Dev/homepage
From Whonix
< Dev
TODO[edit]
- header hardcode
- footer style
- fix feature list 3 into 2 into 1 columns
- code cleanup
Need[edit]
- confirm using google fonts is ok
- not ok
- Footer style
- Header style
- Big image for spotlight feature? "Enforces tor network connections, with full operating system virtualization". Replaces current duckduckgo image
Archive[edit]
- Gray scale freedom of press logo. As per https://stackoverflow.com/questions/609273/convert-an-image-to-grayscale-in-html-css [archive] ?
- The one small red square actually looks good.
- lower size of duckduck go browser image (it currently is out of proportion, way bigger than all other images)
- Both the tbb screenshot section and the "impossible to leak" are [large text | large image] image sections that highlight the biggest reasons to use whonix.
- I realized "uses tbb" isn't a special feature, and I combined the two into "All activity takes place inside a virtual machine, all internet traffic is routed through Tor". Will need better text and image
- The "Advanced Security Features" section could be similar to the "Fully Featured" section. Also using medium images.
- At this point we'd be making "one big list of features" that our inspiration websites don't do. (One long list is boring and everything is treated as one thing in a long list.
- The advanced security features tend to be more nerd stuff directed at an audience that doesn't need an image if isn't required, and easily ignored (but appreciated) by the nontechnical
Inspiration[edit]
- https://elementary.io [archive] [BEST]
- https://pureos.net [archive]
- https://www.qubes-os.org [archive]
- https://onionshare.org [archive]
- from anbox website, nice: https://i.imgur.com/EkQEXx8.png [archive]
Contents[edit]
- Anonymize Everything You Do Online
- The Experts Trust Whonix ™
- Edward Snowden, whistleblower and privacy advocate
- avatar: https:// www.whonix.org/w/images/2/20/Expert-edward-snowden.jpg
- quote:
Tor & Whonix are integrated into Qubes.
- https://twitter.com/snowden/status/781495273726025728 [archive]
- https://twitter.com/Snowden/status/1175435436501667840 [archive]
- Micah Lee, Journalist and Security Engineer at The Intercept, Advocate for Freedom of the Press, Developer of OnionShare and Tor Browser Launcher. [archive]
- avatar: https:// www.whonix.org/w/images/f/fb/Expert-micah-lee-ConvertImage.jpg
Whonix is great because you can be confident that everything you do in the workstation VM is anonymously going through the Tor network. That means that hackers won’t be able to deanonymize you, unless they can escape from your VM.
- Qubes OS [archive]
With Whonix integrated into Qubes, using the Internet anonymously over the Tor network is safe and easy.
- avatar: https:// www.whonix.org/w/images/9/94/Qubes-logo-blue.png
- The Tor Project [archive]
Whonix is a privacy ecosystem that utilizes compartmentalization to provide a private, leak-resistant environment for many desktop computing activities. Whonix helps users use their favorite desktop applications anonymously.
- https:// www.whonix.org/w/images/0/07/Iconfinder_tor_386502_gray.svg
- Freedom of the Press Foundation
- https://freedom.press [archive]
SecureDrop Journalist Workstation environment for submission handling is based on Qubes-Whonix
- https://github.com/freedomofpress/securedrop-workstation [archive]
- avatar: https:// www.whonix.org/w/images/6/63/Freedom_of_press.png
- Edward Snowden, whistleblower and privacy advocate
media mentions
- WIRED
- https://www.wired.com/2014/06/be-anonymous-online/ [archive]
For the even more paranoid, there is a lesser-known Tor-enabled OS called Whonix.
- https:// www.whonix.org/w/images/1/13/Wired-magazine-logo.png
- The Guardian
- https://www.theguardian.com/technology/2015/mar/06/tips-tricks-anonymous-privacy [archive]
Whonix is about as anonymous as an OS can get before it all becomes too inconvenient for normal use.
