Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Hot answers tagged

13

Quoted from TorifyHOWTO (written by me, but never been disputed): When using a transparent proxy, it is possible to start a Tor session from the client as well as from the transparent proxy, creating a "Tor over Tor" scenario. Doing so produces undefined and potentially unsafe behavior. In theory, however, you can get six hops instead of three, but it is ...


11

It is difficult to break down the huge Comparison of Whonix and Tails to primary differences. Anyway, I'd say: Tails: concentrates on being a Live DVD / Live USB; being amnesic; mobile market Whonix: concentrates on "keep user safe, even when running arbitrary, leaky non-Tor-safe applications and servers through Tor"; support customization to your heart's ...


8

Using such a system only prevents IP address leaks. The Tor Browser has many, many patches to reduce fingerprintability and fix privacy-breaking bugs. Think of it like this: Does it really help that no one can get your IP, if they can potentially link up all of your online identities? There are various and subtle ways of tracking a browser across the web ...


5

Making a movie available via BitTorrent is fine. But using Tor, either for seeding or recommended for downloading, is unwise. It's hard to properly configure torrent clients to use Tor without leaking, so recommending that people download via Tor would put them at risk. And even if torrent clients are properly configured, they would be stealing bandwidth ...


5

In the gateway VM, your hidden service specification goes in /etc/tor/torrc. By default, it's largely empty, and the default configuration has been moved to /usr/share/tor/tor-service-defaults-torrc. In /etc/tor/torrc, add something like this for a webserver: HiddenServiceDir /var/lib/tor/my_hidden_website/ HiddenServicePort 80 192.168.0.11:80 You need to ...


4

Written in September 2013, this answer might be out of date after some time. Full disclosure: I am a maintainer of Whonix wrote most of this page, so I may be biased. (By the way, that page is under a Free as in speech license, so if you legally copy it to wikipedia (or similar) it can be made truly objective.) If you are most concerned about local ...


4

I have been researching this field for a media project I am working on, and while I am in no way qualified to answer this question as well as others here, it seems to me that Whonix is the thing to use if you are using your personal home computer, for the best possible safety and anonymity. While Tails is probably best used for short periods of time on a ...


3

Why would an open source host make Whonix and VirtualBox safer? Less likely to include a backdoor? Open Source: Security by openness / correctness [see wikipedia] Closed Source: Security by obscurity [see wikipedia] The question is what implications does this have on anonymity/Tor? Generally it can be said, anonymity requires security. It depends on ...


3

This is expected. Newer Whonix versions do not come with Tor Browser installed by default. By the time one install Whonix, the default installed version would be most likely outdated, so downloading the most recent one is advised. Also for legal/trademark reasons, it's safer not installing Tor Browser by default and letting the user download it. decided ...


3

I admit that I've never done this, but looking through the man page I think you might find the TrackHostExits option useful: This option is useful if you frequently connect to sites that will expire all your authentication cookies (i.e. log you out) if your IP address changes. Alternatively the MapAddress option may do the trick. When a request for ...


3

The danger (beyond the performance hit) which keeps me from running Tor over Tor has to do with timing and congestion measurements. Adversaries watching your traffic at the exit(s) of your circuits have a better chance of linking your Whonix activity with your TBB activity when those shared circuits slow down or drop packets at the same time. This can ...


3

Two options occur to me: 1) Copy sensitive files to (encrypted) usb stick. 2) Setup Whonix 7 as VM, but in the VM settings, attach the older virtual drive (the vmdk file) as a second hard drive.


3

You have first to define what are your anonymity and security needs, and see if either solution can provide it on its own. Both solutions have different goals and different threat models as summarized by whonix maintainer here. The main feature in Tails that Whonix lacks is amnesic capability, which is making your device forgets everything that happens and ...


2

I didn't find in workstation hidden_service in torrc file and gateway station show me /etc/tor/torrc but there is nothing There little non-nothingness in /etc/tor/torrc worth reading. It says Please see /etc/tor/torrc.examples for help, options, comments etc. Having a look at /etc/tor/torrc.examples as well. cd /var/lib/tor says permission denied You ...


2

Configuring another browser to connect using Tor is reasonably easy. The more difficult problems are: Making certain that all the traffic goes through Tor, including DNS requests. Eliminating all the means by which your browser can reveal your real IP. Making the data revealed via javascript, browser headers, ETags, etc agree with each other without ...


