Hot answers tagged

13

It is difficult to break down the huge Comparison of Whonix and Tails to primary differences. Anyway, I'd say: Tails: concentrates on being a Live DVD / Live USB; being amnesic; mobile market Whonix: concentrates on "keep user safe, even when running arbitrary, leaky non-Tor-safe applications and servers through Tor"; support customization to your ...


5

Making a movie available via BitTorrent is fine. But using Tor, either for seeding or recommended for downloading, is unwise. It's hard to properly configure torrent clients to use Tor without leaking, so recommending that people download via Tor would put them at risk. And even if torrent clients are properly configured, they would be stealing bandwidth ...


4

I have been researching this field for a media project I am working on, and while I am in no way qualified to answer this question as well as others here, it seems to me that Whonix is the thing to use if you are using your personal home computer, for the best possible safety and anonymity. While Tails is probably best used for short periods of time on a ...


3

You have first to define what are your anonymity and security needs, and see if either solution can provide it on its own. Both solutions have different goals and different threat models as summarized by whonix maintainer here. The main feature in Tails that Whonix lacks is amnesic capability, which is making your device forgets everything that happens and ...


3

Why would an open source host make Whonix and VirtualBox safer? Less likely to include a backdoor? Open Source: Security by openness / correctness [see wikipedia] Closed Source: Security by obscurity [see wikipedia] The question is what implications does this have on anonymity/Tor? Generally it can be said, anonymity requires security. It depends on ...


3

This is expected. Newer Whonix versions do not come with Tor Browser installed by default. By the time one install Whonix, the default installed version would be most likely outdated, so downloading the most recent one is advised. Also for legal/trademark reasons, it's safer not installing Tor Browser by default and letting the user download it. decided ...


3

TailsOS (The Amnesic Incongito Live System) TailsOS boots off USB and puts you in a live Debian-based linux instance configured to give you out-of-the-box anonymity on potentially any computer system (home, public computer, library, etc.). It spoofs MAC address, uses Tor to hide IP, and includes a browser and application suite chosen (and in some cases ...


3

You should read about how nmap works and how iptables transproxying works or SOCKS proxying works and then realise that you will not be able to effectively nmap over a whonix gateway nor should you ever. Nmap uses by default the "SYN Scan" technique, this means that it sends a TCP SYN packet to each of the ip:port pairs on the list, if it gets a SYN+ACK ...


2

I get adrelanos' point that this is a Linux question, and not Tor specific. However, given that it's probably a common question for Whonix users who don't know Linux, I believe that it deserves an answer here. First, if the old Whonix workstation has been compromised, transferring data may compromise the new one. If you're just transferring text, gpg keys ...


2

There are multiple correct answers to a question like this because its vauge. If you want a whonix copy why not use whonix? One other easy way to build a gateway would be to download the openwrt x86 iso and install it to its own virtual machine, then install and configure tor as a transparent proxy, then configure your networking to use the interfaces on ...


2

I know this isn't exactly what you asked for, but because Bittorrent over Tor isn't considered the best thing to to there are other options. Depending on what you mean by "movie", another option might be to upload it directly to various leaking platforms. Most of them support a secure way to upload videos to the press directly. You may even want to upload ...


2

At Tor blog they say it is not good idea to seed via Tor network. I think best bet of yours would be using Tor browser to contact anonymously someone from non-standard country to seed the torrent for you. You reward him by doing some service in exchange or paying him using cryptocurrency account created over tor network and source funds would be anonymized ...


2

Non-issue. Whonix by default is using the Tor network as a client only. (Changing this is even difficult.) You won't be running any kind of relay by using Whonix. The same goes for the Tor Browser Bundle (TBB) and Tails.


2

You should read about how nmap works and how iptables transproxying works or SOCKS proxying works and then realise that you will not be able to effectively nmap over a whonix gateway nor should you ever. Nmap uses by default the "SYN Scan" technique, this means that it sends a TCP SYN packet to each of the ip:port pairs on the list, if it gets a SYN+ACK ...


2

All traffic issues from within Whonix-Workstation will either be routed through Tor or not routed at all. It's the very core of what Whonix is good for.


