I want to fix XFCE → Xfce proper case-sensitive but I need to change/correct the files names spelling in Whonix source code in a future build. Hence, it’s not fixed everywhere yet.
Now that kicksecure.com is online, there are two recommended host operating systems for Whonix:
- Kicksecure, or
- Qubes OS
While migrating Disable TCP and ICMP Timestamps - Kicksecure to Kicksecure wiki I was wondering what to do with instructions on how to disable TCP and ICMP timestamps on other Linux such as Debian, MacOS and Windows. I think keeping this documentation is too much and should be rejected. If someone wants better security like an operating system that disabled TCP and ICMP timestamps by default, use either Kicksecure or Qubes OS as a host operaging system.
Documenting the same for Debian, MacOS, Windows and even OpenBSD is stretching the project focus too thin. It’s a bit similar like the Debian wiki explaining how to do something on Windows or the MacOS website explaining how to do something on Debian.
The only documentation on Windows, MacOS will be how to install VirtualBox and import Whonix. That is useful to first time Linux users to try out Whonix but for better security these host operating systems are a lost cause. Instructions how to disable TCP and ICMP timestamps would be incomplete in the bigger picture since there would be a lot more host security settings (such as disabling telemetry) that should’t be part of Whonix wiki. Becuase the other way around, we’d also have to host full instructions on how to harden a Windows or MacOS host operating system which would be huge.
There’s now a much more beautiful download button.
Used here:
- Whonix ™ - Anonymous Operating System
- Whonix ™ for VirtualBox with Xfce
- Whonix ™ for KVM
- Qubes-Whonix ™ Overview
Some mediawiki CSS fixes have been implemented. Primarily, many places with previously too much white spaces have been fixes. More fixes are upcoming.
(Mediawiki CSS Fixes Wanted for Whonix Wiki!)
The CodeSelect widget has also been improved.
- looks better
- With javascript enabled, it now copies to clipboard when clicked. This does not happen with javascript disabled because that is unsupported by browsers.
Can be seen here:
https://www.whonix.org/wiki/Testpage8
And the many other wiki pages using the CodeSelect widget.
There are still some bugs (wrong box size if text inside CodeSelect is too long). Please test and leave feedback.
Other planned websites enhancements that I scheduled which are planned for the next 4 weeks are listed here:
Re: kicksecure wiki & existing documentation on Whonix website.
I don’t agree wtih the principle re: removing wiki pages on Whonix that are common to both and redirecting readers to the other website:
- Readers often don’t read the existing documentation on whonix.org as it stands (just look at forum posts re: people often asking basic questions that are already answered in docs i.e. haven’t done their homework). Splitting across two websites will just increase that problem.
- Better IMO to have one “complete” set of documentation in one place for simplicity and as a definitive security and privacy guide.
- The kicksecure site can remain very simple and just get occasional page updates to match whonix.org documentation as required i.e. focused on security as you pointed out.
- The vast majority of the user population is likely to remain focused on Whonix for many years to come → kicksecure is a novelty at present that is unlikely to have a large, standalone user base.
- Whonix is well known, but the kicksecure base not so much.
- Etc.
On that basis, I would reject those suggested edits that is redirecting certain pages to kicksecure.com
Sure - will have a look.
Also, re: Kicksecure logo.
I like the last two:
- Small padlock with full text; or
- Just the wording with the nice, weird “K”
If I had to choose, probably #1.
Will get to other recent, suggested edits when I have a chance. Christmas time is busy…
1 Like
For many it’s “issue → ask somewhere”. I don’t think it would make a difference.
Problem is, there are ~ 70 repositories on Whonix · GitLab. Security / anonymity all mixed up. The security parts cannot get as much outside attention if mixed up with anonymity. By a clean separation of projects, I hope things will look less daunting and easier to grasp.
Documentation in Whonix wiki would be complete because Whonix /wiki/Documentation would continue to have a complete overview even some links are to an external website, i.e. Kicksecure wiki.
