Long Wiki Edits Thread

Fixed. I’ll fix up internal references once all this is signed off, and change checklist entry around “Verifying Software Signatures” instead of “Verifying Fingerprints”.

Fixed and addressed all your points.

I’ve also added “Split Tor Browser in Qubes” and “Tor Browser without Tor” entries (empty) to the Advanced Tor Browser section, noted with “TODOs”.

Back to the Warnings section now.

1 Like

Warnings section -> Fixed.

I added significant information to the “Passwords” entry and the “Stylometry” part.

So once it’s signed off, that can probably get cut and pasted out to Security Guide & the Blogging Anonymously entries, respectively, with just internal references.

OK, moving on…

1 Like

Awesome! All reviewed.

Whonix and Tor Limitations

from Whonix 0.4.5 release announce

I speculate that quote there from 0.4.5 isn’t the best English either. Reword useful? (And add “was reworded, same meaning”. Or remove the quote altogether if we already said that elsewhere?

→ Fixed.

Passwords text (mostly) shifted to Security Guide. → Fixed.

Stylometry text (mostly) shifted to Surfing Post Blogging entry → Fixed.

System Hardening Checklist links check (ok) and some minor added text → Fixed.

Note:

  • On the main wiki contents page, there is two instances of “Known Issues” (under General Information and Bugs sections). Suggest you delete one of them.

  • Under “Bugs” section, the Troubleshooting entry is mostly in development. Suggest it is moved to the “Dev” section until it is done and a one-liner references it from either “Reporting Bugs” or “Known Issues”. Very, very draft material like that doesn’t belong on the main wiki page.

Other comments:

I might edit the “Install Additional Software” part next as an easy win before doing Advanced Security Guide. Once those two are done, all of the entries under “Get Whonix” and “First Steps with Whonix” will be finished. Rejigging the various sections in these entries will kill the phabricator item too.

:slight_smile:

(I haven’t forgotten the “TODO” list, I’ll get to it.)

After that point, it’s probably worth editing remaining items in “General Information” (easy, generally short) and doing some significant merging, renaming and shifting stuff around in these first 3 sections, because I just don’t like the haphazard nature of it.

I’d like to see “Download Whonix”, “Secure Whonix” “Whonix Features and Design” or similar titling (TBA; requires significant consideration). Section renaming should imitate other software projects like QubesOS and Linux platforms.

There are simply too many “General Information” entries right now before the user gets to the meat e.g. downloading, verifying, securing the platform and so on. Also, Bridges doesn’t belong under “First Steps” since only 3% of all Tor users do this configuration etc.

1 Like

Yes, I agree. Needs all to be condenses / reorganized.

Deleted under general information.

Wish list: Could you please turn the new stylometry documentation into a wiki template? So it could be reused on the related

https://forums.whonix.org/t/standalone-wiki-pages

Btw related:

Some other minor stuff…

At the top of Combining Tunnels with Tor it’s saying Combining Tunnels with Tor. The wiki markup for that is:

{{Title|
title=Combining Tunnels with Tor
}}
{{#seo:
|description=Instructions on how to combine tunnels (VPN, SSH, proxy) with Tor. (User -> Tor -> proxy/VPN/SSH -> Internet) (User -> proxy/VPN/SSH -> Tor -> Internet)
|image=https://www.whonix.org/w/images/8/86/Beyond-1087922640.jpg
}}
``

So we have `Tunnels/Introduction` as well as `Combining Tunnels with Tor`. That should help search engines to find relevant content as well as users to quickly see what the page is about.

Long story short, perhaps you would like to use the stylistic utility of `title=` every now and then.

----

The top level chapter of https://www.whonix.org/wiki/System_Hardening_Checklist currently is ` System Hardening Checklist`, which seems redundant. Perhaps got any idea for `title=` and `description=`?

As for `image=`, @TNT_BOM_BOM is our expert for that who will be looking for Libre Software licensed illustrative images. We could create a forum thread or ticket for any missing `image=`. With or without suggestions on what would suit as image. @TNT_BOM_BOM will see to it eventually.

