Design
From Whonix
(Redirected from Dev)
Contents
Technical Design[edit]
- Dev/Technical Introduction, Whonix ™ Framework, Security Overview
- Comparison of Whonix ™, Tails, Tor Browser, TorVM and corridor
- Comparison of different Whonix ™ variants
- Comparison Of Tor Proxies CGI proxies Proxy Chains And VPN Services
- Status of Whonix ™
- Protocol-Leak-Protection and Fingerprinting-Protection
- Time Synchronization Mechanism
- Stream Isolation
- whonixcheck
- SSL
- LeakTests to check everything is properly set up
- Anonymity Network
- Dev/About Computer (In)Security
- Dev/Threat Model
- Dev/Operating System, Debian, Ubuntu, ...
- Dev/Virtualization Platform
- Whonix-Gateway ™ / Graphical Whonix-Gateway ™ benefits over Headless Whonix-Gateway ™
- Dev/Host
- Whonix-Host
- Fingerprint
- Dev/Entropy
- Whonix ™ Security in Real World
- Security Reviews and Feedback, Press, Media
- (encrypted) (authenticated) Connection Between Whonix-Gateway ™ and Whonix-Workstation ™
- Dev/Build Anonymity
- Dev/Relationship With Upstream
- Dev/About Infrastructure
- Trusting Whonix ™
- Verified Boot (Secure Boot)
- Verifiable Builds (as in reproducible, but not exactly reproducible)
- Factory Reset, Stateless Systems, Reproducible Systems, Verifiable Systems, Clear Linux, NixOS, Fedora Silverblue
- Dev/About Developers
- NEXT: In development for next Whonix ™ version
- Flash Proxy
- Control Port Filter Proxy
- Automatic Updates - to Use or Not Use Them
- Package Manager Graphical
- One Click Update Script - Simplified, Assisted Updates
- Dummy Tor package on Whonix-Workstation ™ (anon-ws-disable-stacked-tor)
- About Debian Packaging
- Criteria for installing applications by default in Whonix ™, Default Application Policy, package sources, software sources, Debian software package repository packages.debian.org, deb.debian.org, deb.torproject.org, software from non-APT repository software sources (Tor Browser)
- Tor Config Files torrc / Why Waste Network Bandwidth by Downloading Operating System Updates over Tor?
- Disclaimer in whonixsetup - Background of it
- anon-ws-disable-stacked-tor, prevents Tor over Tor
- Versioning Format Conventions for packages developed under the Whonix ™ hat
- Comparison Of Package Managers
- Advanced Deanonymization Attacks, Covert Channels
- Dev/Advanced Deanonymization Attacks, Covert Channels
- Whonix Stable Version User Experience
- Coding Style
Detailed Design[edit]
Future Technical Design[edit]
- Permanent Takedown Attack Defender, proposal to defend a permanent takedown threat
- Project / Emergency News
- controversy of anonymous MAC addresses
- apt revoker [archive]
General Developer Pages[edit]
- Documentation Guidelines
- Documentation Markup Format Converters
- Developer Portal
- Dev/Archived Discussions, development discussions, old and recent, bugs, features, etc.
- Git branches
- APT Repository (Whonix ™ Debian Package Maintenance) (.deb), reprepro
- Changes to the Debian|KDE defaults
- Some random thoughts about a future GNOME desktop, GNOME proxy
- Introduction into the Whonix ™ build method and source code
- Whonix ™ News File Format
- SSL certificate pinning
- Mixmaster Implementation Notes
- Flash Tutorial Video
- development discussion if JonDo(Fox) could be pre-installed in Whonix-Workstation ™
- Fedora as host operating system or even VM operating system - development discussion
- Network Manager (NM) in Whonix ™ instead of ifupdown - development discussion
- Dev/Other Virtualization Platforms
- Continuous Integration (CI)
- Consideration running a DHCP server on Whonix-Gateway ™ and running a DHCP client in Whonix-Workstation ™
- Dev/KVM
- Dev/Permissions
- Hosting a Whonix ™ Mirror
- Replicating whonix.org, website, mediawiki
- Why we should avoid APT Pinning / preferences / backports by default
- Comparing Password Managers, finding out best choice as default installed one
- Dev/Porting
- Dev/Logo
- Dev/TPO_Trademark
- 32bit vs 64bit - How effort would multiply when 64bit images (same for other desktop environments such as Gnome)
- Affiliate Conditions (VPN etc.)
- Firefox Add-On, debugging, "live" edits
- tor-launcher add-on screenshots
- apt-get install (un)authenticated, --yes vs --force-yes
- AppArmor
- Mirrors
- whonix.org backup script, to make a backup of most whonix.org content
- apt-build - Installing / Upgrading Debian from Source Code
- Environment Variables
- Firewall Unloading / flush iptables
- Dev/Qubes
- Qubes Split GPG
- Firewall Refactoring
- Dev/Test - How to "UnWhonix" - Instructions on how to remove Whonix ™ Tor default networking for Whonix-Gateway ™. After applying these instructions, Whonix-Gateway ™ will connect to clearnet.