- https:// www.whonix.org/w/images/7/75/The_Guardian_2018.svg
- The Intercept
- https://theintercept.com/2015/09/16/getting-hacked-doesnt-bad/ [archive]
... Whonix, an operating system you can run in a virtual machine to maximize your online anonymity; it’s ideal for maintaining a secret identity.
- https:// www.whonix.org/w/images/1/14/The_Intercept_logo.svg
- TechRepublic
Whonix adds a layer of anonymity to your business tasks
- https://www.techrepublic.com/blog/smb-technologist/whonix-adds-a-layer-of-anonymity-to-your-business-tasks/ [archive]
- https:// www.whonix.org/w/images/5/52/TechRepublic-ConvertImage.png
- History
An eight year history of protecting our users against Real World Attacks.
- https:// www.whonix.org/w/images/a/a3/Jon-tyson-FlHdnPO6dlw-unsplash.jpg
- Fully-featured operating system
With so many completely free software applications available, we know there is something for everyone, including popular software applications from categories like internet, sound, and video, graphics, office, programming, education and games. Since Whonix ™ is based on Debian, thousands of software packages are available.
- The section on https://elementary.io [archive] with headline
looks good.Apps You Need, Without Ones You Don’t.
- https://i.imgur.com/GBDS3Hf.png [archive]
- Also https://pureos.net/images/apps.png [archive] looks good.
elementary OS comes with a carefully considered set of apps that cater to everyday needs so you can spend more time using your computer and less time cleaning up bloatware.
Music Music Browser Epiphany Email Mail Photo Photos Video Videos Calendar Calendar File manager Files Terminal Terminal Code editor Code Camera Camera
- Can we do something similar to https://elementary.io [archive] headline
Apps You Need, Without Ones You Don’t.
?
- The section on https://elementary.io [archive] with headline
- Default installed lightweight applications come preconfigured for anonymity, privacy and security
- Tor Browser - https:// www.whonix.org/w/images/3/3a/Torbrowser_icon.png
- crypto currencies
- bitcoin logo - https:// www.whonix.org/w/images/2/29/BC_Logo_.png
- electrum logo - https:// www.whonix.org/w/images/6/63/Electrum-appimage.png
- monero logo - https:// www.whonix.org/w/images/0/05/Monero-symbol-1280.png
- Thunderbird - https:// www.whonix.org/w/images/b/b1/Thunderbird256.png
- OnionShare - https:// www.whonix.org/w/images/d/de/Onionshare_logo.png
- HexChat - https:// www.whonix.org/w/images/7/7b/Hexchaticon.png
- Thunar - https:// www.whonix.org/w/images/5/51/2000px-Thunar.svg.png
- VLC - https:// www.whonix.org/w/images/c/cd/2000px-VLC_Icon.svg.png
- KeePassXC - https:// www.whonix.org/w/images/5/51/KeePassXC.png
- xfce4-terminal - https:// www.whonix.org/w/images/c/c2/Utilities-terminal.png
- discussion: 11 so far. elementary OS has 10. Should be enough. ristretto, xarchiver and xpdf maybe not so important.