-----

https://www.whonix.org/wiki/System_Hardening_Checklist is awesome. A short summary was really needed. Helpful as reminder. People can check what they know and/or already did and check out topics they don't know yet.

Could you please mention keystroke fingerprinting, https://www.whonix.org/wiki/Metadata and  https://www.whonix.org/wiki/Surfing_Posting_Blogging#Anonymous_Photo_Sharing? Please keep the security list as short and concise as currently so we won't one day require a checklist for the checklist. :)

Fixed.

Fixed. Plus watermarking with anonymous doc sharing.

Stylometry Template → Will do.

1 Like

I forgot Software - Kicksecure exists. Do you think it should be moved, merged or linked somehow?

⚓ T677 research and document secure downloads using Tor Browser could now be documented. (Secure Command Line / Scurl)

At first glance, it’s probably just easier to merge it and have a link from the software entry to “Secure Downloads” (since most of the software entry is short and sweet). Let me know if you don’t like that.

Should be easy to do with @HulaHoop 's research and mamarek’s input in that item i.e. 10 min job.

1 Like

PS (unrelated), I think you’ve been waiting for this 7 year old Tor bug to be addressed, which just got fixed → Ticket #1922 (torrc.d-style configuration directories)

Should be available in Tor 3.1

2 Likes

Sounds good!

@HulaHoop’s research is interesting.

Added to our HPKP ticket.
https://phabricator.whonix.org/T84

However, I think it needs to be documented there.

→ Fixed and added to Secure Downloads. Also referenced in Tor Browser downloads section.

→ Fixed and merged.

:sweat_smile:

Back to Software Installations…

1 Like

Great!

Secure Command Line / Scurl nitpick:

Whonix users will frequently want to download files

That sounds strange to me. Some users might not download any files at all. Could you please rewrite that?

Made some changes to Secure Command Line / Scurl. Wishlist:

  • make it a template and reuse at Tor Browser Essentials
  • mention downloads from .onion should be preferred(although seldom available and link to Tor Browser Essentials
  • very briefly mention software installation apt-get (auto verification) and gpg verification (specifically important for executable files)
  • mention (link to) compartmentalization?

Please stop me if I over designing it.

All done → Fixed.[quote=“Patrick, post:226, topic:3477”]
That sounds strange to me. Some users might not download any files at all. Could you please rewrite that?
[/quote]

→ Fixed.

I think I’m due for a salary raise :smile:

1 Like

I haven’t finished with the main table of contents re-organization, the bottom half still needs some work.

But just chilling out for a bit to take a breather.

As an aside (all this talk of curl, scurl etc. was a reminder), as per that phabricator item (grep, code change), curl 7.52.1-5 is in stretch, so that should support tls v1.3 as you wanted i.e. as per man pages.

See here: Debian -- Error

Package: curl (7.52.1-5)

Since scurl and secure Tor Browser downloads are now documented, maybe those other x2 phabricators items can also be marked as fixed (?)

1 Like

I like the edited Whonix ™ Documentation a lot! Our content is getting into form.

Could you please add Secure Command Line / Scurl to Whonix ™ Documentation?

re curl --tlsv1.3: ah great, added it to the Whonix 14 TODO:
⚓ T609 check if curl has newer tls options than --tlsv1.3

Tickets closed.

1 Like

1)

Fixed.

2) The remainder of the main Documentation page → Fixed.

I deleted three entries from “Advanced” that were repeated earlier or out-of-date i.e.

  • Chaining Anonymizing Gateways
  • Comparison of Proxies, Proxy Chains and VPNs
  • Download Security (out-of-date)

(Actually that last one could just be merged with the site security page, and deleted completely IMO).

I think it’s easier to find stuff and more logically ordered, although far from perfect.

I think the number of Advanced sections (now) suggests that perhaps they be shifted to an “Advanced Documentation” page.

That would shorten up that main page considerably and the geeks can still find the advanced categories easy enough.

What do you think?

Edit: Unfortunately, gonna be busy for a while (maybe extended).

So, I’ll come back to editing when/if I have time.

1 Like