Hello i wanna share file’s between workstation to gateway and i am using a virt-manager and i am gonna add a new virtual hardware my question is both gateway and workstation can access to this virtual same hardware and if my workstation got compromised is this mean my host machine got comprised too because of sharing hardware between gateway to workstation or its not related ?
Instructions for setting up shared folders for Whonix KVM can be found here:
If you’re using the folder sharing mechanism described in the wiki, yes. Don’t try to attach a disk device to two VMs at once though, that will almost certainly result in data corruption. True shared folders are immune to this.
It’s a bit hard to tell what you mean by this. If you’re sharing data between the workstation, gateway, and host, then it theoretically may be possible for the gateway to infect the workstation, the workstation to infect the gateway, or either of them to infect the host, depending on how each of the three of them are set up. Whether that actually is possible or not depends on your host OS, how it is set up, and how you’ve configured the workstation and gateway. You’ll need to gain the needed knowledge of how Debian and Whonix work internally and build a threat model to know if this is a risk.
That being said, why are you trying to share files between the workstation and gateway? The gateway has one job; route traffic over Tor. In most instances, you shouldn’t use it for anything else, and if you do use it for anything else, you’re risking your identity being revealed.
1 Like
The reason that i am trying to connect between gateway to workstation is sometimes i am getting a very slow tor speed i am running a what is speed of my internet test on workstation and if it slows gateway will be gonna get a new tor circut and reason of connecting each other is i couldn’t find any alternative method to send signal to each others so my idea is if connection is slow workstation gonna send a file that write inside of it ‘internet slow’ then gateway will be automatically create new circut, and its gonna be automatically do that via python.
Wouldn’t it be easier and safer to just request a new Tor circuit using Tor Control Panel manually when you notice the network is too slow? Besides the security concerns of doing this, you risk interrupting downloads or uploads when you don’t expect to if you do this automatically.
1 Like
Make sense.