2

Good day, You'll have to run "whonixsetup" after adding your bridges to torrc and reload Tor afterwards. Either way, going through this should help you get along nicely: https://www.whonix.org/wiki/Bridges#How_to_use_bridges_in_Whonix Have a nice day, Ego


2

Packets won't carry your local time information, application data will though. You probably want to make your timezone UTC since this is the most "generic" timezone and the easiest to calculate your own local time from (since timezones are measured as offsets from UTC). Random timezones are probably counter productive, because some timezones will have ...


2

Amnesic in terms of, for example Tails (The Amnesic Incognito Live System) it is the same as is meant by the medical term. From Wikipedia: "Anterograde amnesia is the inability to transfer new information from the short-term store into the long-term store." Tails has a long-term memory, which is the basis of the operating system and stored on the live media ...


1

Whonix has it's own documentation for this. https://www.whonix.org/wiki/Hidden_Services#Hidden_Webserver I would recommend that instead, because that is up to date information. The ip they say that you should point to there is: HiddenServicePort 80 10.152.152.11:80 You can also double check the ip inside the whonix workstation with the command 'ifconfig'...


1

I recommend looking into DNS over HTTPS for any clearnet traffic that you may be touching, including if you are running your own exit node: Here is an example along with instructions on running your own. I am running my own at https://jcdns.fun to experiment with it and have both my Firefox Nightly browser and Chromium browsers pointed at it for all DNS ...


1

This usually happens when your whonix version is 9.4 or below. It is a known bug that will be fixed in version 9.6. For now, here is how you can fix it: Open a terminal in Whonix, then copy & paste the following lines into it: fpr="916B8D99C38EAF5E8ADC7A2A8D66066A2EEACCDA" gpg --recv-keys "$fpr" gpg --fingerprint "$fpr" gpg --export "$fpr" | sudo apt-...


1

In running a hidden service, the major deanonymization risk is poor OPSEC. There's also the attack described in Biryukov et al. (2013). But there, getting your identity from your ISP is the last step. Still, you may not want to advertise using Tor. I don't.


1

Sorry I did not understand your question at first. You should be able to run other operating systems with a whonix gateway. You will just need to configure the network connection of the workstation. I would boot up the workstation that comes with whonix and look at the network configuration and use those same settings on the workstation of your choice. ...


1

Free VPN is an option for you. There is no money trail and you do not need to fund VPN usage. You may encounter volume limitation since you need 5GB usage volume, but this can be overcome by dividing your file to as many parts as you wish, and use different free VPN to load each part. This may improve your anonymity and security. However, make sure all free ...


1

If having wide availability of the video is ok, perhaps getting it up on archive.org without caught doing it might be what you need. Then anyone can see it and download it. Plenty of "activist" class material there. Aside from presenting traffic that is unwelcome on Tor, I think your torrent client itself is apt to leak who you are in several ways. Very bad ...


1

There is little Whonix specificness here. It's similar to using many torified applications on the host, then changing circuit (using Tor Browser's New Identity feature or arm) and asking "are circuits changed in all applications or only in Tor Browser?" Tor has no concept of "workstations" (neutral statement). At best it knowns that it's ...


1

Do once. (Install missing dependencies. Only required for Whonix 8. Will be no longer required on Whonix 9.) sudo apt-get update sudo apt-get install telnet Do every time you want a new circuit. Run tor-ctrl (installed by default) with signal newnym. bash -x tor-ctrl -p notrequired -c "signal newnym" If you see at the bottom of the output. + sendcmd ...


1

One of Tails' main features is its amnesic feature. You forfeit that by running Tails in a VM. Running Tails behind a Whonix-Gateway is recommended against, because it will result in Tor over Tor. See also: Is running Tor over Tor dangerous? No one has combined both projects yet due to considerable development effort, so at the moment there is no way to ...


1

You'd need to compile Tor from source - this is not a configuration change. However, this isn't a great decision - Is it possible to make the Tor onion-routing path longer? has a few answers about this topic.


Only top voted, non community-wiki answers of a minimum length are eligible