Selecting Secure Packages from packages.debian.org

[madaidan]

@Patrick

Because that threat model is too high a standard for Whonix. The only maintainable way is: if it’s in Debian = good enough.

Debian contains thousands of packages. Them being in Debian doesn’t make them secure.

@Patrick

That doesn’t sound very discouraging. That todo file is missing just some features.

Dead projects aren’t looking for bugs either so you won’t know if that’s the only issues with it.

@HulaHoop

One of the authors is DrWhax a Tails dev who I trust has his stuff together.

Yet you aren’t trusting the authors’ recommendation not to use it.