Some problems:
- Lots of duplication for things which are the same for Kicksecure and Whonix
- Hard to keep track of backporting improvements from one wiki to the other wiki, especially if both versions have been edited independently
- Occasional page updates in the KIcksecure would be harder than one might imagine. Many Whonix wiki pages are 95-99% unspecific to anonymity and about security only. But the remaining 1-5% anonymity specific content would make these pages unfit for unmodified copy/paste into Kicksecure wiki.
By not filling up Kicksecure wiki with relevant documentation for users and security features developer documentation, restricting the project to have minimal documentation, would be kinda maintaining the project with handbrakes on.
I am expecting the Kicksecure user base to exceed the Whonix user base since it’s simpler to use, no VMs required, the computer security enthusiasts community being a magnitude bigger than the anonymity enthusiasts community, no slow browsing speeds and all the anonymity knowledge not required.
Unfortunately these edits are ongoing and already done according to my instructions for 3 weeks.
We now have a template Archive_link which supports all that is needed.
(Template:Archive_link - wiki source code also contains documentation.)
- plain link without web archive
- “normal” link (most common), clearnet + automatically add link to the web archive
{{Archive_link|url=https://www.kicksecure.com|text=Kicksecure Homepage|onion=http://www.w5j6stm77zs6652pgsij4awcjeel3eco7kvipheu6mtr623eyyehj4yd.onion}}
example:
(The icons are of course not that big in the wiki. Only this forum show them that big.)
full demo and documentation can be found here:
Links
Already used here:
Creating an Anonymous Email Account for Support
No more need to add links (onion). Easy to illustrate the alternative onion link by using the new link template. There are no longer extraneous links to the web archive for onion links (which would be broken since web archive does not support onion links).
(A lightweight fork of mediawiki-link-to-archive.)
We now have:
new wiki chapter:
New wiki footer is online.
(Links to the footer template / widget can be found here: Documentation for Kicksecure ™ Wiki Devs)
A new wiki header has been deployed. It has been re-implemented, is static, and compatible with JavaScript / no-JavaScript.
Some dynamic status information such as logged in, not logged in, create account is not properly shown yet but will be soon in the JavaScript version. For the no-JavaScript version this isn’t possible as this would require not only CSS changes which are comparatively “easy” but a whole new mediawiki skin and PHP which would be a lot more difficult (speak: more expensive). The “basic” functionality (read, edit with or without account, tools) however should be fully functional for both versions (JavaScript and no-JavaScript). Some “advanced convenience” functionality might not be doable at this time.
Due to issues with MediaWiki skin foreground (Broken with mw 1.37), we’re back to MediaWiki default skin Vector and CSS enhancements are being added on top of it.
All enhancements to MediaWiki in the Whonix wiki are being documented here:
Some old chat comments of mine are cited at Metadata - Whonix and Metadata - Whonix . At the time of the chat, I said I would try to dig up sources for the claims I made. I’ve finally done so (took some hours; search engines are truly dreadful at reconstructing my browsing history from when I read these docs at the time):
Sources for claims on WikiLeaks DNC FAT32 metadata:
- Thread by @ClimateAudit on Thread Reader App – Thread Reader App
- https://turcopolier.typepad.com/sic_semper_tyrannis/2019/02/why-the-dnc-was-not-hacked-by-the-russians.html
- VIPS: Mueller’s Forensics-Free Findings
- FAT Anomalies In Leaked DNC Emails Suggest Use Of Thumbdrive – Disobedient Media
- Sorting the WikiLeaks DNC Emails – The Forensicator
Sources for claims on Guccifer2 time zone metadata:
- Guccifer 2.0 NGP/VAN Metadata Analysis – The Forensicator
- Guccifer 2.0 CF Files Metadata Analysis – The Forensicator
Sources for claims on re-saving files introducing new metadata:
- Did Guccifer 2 Plant his Russian Fingerprints? – The Forensicator
- Media Mishaps: Early Guccifer 2 Coverage – The Forensicator
- Guccifer 2’s West Coast Fingerprint – The Forensicator
- Guccifer 2’s Russian Breadcrumbs – The Forensicator
I’ll add these citations to the wiki when I have a few minutes (probably in the next week) unless someone either beats me to it or objects.
1 Like
Now online.
new wiki page: