[HOME] [DOWNLOAD] [DOCS] [NEWS] [SUPPORT] [TIPS] [ISSUES] [Priority Support]

Pidgin over Tor?


#1

Hey guys,

i want to ask how to install a chat client like Pidgin with OTR Plugin in Qubes-Whonix WS. Secondly i want to ask, how i can tunnel everything in Pidgin over tor? So that all messages in pidgin uses tor network.

Or maybe anyone could suggest a good messanger for Qubes-Whonix? What about Bitmessage?

best regards


#2

Hi STuPiD123

i want to ask how to install a chat client like Pidgin with OTR Plugin in Qubes-Whonix WS. Secondly i want to ask, how i can tunnel everything in Pidgin over tor? So that all messages in pidgin uses tor network.

Or maybe anyone could suggest a good messanger for Qubes-Whonix? What about Bitmessage?

https://whonix.org/wiki/E-Mail#BitMessage


#3

Since advice / steps on installing Pidgin in Whonix is deprecated, no doubt that is for some good security / anonymity reason.

I can’t remember specifically what that is for Pidgin (poor security related to encyption libraries or similar?), but other alternatives are recommended.

http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/Deprecated#Pidgin


#4

Thank you very much. I installed Bitmassage in whonix-ws template, but i am not able to put it into the shortcut list. I tried “qvm-sync-appmenus whonix-ws” in dom0 terminal but Bitmessage won´t show up in the shortcut list.

Any Idea?

Best regards:)


#5

Hi STuPiD123

I tried “qvm-sync-appmenus whonix-ws” in dom0 terminal but Bitmessage won´t show up in the shortcut list.

Although BitMessage is running from anon-whonix-VM (Whonix-ws). Steps to create shortcuts from dom0 are a Qubes Support issue. Please see: https://forums.whonix.org/t/what-to-post-in-this-qubes-whonix-forum-and-what-not/2275


#6

Qubes has no forum, so where should i ask this question then?


#7

Qubes uses a mailing list instead of a forum: https://qubes-os.org/mailing-lists/#qubes-users

For your specific issue, see: https://qubes-os.org/doc/managing-appvm-shortcuts/


#8

Thank you very much :slight_smile:

I used the appvm-shortcut page on Qubes Doc but it didn´t work that way for Whonix WS App VM and template.


#9

Why are we making this assumption? I cannot find any remarks anywhere about why Pidgin shouldn’t be used.

XMPP + OTR + Tor has always been the most secure way to communicate. What would have changed this?

Is pidgin no longer pre-installed in Tails?


#10

Hi SteadySupplies

Since advice / steps on installing Pidgin in Whonix is deprecated, no >doubt that is for some good security / anonymity reason.


Why are we making this assumption? I cannot find any remarks anywhere about why Pidgin shouldn’t be used.

Taken from Wiki Chat-Pidgin

Pidgin supports most protocols. However do not use it. It has a very bad security track record with many remotely exploitable bugs - a result of being written in C and containing many legacy protocols. There is no reason to use it when Tor Messenger is now available.

References-------> Pidgin Security Advisories


#11

http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/t/a-secure-replacement-for-pidgin/2057

HulaHoop said (who knows what he’s talking about):

Recently discussed offtopic on phabricator was a secure replacement for Pidgin/libpurple known to have a lot of 0days.