- ristretto image viewer - /usr/share/icons/hicolor/128x128/apps/ristretto.png (not looking good)
- xarchiver - /usr/share/icons/hicolor/scalable/apps/xarchiver.svg (not looking good)
- xpdf
- Complete user freedom
In simple terms, Whonix is just a collection of configuration files and scripts. Whonix ™ is not a stripped down version of Debian; anything possible in "vanilla" Debian GNU/Linux can be replicated in Whonix ™. Likewise, most problems and questions can be solved in the same way. For example: "How do I install VLC Media Player on Whonix ™?" -- "The same way as in Debian
apt-get install vlc
. Whonix ™ does not break anything, limit functionality, or prevent installation of compatible software. Since Ubuntu is a Debian derivative, online help for Ubuntu most often works for Whonix ™.- https:// www.whonix.org/w/images/2/28/Neonbrand-lJ6iASrFAnQ-unsplash.jpg
- Anonymous browsing using Tor Browser
- screenshot Tor Browser image duckduckgo, maximized, inside full screen inside Whonix-Workstation XFCE
- https:// www.whonix.org/w/images/1/15/Tor_browser_duckduckgo2.png
- screenshot Browser image YouTube, maximized, inside full screen inside Whonix-Workstation XFCE
- https:// www.whonix.org/w/images/f/f2/Tor_browser_youtube.png
- screenshot Tor Browser image duckduckgo, maximized, inside full screen inside Whonix-Workstation XFCE
- Live mode
- screenshots of grub boot menu with live mode - Whonix Live
- https:// www.whonix.org/w/images/b/bf/Live_boot.png
- screenshots of grub boot menu with live mode - Whonix Live
- Android support
Run Android applications using Anbox.
- icon: https:// www.whonix.org/w/images/c/c9/Android23432.png
- screenshot showing anbox including F-Droid running in Whonix-Workstation XFCE
- https:// www.whonix.org/w/images/1/1e/Anbox_apps_short.png
- Virus and malware protection
- https:// www.whonix.org/w/images/c/cf/Shield.png
- description, bits (best ones, fitting only):
Viruses are trapped inside virtual machines.
Due to compartmentalization, viruses do not have access to the whole system.
There is a lot less malware for the Linux than for the Windows platform.
The design of GNU/Linux distributions is inherently more secure against viruses.
Additional Security Hardening measures and user education through Whonix ™ provide better protection from viruses.
- Security hardening
- AppArmor profiles to restrict the capabilities of commonly used, high-risk applications.
- Full system Mandatory Access Control (MAC) [archive] policy (in development) - "AppArmor for everything" [1]
- Linux Kernel Runtime Guard (LKRG) - kernel exploit protection
- https:// www.whonix.org/w/images/a/a7/P_lkrg2.png
- TCP ISN CPU Information Leak Protection [archive] (tirdad [archive])
- https:// www.whonix.org/w/images/d/da/Text_x_patch.png
- Keystroke Anonymization [archive] (kloak [archive])
- https:// www.whonix.org/w/images/d/d6/Train-normal_test-kloak.png
- security-misc [archive]
Whonix ™ uses Kernel Hardening Settings as recommended by the Kernel Self Protection Project (KSPP).
Making extensive use of strong Linux user account isolation.
Protect Linux user accounts against brute force attacks.
Console lockdown.
Preconfiguration of preinstalled applications for better security hardening.
Better encryption thanks to preinstalled true random number generators.
- https:// www.whonix.org/w/images/1/13/Random_entropy.png
- Protected by a firewall.
- https:// www.whonix.org/w/images/9/99/Anonymous_Firewall_1.png
Based on Kicksecure ™, a security-hardened Linux distribution
- Built-in Time Attack Defenses.
Clock is set to UTC and randomized at boot. (Boot Clock Randomization).
Secure network time synchronization through sdwdate (Secure Distributed Web Date).
- https:// www.whonix.org/w/images/2/28/Clock-359985640.jpg
- Stream Isolation
Identity separation through Stream Isolation.
- https:// www.whonix.org/w/images/f/fc/Stream_isolation.1.0.jpg
- Swap file encryption.
- https:// www.whonix.org/w/images/9/91/Encrypted-156514_1280.png
swap-file-creator [archive] will create an encrypted swap file when there is too little RAM.
- Servers
Whonix ™ is the safest way to host location hidden services.
- https:// www.whonix.org/w/images/3/33/Web_server.png
- screenshot of clearscreen Whonix-Workstation CLI
- https:// www.whonix.org/w/images/a/a1/Whonix-workstation-cli1.png
- (alternatives File:whonix-workstation-cli1.png | File:whonix-workstation-cli2.png | File:whonix-workstation-cli3.png)
- Compatibility
Whonix ™ is available for all major operating systems. Most commonly used applications are compatible with the Whonix ™ design.
