I have been using Whonix in Vbox for awhile. I have discovered a flaw within it. I installed bettercap on KuBuntu on Vbox to see if I could sniff my traffic on the Tor Browser and I couldn’t because it was encrypted.
Then later I installed it on Whonix and out of disbelief I could see my search traffic on anon-dist browser and the regular tor browser which led me to believe whonix isn’t safe. If I can see my traffic someone else can. Im just a little paranoid and don’t know what to do! Any ideas?
This is not a problem. Tor cannot securely transfer traffic from your browser to your Tor daemon.
This is not a security issue because in order to watch your traffic you need to have access to your device, all traffic goes only between your browser and the local tor client. If your device is already compromised, neither tor, tor browser, nor super secure browser will help.
1 Like
Assuming I’m in a coffee shop on Whonix and a hacker notices my virtual address on a wifi adapter would my traffic be encrypted to them? Or would they be able to see my traffic with bettercap?
Your traffic between the browser and the daemon is not visible to the WiFi network owner or other WiFi network users. All data exchange takes place on the device where Whonix gateway and Whonix workstation are running. Only already encrypted Tor traffic goes out to your wifi network, just like with a regular Tor browser.
There are no trivial ways to detect the use of Whonix on the local network instead of the Tor browser
2 Likes
Thanks I was a bit worried. I thought me seeing my own traffic in the terminal meant that my ISP, Hackers and others could see the sites I was visiting too by sniffing my network. I guess I will Reinstall it again but would you recommend qubes os with whonix or Vbox whonix?