sometimes when i open nyx (and im using bridges atm) it looks like this:-
is this normal ?
Yes. This is true for all users - not just bridge users. It means that anyone with access to 10.137.3.1 can route their traffic through those SocksPorts. (A loopback address is something like 127.0.0.1 - available to local machine only.)
If this concerns you (because you connect to Gateway over internet / wifi), you can add authentication / encryption: Connections between Whonix-Gateway ™ and Whonix-Workstation ™
Someone else can comment on how resistant Qubes is to VM impersonation / VM MITM attacks. My guess would be: relatively safe as long as dom0 is not compromised.
This is true for all users - not just bridge users
oh i c , tho this is the first time im having this.
If this concerns you (because you connect to Gateway over internet / wifi), you can add authentication / encryption
no i dont connect WS to GW with this method , im using Qubes (default qubes VM-VM connection).
Someone else can comment on how resistant Qubes is to VM impersonation / VM MITM attacks. My guess would be: relatively safe as long as dom0 is not compromised.
i think yes u r right , it is safe since dom0 is not damaged.