Category: Whonix Development News

Thoughts and news on the development of the Whonix anonymous operating system development.

audit if torbrowser-launcher GnuPG signature verification bypass attack applies to Whonix or other projects

Issue of torbrowser-launcher using gpg command line. [or call it an issue of the gnupg interface and its difficulty using it inside scripts, unfinished python gpg libraries etc.] https://github.com/micahflee/torbrowser-launcher/issues/229 Whonix consistently uses gpg-bash-lib. I’ve checked, that it is not affected

bounty overview – March 2016

Get paid to work on programming tasks! Up to $ 3.000 USD per task. List of bounties and details: – Build Debian Packages from Source Code – $ 3.000 USD – https://www.bountysource.com/issues/9115540-build-debian-packages-from-source-code – make grsecurity kernel, grsecurity-installer work inside Whonix 

General information on various clock sources such as tsc etc. by intel

https://software.intel.com/en-us/blogs/2013/06/20/eliminate-the-dreaded-clocksource-is-unstable-message-switch-to-tsc-for-a-stable (Ignore the highly specific title.)

upcoming usability improvements that will hurt, TLS downloads, abolishing torrent downloads

Whonix website, especially downloading and getting started is so super secure that mortal users give up on it. Even friends of mine, who graduated from university and working as engineers are incapable of getting Whonix installed. My mission to make

Tails Installation Assistant – What do you think about it?

Tails (The Amnesic Incognito Live System) has now a Tails Installation Assistant. What do you think about it? Does it improve or worsen usability? I am wondering, if something like that would be useful for Qubes OS to ease download

Selected Papers in Anonymity – Anonymity Bibliography – Selected Papers in Anonymity

http://freehaven.net/anonbib

consolidating Whonix packages

There have been some complaints, that there are too many Whonix packages. Specifically by people auditing or trying to understand Whonix better. I think here is some valid and some invalid criticism. Nowadays seemlingly almost everyone is overworked. Attention spawns

automatically sharing blog posts everywhere

Blogging at Whonix blog now got a lot more convenient. It is really fun now. twitterfeed, a online service, is being used to automatically share blog posts to Whonix’s facebook page. The wordpress plugin wp-to-twitter is being used to simplify

Anon Connection Wizard / Bridge Wizard / Tor Launcher Clone

troubadour is working on a graphical Anon Connection Wizard. It will be a tor-launcher clone. Written in python. It can be used to express if you like to connect to the public Tor network or using Tor bridges. Here are

Whonix VirtualBox Paravirtualization – Which Acceleration Mode is Optimal? Help Wanted!

What will be the optimal paravirtualization setting for Whonix? none explicitly turns off exposing any paravirtualization interface sounds good security wise but could be really slow. Please test and leave feedback. minimal sounds like a worthwhile alternative if `none` is

Top