- virtualizers
- icons for VirtualBox, KVM, Qubes
- https:// www.whonix.org/w/images/d/d5/Virtualbox_logo.png
- https:// www.whonix.org/w/images/b/b4/Kvmbanner-logo26.png
- https:// www.whonix.org/w/images/9/94/Qubes-logo-blue.png
- icons for VirtualBox, KVM, Qubes
- operating system support:
- icons:
- https:// www.whonix.org/w/images/3/30/Debian.png
- https:// www.whonix.org/w/images/b/be/Logo-ubuntusvg.png
- https:// www.whonix.org/w/images/3/3e/Macos_by_ego.png
- https:// www.whonix.org/w/images/e/ee/Windows_logo_-_2012.svg.png
- icons:
- Fully auditable operating system
Whether you are a technology enthusiast, someone looking to protect the digital life of your family, or an enterprise IT/security department, you can use Whonix ™ freely for any purpose, study and share its source code, and adapt it to your needs.
Whonix ™ is a fully auditable operating system: you don’t have to trust our word that it respects and protects you. It is independently verifiable by security experts and software developers around the world.
- https:// www.whonix.org/w/images/3/3a/Bho78-4ycp0.svg
- Open source
We respect the rights of our users. All of Whonix ™ is available for review, scrutiny, modification, and redistribution by anyone. Which improves security and privacy for everyone.
- Safe and secure
We’re built on GNU/Linux, one of the most secure systems in the world. It’s the same software powering the U.S Department of Defense, the Bank of China, and more.
- Digitally signed releases
- https:// www.whonix.org/w/images/e/e4/Iconfinder_gpg_6334.png
- warrant canary
- https:// www.whonix.org/w/images/2/2c/Zdenek-machacek-OlKkCmToXEs-unsplash.jpg
- Complete respect for privacy
Your data always belongs to you, and only you. We don’t make advertising deals or collect sensitive personal data. We’re funded directly by our users paying what they want. And that’s how it should be.
- Based on Tor
Whonix ™ utilizes Tor's free software, which provides an open and distributed relay network to defend against network surveillance.
- https:// www.whonix.org/w/images/1/15/Tor-logo-2011-flat.svg
- Leak impossibility
Connections through Tor are enforced. DNS leaks are impossible, and even malware with root privileges cannot discover the user's real IP address.
- https:// www.whonix.org/w/images/d/dd/Whonix_concept_refined.jpg
- Leak tested through corridor (Tor traffic whitelisting gateway) and other leak tests.
- Extensive documentation
- https:// www.whonix.org/w/images/8/85/Documentation.jpg
- Vibrant community
- telegram
- forums
- newsletter sign up box
- use mailman for newsletter? - https://www.whonix.org/cgi-bin/mailman/listinfo/whonix-newsletter [archive]
- icons:
- https:// www.whonix.org/w/images/9/9a/1024px-Telegram_2019_Logo.svg.png
- https:// www.whonix.org/w/images/c/cf/Discourse_logo.svg
- https:// www.whonix.org/w/images/d/d3/Newsletter.jpg
- Research and Implementation Project
Be wary of those confidently calling themselves all-knowing, all-perfect. Whonix is an actively maintained research project making constant improvements -- no shortcomings are ever hidden from users.
- https:// www.whonix.org/w/images/7/7f/Cornues.png
- Social share links
- keep the already existing social share at the very bottom
- remove google plus (since deprecated by google)
- stylistic changes are OK
- Legal links
- keep the already existing legal links at the very bottom
Imprint Privacy Policy Cookie Policy Terms of Service DMCA E-Sign Consent Priority Support Professional Support Donate Investors
- stylistic changes are OK
Resize Images[edit]
3
- ↑ Including APT, systemd, init, all systemd units, and all applications.