Design

Download Docs News Forums

Tools Upload file Special pages Recent changes Print Version Page meta What links here Related changes Page information

Page Read Edit History Move Protection Unwatch Watch Delete Purge

User Preferences Watchlist Contributions Logout Create account Login

Donate

Technical Design and Conception of the Whonix ™ Anonymous Operating System.

Technical Design

• Dev/Technical Introduction, Whonix ™ Framework, Security Overview
  • Does Whonix ™ / Tor Provide Protection from Advanced Adversaries?
  • Is there a Whonix ™ Amnesic Feature / Live CD / Live DVD? What about Forensics?
• Comparison of Whonix ™, Tails, Tor Browser, TorVM and corridor
• Comparison of different Whonix ™ variants
• Comparison Of Tor Proxies CGI proxies Proxy Chains And VPN Services
• Protocol-Leak-Protection and Fingerprinting-Protection
• Time Synchronization Mechanism
• Stream Isolation
• systemcheck
• SSL
• LeakTests to check everything is properly set up
• Anonymity Network
• Dev/About Computer (In)Security
• Dev/Threat Model
• Dev/Operating System, Debian, Ubuntu, ...
• Dev/Virtualization Platform
  • VirtualBox
  • KVM
  • Qubes
• Whonix-Gateway ™ / Graphical Whonix-Gateway ™ benefits over Headless Whonix-Gateway ™
• Dev/Host
• Whonix-Host
• Fingerprint
• Dev/Entropy
• Whonix ™ Security in Real World
• Security Reviews and Feedback, Press, Media
• (encrypted) (authenticated) Connection Between Whonix-Gateway ™ and Whonix-Workstation ™
• Dev/Build Anonymity
• Dev/Expected Build Warnings
• Relationship With Upstream
• About Infrastructure
• Trusting Whonix ™
• Verified Boot (Secure Boot)
• Verifiable Builds (as in reproducible, but not exactly reproducible)
• Factory Reset, Stateless Systems, Reproducible Systems, Verifiable Systems, Clear Linux, NixOS, Fedora Silverblue
• NEXT: In development for next Whonix ™ version
• onion-grater (Control Port Filter Proxy)
• Automatic Updates (APT) - to Use or Not Use Them
• Package Manager Graphical
• One Click Update Script - Simplified, Assisted Updates
• Dummy Tor package on Whonix-Workstation ™ (anon-ws-disable-stacked-tor)
• About Debian Packaging
  • Recommends: vs Depends (--no-install-recommends)
  • ought to avoid writing into linux user /home folder
  • Files in /etc/skel
  • Modifying Default Configuration of Third Party Packages
• Criteria for installing applications by default in Whonix ™, Default Application Policy, package sources, software sources, Debian software package repository packages.debian.org, deb.debian.org, deb.torproject.org, software from non-APT repository software sources (Tor Browser)
• Tor Config Files torrc / Why Waste Network Bandwidth by Downloading Operating System Updates over Tor?
• Dev/setup-dist
• Disclaimer in setup-dist - Background of it
• anon-ws-disable-stacked-tor, prevents Tor over Tor
• Versioning Format Conventions for packages developed under the Whonix ™ hat
• Comparison Of Package Managers
• Advanced Deanonymization Attacks, Covert Channels
• Dev/Advanced Deanonymization Attacks, Covert Channels
• Stable Version User Experience
• Coding Style
• Latency Obfuscator
• RAM Wipe, cryptsetup suspend
• non-freedom, proprietary, closed source firmware, CPU microcode and drivers

Detailed Design

• Dev/Project_Networking

Future Technical Design

• Permanent Takedown Attack Defender, proposal to defend a permanent takedown threat
• Project / Emergency News
• controversy of anonymous MAC addresses
• apt revoker
• vanguards notification graphical user interface (GUI)
• Dev/remount-secure - Secure Mount Options
• Whonix Cloud considerations

