas:
Made a feature request:
Instructions on getting onionshare to work in Whonix progressed far although they are still unfinished: https://www.whonix.org/wiki/Next#onionshare
Help would be welcome with the following two required control port filter python features that are missing to add onionshare support.
…since I am busy with various stuff, and since @troubadour is busy with various stuff and our new…
source forge help wanted post: https://sourceforge.net/p/forge/helpwanted/programmers/thread/34928768/
Lots of progress has been made. There is a very good chance it will work in Whonix 14.
For reference:
https://phabricator.whonix.org/T561
https://phabricator.whonix.org/T581
https://phabricator.whonix.org/T448
https://phabricator.whonix.org/T446
https://phabricator.whonix.org/T574
https://phabricator.whonix.org/T594
https://phabricator.whonix.org/T445
maybe future work:
https://phabricator.whonix.org/T564
ongoing discussion:
decide if we should install onionshare by default in Whonix 14
https://phabricator.whonix.org/T595
Won’t make it into Whonix 14. Unfortunately, it is not available from Debian stretch.
https://packages.debian.org/search?keywords=onionshare
Does anyone know why?
Weird. Its on every Debian version except current stable…
Attempts to build it on Stretch are failing:
Tails is using the onionshare from sid:
It seems Tails is enabling all the repository enabled and then use pin-priority to control where should a package be download and installed from.
cat config/chroot_apt/preferences:
Package: onionshare
Pin: release o=Debian,n=sid
Pin-Priority: 999
Is this a feature that is nice to have in Whonix? Or do we have any concern causing us not to adopt this approach ?
As far I know, Tails doesn’t support full upgrades. Only point release
upgrades. So not comparable wrt upgrades and pinning.
Apt pinning is too complicated and must be avoided. Reasoning:
For those who would like to use or try onionshare…
After cloning Micah’s repository and building the package, there was an issue running it.
I don’t know which version of onionshare the .d onion-grater white list 40_onionshare.yml was written for, but with version 1.2 (as stated in the GUI), I had to add a line to the ADD_ONION command.
Mimicking NEW:BEST Port=
- pattern: 'NEW:RSA1024 Port=80,(176[0-5][0-9])'
replacement: 'NEW:RSA1024 Port=80,{client-address}:{} Flags=DiscardPK'
Btw for those who don’t know (information not connected here), instructions can be found here:
Thanks!
0.9.2 most likely.
It seems onionshare will land on stretch-backports but not stretch:
https://github.com/micahflee/onionshare/issues/613#issuecomment-384046514
A regression about showing the Whonix advice if onion-grater profile is not active yet in Whonix 15 / debian buster based.
Added support for OnionShare in “bundled Tor” configuration which is the default in Debian buster version of OnionShare.
https://github.com/micahflee/onionshare/issues/829#issuecomment-507190839
This will come through Whonix 15 package upgrades at some point in future.