Hot answers tagged

5 votes

Releasing a controversial movie torrent using Tor Network for security

Making a movie available via BitTorrent is fine. But using Tor, either for seeding or recommended for downloading, is unwise. It's hard to properly configure torrent clients to use Tor without leaking,...
user avatar
  • 2,989
4 votes

What are the differences between Tails and Whonix?

TailsOS (The Amnesic Incongito Live System) TailsOS boots off USB and puts you in a live Debian-based linux instance configured to give you out-of-the-box anonymity on potentially any computer system ...
user avatar
4 votes

What are the differences between Tails and Whonix?

I have been researching this field for a media project I am working on, and while I am in no way qualified to answer this question as well as others here, it seems to me that Whonix is the thing to ...
user avatar
3 votes

Is there a way to get portscanning (nmap) to work through Whonix?

You should read about how nmap works and how iptables transproxying works or SOCKS proxying works and then realise that you will not be able to effectively nmap over a whonix gateway nor should you ...
user avatar
  • 10.8k
3 votes

What are the dangers of possible Mac OSX backdoor?

Why would an open source host make Whonix and VirtualBox safer? Less likely to include a backdoor? Open Source: Security by openness / correctness [see wikipedia] Closed Source: Security by ...
user avatar
  • 2,867
3 votes
Accepted

Is it feasible and rational to combine the Tails package and Whonix package to improve the anonymity of the client? And, how to implement it?

You have first to define what are your anonymity and security needs, and see if either solution can provide it on its own. Both solutions have different goals and different threat models as summarized ...
user avatar
  • 1,195
2 votes

How to make a system like Whonix?

There are multiple correct answers to a question like this because its vauge. If you want a whonix copy why not use whonix? One other easy way to build a gateway would be to download the openwrt x86 ...
user avatar
2 votes

Releasing a controversial movie torrent using Tor Network for security

I know this isn't exactly what you asked for, but because Bittorrent over Tor isn't considered the best thing to to there are other options. Depending on what you mean by "movie", another option ...
user avatar
  • 1,182
2 votes

Releasing a controversial movie torrent using Tor Network for security

At Tor blog they say it is not good idea to seed via Tor network. I think best bet of yours would be using Tor browser to contact anonymously someone from non-standard country to seed the torrent for ...
user avatar
  • 141
2 votes
Accepted

I have a few questions about Whonix/Tor

Non-issue. Whonix by default is using the Tor network as a client only. (Changing this is even difficult.) You won't be running any kind of relay by using Whonix. The same goes for the Tor Browser ...
user avatar
  • 2,867
2 votes

How can I connect to my vps through Tor?

All traffic issues from within Whonix-Workstation will either be routed through Tor or not routed at all. It's the very core of what Whonix is good for.
user avatar
  • 2,867
2 votes

Portscan through whonix gateway

You should read about how nmap works and how iptables transproxying works or SOCKS proxying works and then realise that you will not be able to effectively nmap over a whonix gateway nor should you ...
user avatar
  • 10.8k
2 votes

Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running? (Whonix)

Good day, You'll have to run "whonixsetup" after adding your bridges to torrc and reload Tor afterwards. Either way, going through this should help you get along nicely: https://www.whonix.org/wiki/...
user avatar
  • 41
2 votes

Whonix Workstation Country Code

Packets won't carry your local time information, application data will though. You probably want to make your timezone UTC since this is the most "generic" timezone and the easiest to calculate your ...
user avatar
  • 10.8k
2 votes
Accepted

what does 'amnesic' in context of Computer science and/or privacy mean?

Amnesic in terms of, for example Tails (The Amnesic Incognito Live System) it is the same as is meant by the medical term. From Wikipedia: "Anterograde amnesia is the inability to transfer new ...
user avatar
  • 10.8k
1 vote

Whonix proxy and isolation

There are no unsolicited inbound connections except hidden services when you set some up. (Different Tor Hidden Services are automatically stream isolated.) Solicited (related) incoming connections ...
user avatar
  • 2,867
1 vote

Using regular Firefox browser with Tor in Qubes-OS

Short answer: If you're sure you understand and accept the fingerprinting risks, then yes, it's fine to use regular Firefox (or any application) in an AppVM connected to a Whonix-Gateway. Longer ...
user avatar
  • 81
1 vote
Accepted

Is there a "reason" for Orbot-tethering?

it is not really an exact answer, but a good collection of suggestions related to this topic: You should, wherever possible, use tor on the local system. [...] If you can run Tor Browser on the ...
user avatar
1 vote

Is there a "reason" for Orbot-tethering?

It might be useful for IOS devices, or any other device that you can't run Tor on. I could also imagine a scenario where you'd be using a public computer/laptop/tablet and you want to quickly setup a ...
user avatar
1 vote

Transparent proxy improvement using haproxy load balancer?

It's questionable whether it's an improvement to the existing way that a client generates certificates. Your HAProxy is basically converting your configuration into an pre-2014 Tor circuit building ...
user avatar
  • 1,274
1 vote
Accepted

Whonix with http server not reachable

Whonix has it's own documentation for this. https://www.whonix.org/wiki/Hidden_Services#Hidden_Webserver I would recommend that instead, because that is up to date information. The ip they say that ...
user avatar
  • 1,863
1 vote

Is (provider rotating) DNSCrypt inside Whonix superior privacy-wise to defaulting to Tor exit nodes' DNS?

I recommend looking into DNS over HTTPS for any clearnet traffic that you may be touching, including if you are running your own exit node: Here is an example along with instructions on running your ...
user avatar
1 vote
Accepted

Tor can't be installed on Whonix GPG download signature could not be verified

This usually happens when your whonix version is 9.4 or below. It is a known bug that will be fixed in version 9.6. For now, here is how you can fix it: Open a terminal in Whonix, then copy & ...
user avatar
  • 1,195
1 vote

Hidden Service : To hide from isp or not to?

In running a hidden service, the major deanonymization risk is poor OPSEC. There's also the attack described in Biryukov et al. (2013). But there, getting your identity from your ISP is the last step. ...
user avatar
  • 2,989
1 vote

How to make a system like Whonix?

Sorry I did not understand your question at first. You should be able to run other operating systems with a whonix gateway. You will just need to configure the network connection of the workstation. I ...
user avatar
1 vote

Releasing a controversial movie torrent using Tor Network for security

Free VPN is an option for you. There is no money trail and you do not need to fund VPN usage. You may encounter volume limitation since you need 5GB usage volume, but this can be overcome by dividing ...
user avatar
  • 3,236
1 vote

Releasing a controversial movie torrent using Tor Network for security

If having wide availability of the video is ok, perhaps getting it up on archive.org without caught doing it might be what you need. Then anyone can see it and download it. Plenty of "activist" class ...
user avatar
  • 31
1 vote
Accepted

If I change my circuit in one workstation, will it be changed in another workstation as well?

There is little Whonix specificness here. It's similar to using many torified applications on the host, then changing circuit (using Tor Browser's New Identity feature or arm) and asking "are ...
user avatar
  • 2,867
1 vote

How to request new circuit from within workstation?

Do once. (Install missing dependencies. Only required for Whonix 8. Will be no longer required on Whonix 9.) sudo apt-get update sudo apt-get install telnet Do every time you want a new circuit. Run ...
user avatar
  • 2,867

Only top scored, non community-wiki answers of a minimum length are eligible