there should be a wiki on whonix news and version check as right now the wiki for hardening the whonixcheck program simply links to a download page for the whole os additionally, there should be wikis explaining the advantages and drawbacks of hardening certain whonix operations because as it stands right now it’s unclear what those are
thanks
Absolutely not. The output of pwgen is not as random as something like diceware.
EDIT: Now corrected
2 Likes
For people on Windows, yeah they will not be familiar with free software even is so it’s good to emphasize that their wallet will stay untouched.
What does this even mean?
1 Like
In Instant Messenger Chat, the following
flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
should be changed to
flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
Or the following error appears when trying to install qTox:
GPG signatures found, but none are in trusted keyring
per GPG found, none in trusted keyring · Issue #1450 · flatpak/flatpak · GitHub
1 Like
No idea. I was hoping someone else would understand better than me. 
1 Like
vfemail will have to be replaced in Encrypted Email with Thunderbird and Enigmail due to destructive hackers.
@tempest mentioned that TNT had a reasonable suggestion with https://danwin1210.me/mail/
Haven’t really looked at this provider but will very shortly. Then update the wiki.
1 Like
Added notice not to use vfemail to the wiki
1 Like
"should be changed to
flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
"
Can someone with template editing powers please change this in the tox template? I was about to, but I don’t have the power to edit templates at the minute…
OK - I’ve just been doing general edits here and there as you probably noticed.
I gather you mightn’t like the Warrant Canary stuff (?). Basically, canaries are speculative, cause more angst than benefit, and probably protect against minimal threats in the Whonix case (open source etc.), even in the event of an NSL. So worth fleshing that out a bit.
That was the point. Unless you think some German court is going to force you to backdoor your own product (baby) and destroy the Whonix brand in the process. Wholly unlikely, since I think you’d go into early retirement before doing that.
1 Like
Was raided and temporarily shutdown in the past, but he’s up and running now.
2 Likes
Placeholder for template edits (reminder for later):
- Tox template:
flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
- Tunnel Support template:
Update “Chaining Anonymizing Networks” link (currently points to old Advanced Security Guide)
- Download table:
Replace the hideous old 1990s retro table with the pretty new table in the Download Table template (?) - see pending edit
Do you / we / I need to update the OnionShare page now that v2 of the software has been released?
http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/Onionshare
e.g. Maybe pointing to v2 in git steps, noting ephemeral onions are now preferred by default etc.? Prob also affects the config section of that wiki entry.
Time to update this section I think (blank at the minute).
So, I can trawl through Phabricator and check for closed issues from 6 August 2018 onwards and note them there if you like.
1 Like
so, i’ve finished up a new beta version of the guide i worked on, which uses danwin1210.me as the e-mail provider. so far, the mail service has worked quite well.
2 Likes
Sure, I’ll propose some adjustments. I don’t think much needs to change really: just the tag number, and maybe a short blurb about the new ‘Receive Mode’ in OnionShare 2. As usual I advocate for linking off to as much 3rd party docs as possible so that the wiki doesn’t fall out of date. However we also need to write official docs for Receive Mode too
1 Like
@HulaHoop in KVM method i think you missed mentioning the ability to check the images signatures with the keys no ?
Qubes has full complete guide about it:
1 Like
Good point.
@Patrick doesn’t a signature mismatch imply that the images was modified maliciously or download corrupted? Wouldn’t also checking the sha256 hash be just another redundant step if the image checks out with the signing key?
2 Likes
Yes.
Yes, redundant. We choose to trust OpenPGP / gpg. It internally uses hashing also. If OpenPGP / gpg is broken, the internet is in bigger trouble anyhow. And from a threat model perspective, hash files don’t provide higher security than images downloads. If the image download was corrupted by an attack, why wouldn’t the hash file also be corrupted by an attacker. OpenPGP signatures are a way out of this.
Why do we provide hash files anyhow? Good question.
- was a feature request
- no extra maintainance work anymore since the process of creation, verification test and upload is automated
- to convince oneself a file really is corrupted and that it’s not a gpg bug
2 Likes
It is inadvisable to consider paying for ‘Lantern Pro’ since the available payment methods cannot be used without damaging user privacy and/or anonymity.
Well, by connecting to lantern for free, doesn’t this already privacy and/or anonymity?
What’s the threat model?
An advanced adversary seeing that a user connects to lantern? This is sane to assume anyhow that this gets logged and later found out.
Quote Hide Tor use from the Internet Service Provider
Some pluggable transports may seek to obfuscate traffic or to morph it. However, they do not claim to hide that you are using Tor in all cases but rather in very specific cases. An example threat model includes a DPI device with limited time to make a classification choice - so the hiding is very specific to functionality and generally does not take into account endless data retention with retroactive policing.
So consistent, efficient hiding of Tor
Is a payment trail worse than that?
We might keep this discouragement of payments but we’d have to give better reasons. Also I am not sure if the statement as is would be a target for libel. Unclear what it entails. Could you please elaborate on it more?
Tor Browser without Tor has been updated
http://whonix.org/w/index.php?title=Tor_Browser_without_Tor&oldid=41176&diff=cur
1 Like
Will fix that.
Also thanks mig5 (can’t like any posts for some reason).
PS 0brand - those are some nice edits (and commits!) my man. More please.
2 Likes