Pidgin over Tor?

Qubes-Whonix
1

Hey guys,

i want to ask how to install a chat client like Pidgin with OTR Plugin in Qubes-Whonix WS. Secondly i want to ask, how i can tunnel everything in Pidgin over tor? So that all messages in pidgin uses tor network.

Or maybe anyone could suggest a good messanger for Qubes-Whonix? What about Bitmessage?

best regards

2

Hi STuPiD123

i want to ask how to install a chat client like Pidgin with OTR Plugin in Qubes-Whonix WS. Secondly i want to ask, how i can tunnel everything in Pidgin over tor? So that all messages in pidgin uses tor network.

Or maybe anyone could suggest a good messanger for Qubes-Whonix? What about Bitmessage?

https://whonix.org/wiki/E-Mail#BitMessage

3 Likes
3

Since advice / steps on installing Pidgin in Whonix is deprecated, no doubt that is for some good security / anonymity reason.

I can’t remember specifically what that is for Pidgin (poor security related to encyption libraries or similar?), but other alternatives are recommended.

http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/Deprecated#Pidgin

2 Likes
4

Thank you very much. I installed Bitmassage in whonix-ws template, but i am not able to put it into the shortcut list. I tried “qvm-sync-appmenus whonix-ws” in dom0 terminal but Bitmessage won´t show up in the shortcut list.

Any Idea?

Best regards:)

5

Hi STuPiD123

I tried “qvm-sync-appmenus whonix-ws” in dom0 terminal but Bitmessage won´t show up in the shortcut list.

Although BitMessage is running from anon-whonix-VM (Whonix-ws). Steps to create shortcuts from dom0 are a Qubes Support issue. Please see: https://forums.whonix.org/t/what-to-post-in-this-qubes-whonix-forum-and-what-not/2275

1 Like
6

Qubes has no forum, so where should i ask this question then?

7

Qubes uses a mailing list instead of a forum: Redirecting…

For your specific issue, see: Redirecting…

1 Like
8

Thank you very much :slight_smile:

I used the appvm-shortcut page on Qubes Doc but it didn´t work that way for Whonix WS App VM and template.

10

Hi SteadySupplies

Since advice / steps on installing Pidgin in Whonix is deprecated, no >doubt that is for some good security / anonymity reason.

Why are we making this assumption? I cannot find any remarks anywhere about why Pidgin shouldn’t be used.

Taken from Wiki Chat-Pidgin

Pidgin supports most protocols. However do not use it. It has a very bad security track record with many remotely exploitable bugs - a result of being written in C and containing many legacy protocols. There is no reason to use it when Tor Messenger is now available.

References-------> Pidgin Security Advisories

2 Likes
11

http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/t/a-secure-replacement-for-pidgin/2057

HulaHoop said (who knows what he’s talking about):

Recently discussed offtopic on phabricator was a secure replacement for Pidgin/libpurple known to have a lot of 0days.

12

Hi,

since a few days I can’t connect to XMPP using Pidgin on my Whonix.

i haven’t changed anything in the configuration (network, conection, etc)

just updated my whonix (Gateway + Workstation) using :

upgrade-nonroot

Here is the message I get when trying to reconnect. No success.

Capture

Somobody would kindly help me?

Has something changed with the firewall on the Gateway in the last past updates?

Thanks

EDIT 1 : Solved problem was on the The Calyx Institutes’ servers.

EDIT 2 : Regarding this friendly answer I do believe that was again not the place to post. Let me apologize for this!