2

I get adrelanos' point that this is a Linux question, and not Tor specific. However, given that it's probably a common question for Whonix users who don't know Linux, I believe that it deserves an answer here. First, if the old Whonix workstation has been compromised, transferring data may compromise the new one. If you're just transferring text, gpg keys ...


2

At Tor blog they say it is not good idea to seed via Tor network. I think best bet of yours would be using Tor browser to contact anonymously someone from non-standard country to seed the torrent for you. You reward him by doing some service in exchange or paying him using cryptocurrency account created over tor network and source funds would be anonymized ...


2

I know this isn't exactly what you asked for, but because Bittorrent over Tor isn't considered the best thing to to there are other options. Depending on what you mean by "movie", another option might be to upload it directly to various leaking platforms. Most of them support a secure way to upload videos to the press directly. You may even want to upload ...


2

There are multiple correct answers to a question like this because its vauge. If you want a whonix copy why not use whonix? One other easy way to build a gateway would be to download the openwrt x86 iso and install it to its own virtual machine, then install and configure tor as a transparent proxy, then configure your networking to use the interfaces on ...


2

Non-issue. Whonix by default is using the Tor network as a client only. (Changing this is even difficult.) You won't be running any kind of relay by using Whonix. The same goes for the Tor Browser Bundle (TBB) and Tails.


2

You should read about how nmap works and how iptables transproxying works or SOCKS proxying works and then realise that you will not be able to effectively nmap over a whonix gateway nor should you ever. Nmap uses by default the "SYN Scan" technique, this means that it sends a TCP SYN packet to each of the ip:port pairs on the list, if it gets a SYN+ACK ...


2

Good day, You'll have to run "whonixsetup" after adding your bridges to torrc and reload Tor afterwards. Either way, going through this should help you get along nicely: https://www.whonix.org/wiki/Bridges#How_to_use_bridges_in_Whonix Have a nice day, Ego


2

Packets won't carry your local time information, application data will though. You probably want to make your timezone UTC since this is the most "generic" timezone and the easiest to calculate your own local time from (since timezones are measured as offsets from UTC). Random timezones are probably counter productive, because some timezones will have ...


2

Amnesic in terms of, for example Tails (The Amnesic Incognito Live System) it is the same as is meant by the medical term. From Wikipedia: "Anterograde amnesia is the inability to transfer new information from the short-term store into the long-term store." Tails has a long-term memory, which is the basis of the operating system and stored on the live media ...


1

Free VPN is an option for you. There is no money trail and you do not need to fund VPN usage. You may encounter volume limitation since you need 5GB usage volume, but this can be overcome by dividing your file to as many parts as you wish, and use different free VPN to load each part. This may improve your anonymity and security. However, make sure all free ...


1

Full disclosure: I am a maintainer of Whonix. I want to use Whonix for my hidden services and am planning to use it on a remote dedicated server, Setting this up could become difficult, depending on the server. For example if the server really is "only" an OpenVZ VM, I don't think it will be possible to install VirtualBox or use physical isolation ...


1

TailsOS (The Amnesic Incongito Live System) TailsOS boots off USB and puts you in a live Debian-based linux instance configured to give you out-of-the-box anonymity on potentially any computer system (home, public computer, library, etc.). It spoofs MAC address, uses Tor to hide IP, and includes a browser and application suite chosen (and in some cases ...


1

If having wide availability of the video is ok, perhaps getting it up on archive.org without caught doing it might be what you need. Then anyone can see it and download it. Plenty of "activist" class material there. Aside from presenting traffic that is unwelcome on Tor, I think your torrent client itself is apt to leak who you are in several ways. Very bad ...


1

There is little Whonix specificness here. It's similar to using many torified applications on the host, then changing circuit (using Tor Browser's New Identity feature or arm) and asking "are circuits changed in all applications or only in Tor Browser?" Tor has no concept of "workstations" (neutral statement). At best it knowns that it's getting connections ...


1

Do once. (Install missing dependencies. Only required for Whonix 8. Will be no longer required on Whonix 9.) sudo apt-get update sudo apt-get install telnet Do every time you want a new circuit. Run tor-ctrl (installed by default) with signal newnym. bash -x tor-ctrl -p notrequired -c "signal newnym" If you see at the bottom of the output. + sendcmd ...


Only top voted, non community-wiki answers of a minimum length are eligible