General Developer Pages

• Documentation Guidelines
• Documentation Markup Format Converters
• Developer Portal
• Dev/Archived Discussions, development discussions, old and recent, bugs, features, etc.
• Git branches
• APT Repository (Whonix ™ Debian Package Maintenance) (.deb), reprepro
• Some random thoughts about a future GNOME desktop, GNOME proxy
• Introduction into the Whonix ™ build method and source code
• Whonix ™ News File Format
• SSL certificate pinning
• development discussion if JonDo(Fox) could be pre-installed in Whonix-Workstation ™
• Whonix ™ Host operating system or even VM operating system - development discussion
• Network Manager (NM) in Whonix ™ instead of ifupdown - development discussion
• Dev/Other Virtualization Platforms
• Continuous Integration (CI)
• Consideration running a DHCP server on Whonix-Gateway ™ and running a DHCP client in Whonix-Workstation ™
• Dev/Permissions
• Hosting a Whonix ™ Mirror
• Why we should avoid APT Pinning / preferences / backports by default
• Comparing Password Managers, finding out best choice as default installed one
• Dev/Porting
  • Architecture Specific, Compiled, Third Party, "special" Packages / Kernel Modules / Shared Objects
• Dev/Logo
• The Tor Project (TPO) Trademark
• 32bit vs 64bit - How effort would multiply when 64bit images (same for other desktop environments such as Gnome)
• Firefox Add-On, debugging, "live" edits
• tor-launcher add-on screenshots
• whonix.org backup script, to make a backup of most whonix.org content
• Firewall Unloading / flush iptables
• Dev/Qubes
• Qubes Split GPG
• Firewall Refactoring
• Dev/Test - How to "UnWhonix" - Instructions on how to remove Whonix ™ Tor default networking for Whonix-Gateway ™. After applying these instructions, Whonix-Gateway ™ will connect to clearnet.
• Firejail
• grsecurity
• Whonix ™-Linux-Installer
• Whonix ™-Windows-Installer
• Dev/Whonix ™-Windows-User-Interface
• Whonix ™ Windows Installer - Testers Only Version
• Whonix ™ Cooperation with Researchers
• Host Keys in various Virtualizers / special keys
• Gajim - TODO for installing Gajim by default in Whonix ™
• Ledger Hardware Wallet Development Notes
• AEM - anti evil maid
• Boot Clock Randomization
• Boot Modes
• Dev/mobile
• Dev/yubikey
• Non Anonymous NAT Traversal
• Whonix ™ friendly applications best practices
• Dev/Licensing
• Tor Browser without Tor
• VirusForget - deactivate malware after reboot from non-root compromise
• bash proper whitespace handling
• wallpaper
• certification / audit
  • Dev/STIG
  • OpenSCAP
  • lynis
  • harbian-audit - Hardened Debian GNU/Linux distro auditing
• Windows 10 Issues collection
  • https://forums.whonix.org/t/gateway-startup-error-not-syncing-no-working-init-found/9481/11
• Polls Collections (Surveys)
• Automated Tests
• Warrant Canary Draft
• Dev/Astra Linux
• Dev/Torified Wi-Fi Hotspot (WiFi)
• Xfce Desktop Environment Notes, xfconfd, desktop background image, configuration files

Website Developer Pages

• website and wiki HTML / CSS improvements
• Issue, Bug, Feature Request Tracker, phabricator
• mediawiki CSS
• Whonix ™.org Site Security
• OpenPGP Signed Website
• Hompage of Whonix ™, Experiments with Browser Load Speed and Content
• Web Backend, CMS vs non-CMS, vs github-pages, etc.
• mediawiki, codeselect, select code, short / long / recommended / detailed buttons
• Advertisements, Guidelines for Advertising on whonix.org, Affiliate Policy
• web.archive.org snapshot using command line interface (CLI)
• Privacy Policy Technical Details of the Whonix ™ Website

Download / Installation - Developer Pages

• Download Security
• Statistics on Downloads and OpenPGP verification and how we can improve that
• Dev/Download Wizard
• Software Verification (OpenPGP / gpg) Usability Issues / Secure Downloader to Download Whonix ™ Images
• Installation from Whonix ™ repository - "sudo apt install whonix"
• VM image download from repository - "sudo apt install whonix-gateway-ova"

Other Related

• Documentation
• whonix-devel mailing list archive
• Build Documentation, How to build Whonix ™ from Source Code, How to update Whonix ™ from Source Code
• Whonix ™ Source Code
• Whonix ™ Developer Meta Files, Scripts for managing the Whonix ™ GNU/Linux Distribution
• Maintenance, The Tor Project (TPO) apt repository package mirroring to whonix.org repository, Tor Browser hardcoded version file
• Redistribution Pre Building (Only required if you want to redistribute (official) Whonix ™ release builds.)
• Redistribution Post Building (Only required if you want to redistribute (official) Whonix ™ release builds.)
• Essential Whonix ™ Functionality Tests
• Whonix² Project Vision
• Project Philosophy

Other Unrelated

• Documentation pages forked from the Tails project
• Citation, backup of website content license grants
• Edge Security Model (Android Wallet)

Just Listing

• GPLv3

Deprecated

• OneVM - Whonix ™ implementation with just a single VM (Tor runs on host)
• Installing I2P on Whonix-Gateway ™ (I2PBOX)
• JonDonym as Tor replacement (JonDoBOX)
• VPN, VPN's as a Tor replacement (VPNBOX)
• Proxy, Proxies as a Tor replacement (ProxyBOX), Transparent Proxying Method, Proxy Settings Method / ProxyBOX
• Freenet on the Whonix-Gateway ™ (FreenetBOX)
• RetroShare as Anonymizer
• Dev/Zerobox (ZeroNet)

TODO

• https://forums.whonix.org/search?expanded=true&q=%23status_open_issue_todo%20%23component_security
• https://packages.debian.org/bullseye/tiger
• https://packages.debian.org/bullseye/tiger-otheros

Whonix ™ The most watertight privacy operating system in the world.

Donate

Follow us on social media

FREE  ·  PLUS  ·  PREMIUM Support

Dark mode

At Whonix we believe in freedom and trust. That's why we fully support Open Source and Freedom Software.

Whonix ™ is supported by Evolution Host DDoS Protected VPS.

The personal opinions of moderators or contributors to the Whonix ™ project do not represent the project as a whole. By using this website, you acknowledge you have read, understood, and agree to be bound by these these agreements: Terms of Service , Privacy Policy , Cookie Policy , E-Sign Consent , DMCA , Imprint Whonix ENCRYPTED SUPPORT LP, 2023

Donate

Whonix is free from corporate interest by being user funded. Thank you so much!

Scan the QR code or use the wallet address below.

 

Your support makes
all the difference!

We believe security software like Whonix needs to remain open source and independent. Would you help sustain and grow the project? Learn more about our 10 year success story and maybe DONATE!