- Firejail
- Port Redirection
- grsecurity
- Whonix ™-Windows-Installer
- Dev/Whonix ™-Windows-User-Interface
- Whonix ™ Cooperation with Researchers
- patreon rewards fundraising
- Special Keys / Host Keys in various Virtualizers
- Gajim - TODO for installing Gajim by default in Whonix ™
- Ledger Hardware Wallet Development Notes
- AEM - anti evil maid
- Boot Clock Randomization
- Dev/mobile
- Dev/yubikey
- Non Anonymous NAT Traversal
- Dev/Whonix friendly applications best practices
- Dev/Licensing
- Tor Browser without Tor
- VirusForget - deactivate malware after reboot from non-root compromise
- bash proper whitespace handling
- wallpaper
- certification / audit
- Windows 10 Issues collection
Website Developer Pages[edit]
- Issue, Bug, Feature Request Tracker, phabricator
- mediawiki CSS
- Whonix ™.org Site Security
- Dev/OpenPGP Signed Website
- HTTP Headers
- Varnish Cheet Sheet
- Hompage of Whonix ™, Experiments with Browser Load Speed and Content
- Web Backend, CMS vs non-CMS, vs github-pages, etc.
- Jekyll
- Qubes Documentation, jekyll, markdown, online editor
- mediawiki, codeselect, select code, short / long / recommended / detailed buttons
- guidelines for advertising on whonix.org
- web.archive.org snapshot using command line interface (CLI) [archive]
Download / Installation - Developer Pages[edit]
- Download Security
- Statistics on Downloads and OpenPGP verification and how we can improve that
- Dev/Download Wizard
- Software Verification (OpenPGP / gpg) Usability Issues / Secure Downloader to Download Whonix ™ Images
- Installation from Whonix ™ repository - "sudo apt-get install whonix"
- VM image download from repository - "sudo apt-get install whonix-gateway-ova" [archive]
Sponsors[edit]
Other Related[edit]
- Documentation
- whonix-devel mailing list archive
- Build Documentation, How to build Whonix ™ from Source Code, How to update Whonix ™ from Source Code
- Whonix ™ Source Code [archive]
- Whonix ™ Developer Meta Files, Scripts for managing the Whonix ™ GNU/Linux Distribution [archive]
- Maintenance, The Tor Project (TPO) apt repository package mirroring to whonix.org repository, Tor Browser hardcoded version file
- Redistribution Pre Building (Only required if you want to redistribute (official) Whonix ™ release builds.)
- Redistribution Post Building (Only required if you want to redistribute (official) Whonix ™ release builds.)
- Tests before Release
- Whonix² Project Vision
- Project Philosophy [archive]
[edit]
- Documentation pages forked from the Tails project
- Citation, backup of website content license grants
- Edge Security Model (Android Wallet)
Just Listing[edit]
Deprecated, for Inspiration, Looking for Contributors[edit]
- Hardened Gentoo Port
- HardenedGentoo-Whonix-Gateway
- OneVM - Whonix ™ implementation with just a single VM (Tor runs on host)
- Installing I2P on Whonix-Gateway ™ (I2PBOX)
- JonDonym as Tor replacement (JonDoBOX)
- VPN, VPN's as a Tor replacement (VPNBOX)
- Proxy, Proxies as a Tor replacement (ProxyBOX), Transparent Proxying Method, Proxy Settings Method
- Freenet on the Whonix-Gateway ™ (FreenetBOX)
- RetroShare as Anonymizer
TODO[edit]
- https://forums.whonix.org/tag/security-todo [archive]
- https://packages.debian.org/buster/tiger [archive]
- https://packages.debian.org/buster/tiger-otheros [archive]
Whonix ™ is Supported by Evolution Host DDoS Protected VPS. Stay private and get your VPS with Bitcoin or Monero.
Search engines: YaCy | Qwant | ecosia | MetaGer | peekier
Join us in testing our new AppArmor profiles [archive] for improved security! (forum discussion [archive])
This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to Conditions for Contributions to Whonix ™, then Edit! Edits are held for moderation. Policy of Whonix Website and Whonix Chat applies.
Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP. Whonix ™ is a trademark. Whonix ™ is a licensee [archive] of the Open Invention Network [archive]. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Freedom Software license as Whonix ™ itself. (Why?)
Whonix ™ is a derivative of and not affiliated with Debian [archive]. Debian is a registered trademark [archive] owned by Software in the Public Interest, Inc [archive].
Whonix ™ is produced independently from the Tor® [archive] anonymity software and carries no guarantee from The Tor Project [archive] about quality, suitability or anything else.
By using our website, you acknowledge that you have read, understood and agreed to our Privacy Policy, Cookie Policy, Terms of Service, and E-Sign Consent. Whonix ™ is provided by ENCRYPTED SUPPORT LP. See Imprint, Contact.