Long Wiki Edits Thread

1. Is the Keyboard Layout page sufficient/meant to cover off users who are entering characters other than English e.g. Japanese, Korean, Chinese etc?

If not, then we need to add an “Input Method” section there (or on the System Language page?) re: changing the input method. I see normally the recommendation is to use install & configure i-bus after having installed the necessary fonts for that particular language.

2. Re: Tor Browser language

I tested the Config File method of changing language in Tor Browser (Japanese test) and it didn’t do anything. i.e. saved config file to TB_LANG=“ja”, download Tor Browser again, still presents in English.

http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/Language#Config_File_Method

However, the about:preferences method I just added works correctly. It is easy and it doesn’t make sense to me why somebody would need to download a different binary re: language localization if they can just search for additional language in preferences, set it, and restart Tor Browser within 30 seconds?

1 Like

Well playing with ibus and ibus-setup gets multiple language input working e.g. Russian, Persian, Catalan characters etc. with no issues.

But Japanese seems a bit difficult to work out for some reason (probably Korean & Chinese will also give me the same grief i.e. need some special fonts installed or something)…

Re: YaCy

It is currently impossible to securely install YaCy. After:

  1. Saving the key (manually, not recv-keys which doesn’t seem to work anymore with any keyservers - blocking Tor?)
  2. Verifying fingerprints
  3. Importing the key
  4. Adding the YaCy repository (yacy.list)
  5. Running sudo apt-get update

The following error appears which was reported in 2017 (and still not fixed) - “release not signed”:

W: GPG error: http://debian.yacy.net ./ Release: The following signatures were invalid: 8BD752501CB62448A30EA3EA1F968B3903D886E7

Meaning only an unsafe install is possible.

1 Like

OK - YaCy page and Input Method for Language page -> Fixed.

That commentator in the developer forum is correct re: XFCE in how it is referenced. The Xfce homepage references it everywhere as ‘Xfce’. Do you mind doing a find replace for the wiki documentation please?

1 Like

Not easy because downloadable images are have appending -XFCE and -CLI.

1 Like

This addition (not approved) was blogged about by Bruce Schneier and has other supporting references which prove big companies are doing port scanning on a regular basis.

http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/w/index.php?title=Data_Collection_Techniques&stable=0&redirect=no

Also note companies like LexisNexis use this to track users across the web with “True Location and Behavior Analysis” - readers should be aware of it since it is a novel tracking threat that almost nobody knows about.

2 Likes

2 posts were merged into an existing topic: SecBrowser: A Security-hardened, Non-anonymous Browser

I think in http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/Air_Gapped_OpenPGP_Key

you want to use this command:

gpg --full-generate-key

and not:

gpg --gen-key

Because the former gives you the full list of options i.e. keysize etc. whereas the latter command doesn’t.

Is everything else there up-to-date, or do you want me to run through the steps to check it all still works? I see the wiki output shows (ancient) v1.4.15 output, but the latest version of GPG is 2.2.12.

1 Like
  1. http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/Donate

You might want to remove this part due to recent slander: “…journalists such as Micah Lee,…”

  1. Please approve this page which still has 0brand as maintainer (and only remaining page on main ToC without a thumbnail):

http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/w/index.php?title=Multiple_Whonix-Gateway&stable=0&redirect=no

1 Like

Feel free.

That page was created in 2013. Nowadays I am less excited about OpenPGP. GnuPG upstream makes in my opinion weird choices regarding backwards compatibility and defaults.

https://www.whonix.org/wiki/OpenPGP#Issues_with_PGP

That page could be considered more of a blog. Valid when it was written. Hard to sign up to keep this perfect and up to date for a life time. Nowadays to be seen in the context of when it was written. For advanced users probably still useful as is. Nowadays I have much less time for such side projects. If someone finds that idea still great and wants to sign up improving it, sure thing. :slight_smile:

1 Like

Can anyone come up with a more benign looking download icon? The one used at the moment looks like those sketchy ones in ads on freebie download sites: Kicksecure - Secure by Default Operating System

1 Like

It’s also used on wiki/VirtualBox/… Ha, that one was actually contributed through my instructions since the previous one looked imo even worse. There were no other Libre re-useable download buttons that I could fine. Hence, a new creation was made.

It’s saying “free download” because many laymen visitors don’t know if it’s free in price and often haven’t heard about Freedom Software. Years long insistence of the confusing term “Free Software” didn’t help to increase popularity, reduce confusion and it’s even worse in translations / for ESL.

It’s inspired by other proprietary “free download” buttons but re-created libre from scratch.

Related:

1 Like

I see. What about pasting the “free!” graphic from https://pixabay.com/illustrations/button-round-offer-blue-icon-1711968/ onto one of the download buttons on https://pixabay.com/images/search/download%20button/ ?

https://pixabay.com/vectors/button-download-symbol-icon-1187460/

You don’t have to bother if you are happy with what you have now, but this looks more aesthetic. All graphics on this site are libre/royalty free.

1 Like

At time of writing, pixabay license is a non-freedom license.

https://web.archive.org/web/20200720164110/https://pixabay.com/service/license/

Don’t redistribute or sell someone else’s Pixabay images or videos on other stock or wallpaper platforms.

Not that I personally care to resell any image on any stock platform nor that I think this is important for Whonix. The issue is an ideological issue. It would make the website non-freedom.

1 Like

any reason not to just use a standard html based button that says “Download Kicksecure” or whatever? i have to agree that it looks like those sketchy download buttons on sites that drag you to some type of spyware. haha.

tempest via Whonix Forum:

any reason not to just use a standard html based button that says “Download Kicksecure” or whatever?

I haven’t seen any.

These are all subjects which came up several times in Whonix chat:

Issues Beyond Licensing

1 Like

Not bad. However some of these issues could actually be solved with licensing. But I wouldn’t know such a license would still be Free Software / Open Source certified by FSF / OSI.

The Cryptographic Autonomy License version 1.0 (CAL-1.0) seems an interesting license at first sight covering newer issues but I didn’t look into it yet much. Maybe there are others too which I am not aware of.

1 Like