New whonix bugs

  1. When you drag copied text it lags the browser and system and when you let go of the dragged text it slows down even further until it stops. This does not happen with regular TBB builds on other OS. Easily reproducible.

  2. Whonix TBB loads default homepage on startup even though a different homepage is set and only when ‘New identity’ is clicked does it load first page with the proper set homepage.

  3. Facing same freezing mentioned in the other thread when system is inactive for short period.

  4. sdwdate verification taking too long. I think there is another thread on this but this should definitely be faster.

=======================================================
"True, especially for a VM o/s like whonix or qubes. They start unattended VMs that just run the Tor daemon, so no user interaction to add entropy. They traded security of preventing your IP from being exposed for possibly having all your traffic and pgp decrypted. "

Read this online, how much truth is there to it?

1) When you drag copied text it lags the browser and system and when you let go of the dragged text it slows down even further until it stops. This does not happen with regular TBB builds on other OS. Easily reproducible.
Which virtualizer? Does that also happen in that virtualizer + Debian jessie + TBB?

I wouldn’t know what in Whonix’s code could be causing this.

2) Whonix TBB loads default homepage on startup even though a different homepage is set and only when 'New identity' is clicked does it load first page with the proper set homepage.
Just now documented here: https://www.whonix.org/wiki/Tor_Browser#Custom_Homepage
3) Facing same freezing mentioned in the other thread when system is inactive for short period.
https://www.whonix.org/forum/index.php/topic,1557.0.html
4) sdwdate verification taking too long. I think there is another thread on this but this should definitely be faster.
https://www.whonix.org/forum/index.php/topic,1301.0.html
"True, especially for a VM o/s like whonix or qubes. They start unattended VMs that just run the Tor daemon, so no user interaction to add entropy. They traded security of preventing your IP from being exposed for possibly having all your traffic and pgp decrypted. "

Read this online, how much truth is there to it?


If this was a problem, then this would be a problem non-exclusive to Whonix, but apply to any software running inside VMs.

There is no easy answer. Entropy is a rabbit hole. Apparently very difficult to prove a negative in this world such as “there is no issue”, “Russel’s teapot certainly does not exist”. Security research would be appreciated.

Quote https://www.whonix.org/wiki/Dev/Entropy:

[html] The Linux Kernel man page says: "[...] /dev/random should be suitable for uses that need very high quality randomness [...]".

Quoted from the riseup.net page about entropy: "[...] entropy-estimation is a black-art and not very well understood [...]".

While it would be good to be cautions, i.e. learning about the entropy quality in Virtual Machines and if required learning about methods to improve it, it's not a critical problem. Successful entropy estimation attacks have never been reported for any software.

[/html]

See also:

[quote=“Patrick, post:2, topic:1351”]Which virtualizer? Does that also happen in that virtualizer + Debian jessie + TBB?

I wouldn’t know what in Whonix’s code could be causing this.[/quote]

Virtualbox 5 - latest version + Default Whonix Setup + TBB Latest stable version.

Does that also happen in that virtualizer + Debian jessie + TBB?

I’m not quite sure what you mean by that

virtualizer = virtualbox 5
debian jessie = this happens using latest Whonix version
TBB = latest stable version

virtualizer = virtualbox 5
Yes.
TBB = latest stable version
Latest stable of TBB. Tor Browser Bundle. Produced by The Tor Project. Downloadable from https://www.torproject.org/.
debian jessie = this happens using latest Whonix version
No. I mean, go to https://www.debian.org/, download Debian jessie operating system from there. [Debian jessie is the operating system, which Whonix is based (derived) from.] Install that inside VirtualBox. Then install TBB from https://www.torproject.org/. See if you can reproduce the error there.