Whonix ™ Project Activities[edit]

Innovation[edit]

Table: Whonix ™ Innovation

Category	Description
Anonymity	Thinking hard about obscure attacks on anonymity such as clock correlation deanonymization attacks and developing countermeasures; see TimeSync. Adding support for multiple anonymity networks to cater to different user bases.
Invent mechanisms for rapid Debian packaging	genmkfile - easy and turbo packaging of scripts and configuration files. Demonstrating how to write hassle free man pages. For example, the following methodology is used for all related Whonix ™ packages. Written in markdown. Just three lines of packaging is required. https://github.com/Whonix/tor-ctrl/blob/master/man/tor-ctrl.8.ronn https://github.com/Whonix/tor-ctrl/blob/a12d73ed01068baf32db067811c208034ced87fd/debian/control#L9 https://github.com/Whonix/tor-ctrl/blob/1c326b232b1f328a6542ae51f3f3afa3e1e44a55/debian/rules#L17-L18
Holistic focus	Focusing on the anonymity and privacy field, without getting into unimportant details. Understanding issues regular users are experiencing and creating a better user experience.
Develop concepts	Emergency Security News Notification Permanent Takedown Attack Defender, proposal to defend against a permanent takedown threat apt-revoker Check for Revocation Certificates before running `apt` Package manager update security on/off switch And much more.
Miscellaneous	Maintaining a general interest in security matters, scrutinizing solutions, and connecting people. ^[1]

Cooperation[edit]

Table: Whonix ™ Cooperation

Category	Description
Issue/bug reports	Reporting issues or bugs at other projects, such as: Qubes VirtualBox
The Tor Project	Successfully communicate issues in the Tor ecosystem and do so whenever we find something. Some suggestions have been implemented and others accepted: https://trac.torproject.org/projects/tor/query?reporter=proper&col=id&col=summary&col=status&col=type&col=priority&col=milestone&col=component&order=priority https://trac.torproject.org/projects/tor/query?reporter=adrelanos&col=id&col=summary&col=type&col=status&col=priority&col=milestone&col=component&order=priority Reporting any security/privacy/anonymity issues discovered, including some which could lead to deanonymization. Please press on expand on the right for a list of references. do something about TLS HELLO gmt_unix_time get independent from host clock time / insecure NTP use Valid-Until field to prevent downgrade attacks for deb.torproject.org use sha256 or sha512 instead of sha1 for deb.torproject.org deactivate Check for new messages on startup deactive submit performance data deactivate Check for new messages every 10 minutes enable connection security by default Remove "This Plugin is Disabled" click-through set plugin.expose_full_path to false Adapt Tor installer to allow users to avoid connecting to the public tor network Add warning related to Identity correlation through circuit sharing spoof history.length - browser.sessionhistory.max_entries Linux TCP Initial Sequence Numbers may aid correlation
Other collaborative efforts/contributions	kloak - Keystroke Anonymization Tool ^[2] https://secure-os.org/pipermail/desktops/ zuluCrypt ^[3]
Developer community	Coordination of an active developer community, see: Whonix ™ contributors. Whonix ™ contributions: founder adrelanos developer troubadour developer madaidan former developer 0brand developer HulaHoop developer Jason Ayala developer Algernon developer Sirus Shahini incomplete list
Miscellaneous	Flexible packaging to allow cherry-picking of functionality by privacy and non-privacy distributions alike: https://github.com/Whonix/anon-meta-packages/blob/master/debian/control Providing all Whonix ™ improvements to Debian as reusable (by others) packages split by functionality: https://github.com/Whonix Use many packages developed by Whonix ™ with Debian too. Timely review and merging of contributions.

Mentoring[edit]

Education[edit]

Whonix ™ undertakes a broad range of educational activities, including:

Extensive Documentation covering technical aspects and operational security.
- Security and anonymity matters are documented in detail, including unique material not covered elsewhere. ^[4]
- Technical documentation is also provided, for example: Configuration Files.
Whonix ™ answers are seldom disputed; for example see answers by Patrick Schleizer on Tor Stack Exchange.
Operating a responsive forum, providing user support for the community.
Debian derivative development documentation, for example: About Debian Packaging

Maintenance[edit]

Whonix ™ maintenance activities are wide in scope and include:

Following developments in anonymity, security and privacy and formulating solutions. For example this apt bug led to the posting of a news item and instructions to safely resolve the matter.
Maintaining various components.
Ongoing development:
- Refer to this subset list of Whonix ™ git commits; and
- ~ 85 Whonix ™ source code repositories.
Keeping the whonix.org server safe and up-to-date with various webapps (website, wiki, forums and issue tracker).
Testing new packages.
Calling for testers, then reviewing and processing feedback from testers.
Creating downloadable Whonix ™ builds.
Keeping the community informed about recent developments at Whonix.
Porting to the next stable version of Debian. ^[5]

TODO expand

Research[edit]

See Research.

Footnotes[edit]

Whonix ™ The most watertight privacy operating system in the world.

Donate

FREE · PLUS · PREMIUM Support

At Whonix we believe in freedom and trust. That's why we fully support Open Source and Freedom Software. Learn more.

Whonix ™ is supported by Evolution Host DDoS Protected VPS.

Whonix ™ is the most watertight privacy operating system in the world.

The personal opinions of moderators or contributors to the Whonix ™ project do not represent the project as a whole. By using this website, you acknowledge you have read, understood, and agree to be bound by these these agreements: Terms of Service , Privacy Policy , Cookie Policy , E-Sign Consent , DMCA , Imprint Whonix

ENCRYPTED SUPPORT LP, 2022

Hardened by Kicksecure ™

[1] ttps://forums.whonix.org/t/jitterentropy-rngd/7204

[2] 
https://github.com/vmonaco/kloak/pull/5

https://github.com/vmonaco/kloak/issues/10

https://github.com/vmonaco/kloak/issues?utf8=%E2%9C%93&q=is%3Aissue+author%3Aadrelanos+

https://github.com/vmonaco/kloak/pulls?utf8=%E2%9C%93&q=is%3Apr+author%3Aadrelanos+

[3] ttps://github.com/vmonaco/kloak/pull/5

[4] ttps://github.com/vmonaco/kloak/issues/10

[5] ttps://github.com/vmonaco/kloak/issues?utf8=%E2%9C%93&q=is%3Aissue+author%3Aadrelanos+

[6] ttps://github.com/vmonaco/kloak/pulls?utf8=%E2%9C%93&q=is%3Apr+author%3Aadrelanos+

[3] 
https://github.com/mhogomchungu/zuluCrypt/issues/114

https://github.com/mhogomchungu/zuluCrypt/issues/115

[8] ttps://github.com/mhogomchungu/zuluCrypt/issues/114

[9] ttps://github.com/mhogomchungu/zuluCrypt/issues/115

[4] For example, the Tips on Remaining Anonymous page outlines that non-anonymous activity in one browser and simultaneous anonymous activity in another browser can lead to deanonymization.

[5] ttps://forums.whonix.org/t/port-whonix-from-debian-stretch-to-debian-buster/7101

[1]

[2]

[3]

[4]

[5]

Whonix ™ Project Activities: Innovation, Cooperation and Education

Contents