How-to: Use Wickr Me in Whonix
Using Wickr Me in Whonix over the Tor anonymity network.
Introduction[edit]
Wickr Me can be installed in Debian and provides various functionality in addition to end-to-end encrypted messaging: [1]
With Wickr Me, you can instantly connect with your friends 1:1 or in groups - now with fully encrypted voice calling, voice memos - new additions to the trusted end-to-end secure sharing of files, images, and videos. Take full control over who has access to your content and how long it remains accessible.
The application touts various privacy and security benefits, including: [1]
- no access to messages or contact lists
- users' address books remain private and not stored on Wickr servers
- each message being encrypted with a new key
- no phone number or email address registration required
- nil storage of meta-data
- communication in private groups of up to 10 users
- partial open source code [2]
- an expiration time can be set on messaging content
- incorporation of perfect forward and backward secrecy for user content
To learn more, refer to the parent website.
Warning[edit]
If proceeding despite the risk, it is recommended to use a separate Whonix-Workstation™ for greater safety.
Installation[edit]
Overview[edit]
Choose an installation source. You can install either:
- A) From wick.com, or
- B) From Snap.
From wickr.com[edit]
Undocumented. Unspecific to Whonix.
Probably better than installing from snap.
From Snap[edit]
Notes[edit]
Currently, attempting to install Wickr Me over snap over Tor will result in an error because Wickr developers instructed snap store to block downloads over Tor. This is also called geo-blocking. (forum discussion) To circumvent this, the only option is to install Wickr Me using snap
using a mechanism called sideloading
, in short snap sideloading.
Workarounds:
- A) Download snap without (!) Tor method: With high anonymity risks is to download the snap package must be without Tor, then manually transferred into Whonix-Workstation and installed there. Or, alternatively
- B) Post-Tor Tunnel-link method: A Post-Tor Tunnel-link should allow installation from within Whonix-Workstation. To learn more about tunnels, see Tunnels/Introduction.
Both workarounds are awful and it would be much better if the user found an alternative to Wickr Me.
Instructions[edit]
Note: The following instructions must be run in another Debian installation (Kicksecure, Debian, separate physical machine, etc) (anonymity risks) or while having set up a Post-Tor Tunnel-link. (User
→ Tor
→ proxy/VPN/SSH
→ Internet
)
1. Open a terminal.
If you are using Qubes-Whonix™, complete the following steps.
Qubes App Launcher (blue/grey "Q")
→ Whonix-Workstation™ App Qube (commonly named anon-whonix)
→ Xfce Terminal
If you are using a graphical Whonix with Xfce, run.
Start Menu
→ Xfce Terminal
2. Install dependencies.
Install package(s) snapd
. Follow steps A to E.
A Platform specific notice.
- Non-Qubes-Whonix: No special notice.
- Qubes-Whonix: In Template.
B Update the package lists and upgrade the system .
sudo apt update && sudo apt full-upgrade
C Install the snapd
package(s).
Using apt
command line
--no-install-recommends
option
is in most cases optional.
sudo apt install --no-install-recommends snapd
D Platform specific notice.
- Non-Qubes-Whonix: No special notice.
- Qubes-Whonix: Shut down Template and restart App Qubes based on it as per Qubes Template Modification .
E Done.
The procedure of installing package(s) snapd
is complete.
3. Download wickrme package:
snap download wickrme
4. View the downloaded file names.
Such as with a file manager of your choice or use the ls
command.
ls
Expected output will include similar file names to the following:
wickrme*.assert wickrme*.snap
5. Copy the downloaded files to your Whonix-Workstation using your preferred file transfer method.
Inside your Whonix-Workstation:
1. Open a terminal.
If you are using Qubes-Whonix™, complete the following steps.
Qubes App Launcher (blue/grey "Q")
→ Whonix-Workstation™ App Qube (commonly named anon-whonix)
→ Xfce Terminal
If you are using a graphical Whonix with Xfce, run.
Start Menu
→ Xfce Terminal
2. Install dependencies.
Install package(s) snapd
. Follow steps A to E.
A Platform specific notice.
- Non-Qubes-Whonix: No special notice.
- Qubes-Whonix: In Template.
B Update the package lists and upgrade the system .
sudo apt update && sudo apt full-upgrade
C Install the snapd
package(s).
Using apt
command line
--no-install-recommends
option
is in most cases optional.
sudo apt install --no-install-recommends snapd
D Platform specific notice.
