I am trying to decide whether to use Whonix with Virtualbox or KVM.
Virtualbox is made by Oracle. I have trouble trusting Oracle with anything privacy-related, given that they are a big spyware company (https://www.extremetech.com/internet/339027-oracle-faces-class-action-lawsuit-over-tracking-5-billion-people and https://www.pcmag.com/news/oracle-faces-class-action-lawsuit-over-tracking-5-billion-people). I know that large portions of Virtualbox are open-source, but according to http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/KVM#Why_Use_KVM_Over_VirtualBox?, I would need proprietary extensions to use a usb mouse or keyboard, for example. Since they are proprietary, I do not know if they spy on me for Oracle.
On the other hand, according to http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/Dev/VirtualBox#Why_use_VirtualBox_over_KVM?, Virtualbox has higher leak-proofness than KVM, and leak tests using corridor (whatever that is?) somehow fail? What does this all mean? What is or is not leaking exactly? I do not want my dns requests to be leaked to my isp, for example, despite using the tor network via whonix. If anyone could help me understand what exactly is being leaked when using KVM, I would be grateful.
Plz help.
You do not need it.
Your USB mouse / keyboard is handled by the host operating system.
For the vast majority of users VirtualBox Extension Pack is not required.
See also:
VirtualBox Oracle VM VirtualBox Extension Pack
This is a page for developers. You can see this because the URL contains /Dev/.
Therefore users (non-developers) will be unable to understand it.
references:
corridor
is a Tor traffic whitelisting gateway. It is a filtering gateway, not a proxying gateway and can also be configured as a BridgeFirewall.
There are no known leaks.
Ok, the wording…
KVM: Therefore also leak-testing using corridor on the host failed
Wasn’t great. A more correct wording was used just now. “The test cannot be used.”
References for the issue now described more accurately:
There is no evidence of leaks.
Users won’t be able to understand this any further without studying the underlying technology. Similar to Quote Four color theorem - Wikipedia
A simpler statement of the theorem uses graph theory. The set of regions of a map can be represented more abstractly as an undirected graph that has a vertex for each region and an edge for every pair of regions that share a boundary segment. This graph is planar: it can be drawn in the plane without crossings by placing each vertex at an arbitrarily chosen location within the region to which it corresponds, and by drawing the edges as curves without crossings that lead from one region’s vertex, across a shared boundary segment, to an adjacent region’s vertex. Conversely any planar graph can be formed from a map in this way. In graph-theoretic terminology, the four-color theorem states that the vertices of every planar graph can be colored with at most four colors so that no two adjacent vertices receive the same color, or for short: every planar graph is four-colorable.[5]
This is something which I won’t understand without probably studying math for years let alone doing verification of correctness.
However, I guestimate that studying computer, networking and Whonix might be a lot easier and require less time than verification of four color theorem.
Following the sources the origin is Class action against Oracle's worldwide surveillance machine - Irish Council for Civil Liberties this has nothing to do with VirtualBox. The linked class action PDF https://www.iccl.ie/wp-content/uploads/2022/08/File-Stamped-2022-08-19-Oracle-Complaint.pdf neither. It’s about other things.
" Users won’t be able to understand this any further without studying the underlying technology. Similar to Quote [Four color theorem - Wikipedia
This is something which I won’t understand without probably studying math for years let alone doing verification of correctness.
However, I guestimate that studying computer, networking and Whonix might be a lot easier and require less time than verification of four color theorem."
What books do you recommend that I read in order to learn computer, networking, and Whonix?
I am not aware of any helpful books. Only studying man pages, blog posts, mailing list discussions, source code.