Tor integration in Whonix

Development
,
52

That is backports. You can see all versions here.

https://packages.debian.org/search?keywords=tor

2 Likes
53

yep, so users of whonix will get this upgrade becaue BP repo is enabled by default.

1 Like
54

Nope. Packages from backports are only installed if explicitly requested by using -t --target-release. Otherwise would be a too much with many backports updates all the time.

2 Likes
55

No not correct, i just got it with apt update/full-upgrade normally
because the BP already enabled by default.

doesnt need to be explicitly called.

extraextra via Whonix Forum:

56

No, backports really aren’t upgraded to by default. Documented with evidence (in a footnote) just now here:
System-Wide Upgrade to Backports

However, once you manually install from backports, you will keep getting upgrades from backports, I think.

Why do you have the newer Tor version installed then? Because it was uploaded to the project Kicksecure repository for a few days.

(Whonix is based on Kicksecure.)

Citation required.

If you have the newer version, it is recommended to revert to Debian stable version as per:
Tor Version Downgrade

1 Like
57
1 Like
58
1 Like
59
1 Like
60

Now also in stable-proposed-updates.

2 Likes
61

This is now in the stable repository.

2 Likes
62

Tor 0.4.8.11 is now in all repositories.

1 Like
63

AVC apparmor=“DENIED” operation=“mknod” profile=“system_tor” name=“/run/tor/control.txt.tmp” comm=“tor” requested_mask=“c” denied_mask=“c”

Tor upstream bug. Reported here:

64
65
66
67

This is now in the testers repository.

68

This is now in the stable-proposed-updates repository.

69

This is now in the stable repository.

70

As of version 1.2.2, Arti supports Vanguards, a defense against guard discovery attacks targeting hidden services and hidden service clients

https://blog.torproject.org/announcing-vanguards-for-arti/

Should Whonix switch to Arti and Vanguards in full mode for more anonymity and security for users and hidden service owners? Vanguards is currently disabled in Whonix and is not supported in the current version of Tor

71

This is planned to be done when technically possible / considered feasible by developers / the required Whonix source code changes being available.

Technical details here: Keep an eye on Arti (Tor)