open links from Qubes-Whonix-Gateway inside a Qubes-Whonix-Workstation

Information

ID: 452
PHID: PHID-TASK-7s7mwg6esxvt6wzzwi35
Author: Patrick
Status at Migration Time: resolved
Priority at Migration Time: Normal

Description

Links clicked by the user on the gateway currently show an error popup. (Such links could be seen in whonixcheck, logs, help files, etc.)

Link Confirm Open does not support opening links on Gateway for security reasons.

Please copy the link to the Workstation and open it there.

Use Tor Browser under Workstation to browse the internet.

In #Qubes, we might be able to do better than that.

When #open-link-confirmation detects being run inside #Qubes, it could instead run the following command.

qvm-open-in-vm anon-whonix https://www.whonix.org

First, dom0 would show a confirmation popup.

Second, anon-whonix’s #open-link-confirmation would show a confirmation popup.

The following link will be opened in Tor Browser.

Be careful if Tor Browser is already running as your activities might get linked.

file:///tmp/sys-whonix/tmp.yoMl6S7xV0

Continue?

It is showing file:///tmp/sys-whonix/tmp.yoMl6S7xV0 rather than the link, because of #Qubes upstream issue ‘there is no qubes.OpenURL yet’.

It also seems a bit weird to default to opening inside anon-whonix. (I can easily make that configurable through /etc/open_link_confirm.d.) But I don’t know how the gateway could figure out any reasonable, or running, or anon-link, or existing whonix-gw based AppVMs. However, it should be good enough, because many users will have anon-whonix thanks to Qubes management stack.

Comments


Patrick

2015-12-12 00:46:18 UTC


marmarek

2015-12-12 18:48:17 UTC


Patrick

2015-12-12 18:55:56 UTC


marmarek

2015-12-12 18:58:47 UTC


Patrick

2015-12-12 19:09:13 UTC


marmarek

2015-12-12 19:17:06 UTC


Patrick

2016-04-26 16:50:24 UTC


Patrick

2016-04-26 17:00:47 UTC


Patrick

2016-04-26 17:02:04 UTC


Patrick

2016-04-27 17:46:19 UTC