- Non-Qubes-Whonix: No special notice.
- Qubes-Whonix: Shut down Template and restart App Qubes based on it as per Qubes Template Modification .
E Done.
The procedure of installing package(s) snapd
is complete.
3. Navigate to where you transferred your files.
Might be easiest to transfer the files to your home folder.
4. Install Wickr Me.
sudo snap ack wickrme*.assert
sudo snap install wickrme*.snap
Start Wickr Me[edit]
You launch Wickr Me from the application launcher (under Internet or by searching).
To launch Wickr Me from the commandline, run:
wickrme
If you haven't rebooted since installing snap, wickrme might not be in your PATH. You can reboot now or run:
/snap/bin/wickrme
Figure: Wicker Me in Whonix
Troubleshooting[edit]
snap[edit]
error: snap "wickrme" not found[edit]
As a workaround, try to install any other snap package first.
snap install vlc
Then try to install Wickr Me again. [6]
read: connection refused[edit]
The following error occasionally appears when trying to install Wickr Me (snap install wickrme
): [7]
error: cannot install "wickrme": Post https://api.snapcraft.io/v2/snaps/refresh: dial tcp: lookup api.snapcraft.io on [::1]:53: read udp [::1]:60220->[::1]:53: read: connection refused
It is suspected the server sometimes bans certain Tor relays from connecting. Try changing the Tor circuit, then repeat the command.
realpath: No such file or directory[edit]
Sometimes running:
wickrme
Results in the terminal displaying this message:
realpath: '': No such file or directory realpath: '': No such file or directory realpath: '': No such file or directory realpath: '': No such file or directory Could not create NETLINK socket: Operation not permitted (1) Failed to initialize udev, possibly due to an invalid system configuration. Various device-related browser features may be broken.
With Wickr Me still starting and showing an error during sign in that it could not connect to the Wickr Me Network (attempting to reconnect). This might be caused during the original installation of Wickr Me through snap install wickrme
. Try reinstalling Wickr Me with the --devmode
flag enabled and it should fix the issue. To do that, follow the steps below.
1. Remove Wickr Me.
snap remove wickrme
The command needs to be run twice. The first run will disable the "wickrme" package, while the second invocation will remove "wickrme".
snap remove wickrme
2. Verify Wickr Me is no longer installed.
Run.
snap list
It should no longer show wickrme.
3. Reinstall Wicker Me.
Use the following command.
snap install --devmode wickrme
4. Relaunch Wicker Me.
Start "wickrme" again.
wickrme
Forum Discussion[edit]
Footnotes[edit]
- ↑ 1.0 1.1 https://snapcraft.io/wickrme
- ↑ The encryption protocol
Wickr-Crypto-C
source code is available on GitHub. - ↑
For better security and stability,
wickr.com
could provide Debian downloads, or better yet an apt repository for Debian. - ↑ https://forums.whonix.org/t/snap-store-snaps-snapcraft-io-a-new-software-source/7631
- ↑ By comparison, the Signal protocol, client application and server are fully open source.
- ↑
A bug report was drafted, but could not be submitted to https://bugs.launchpad.net/snapcraft because of the following error:
Timeout error Sorry, something just went wrong in Launchpad. We’ve recorded what happened, and we’ll fix it as soon as possible. Apologies for the inconvenience. Trying again in a couple of minutes might work.
snap install wickrme reports 'snap "wickrme" not found' even though 'snap find wickrme' had found it
Actual Result: Debian buster based. sudo apt update sudo apt install snapd snap find wickrme Name Version Publisher Notes Summary wickrme 5.48.9 tleavy - E2E Encrypted Anonymous Messaging snap install wickrme error: snap "wickrme" not found Expected result: wickrme gets installed or shows a better error message than 'snap "wickrme" not found' if not available for this system. System information: lsb_release -a No LSB modules are available. Distributor ID: Debian Description: Debian GNU/Linux 10 (buster) Release: 10 Codename: buster dpkg --print-architecture amd64 uname -a Linux host 4.19.94-1.pvops.qubes.x86_64 #1 SMP Sun Jan 12 05:45:26 UTC 2020 x86_64 GNU/Linux
- ↑ https://forums.whonix.org/t/wickr-problem-help/7552
We believe security software like Whonix needs to remain open source and independent. Would you help sustain and grow the project? Learn more about our 12 year success story and maybe DONATE!