Whonix wiki https://www.whonix.org/wiki/About MediaWiki 1.44.3 first-letter Media Special Talk User User talk Whonix Whonix talk File File talk MediaWiki MediaWiki talk Template Template talk Help Help talk Category Category talk Widget Widget talk Moved Module Module talk 8 3 7 2013-06-18T18:44:57Z Patrick 2 Created page with " * users ** homepage|homepage ** News|News ** Screenshots|Screenshots ** Videos ** Download ** Documentation ** About ** Features ** Security Guide ** FAQ ** Forum ** Contact ..." 7 wikitext text/x-wiki * users ** homepage|homepage ** News|News ** Screenshots|Screenshots ** Videos ** Download ** Documentation ** About ** Features ** Security Guide ** FAQ ** Forum ** Contact * Frequently Asked Features ** Bridges Support ** VPN/Tunnel Support ** Location/IP Hidden Servers ** Windows Support ** Flash Support ** You Can Help * Developers ** Contribiute ** Techical Design ** Source Code / Hacking / Development Tickets ** Changelog ** Authorship ** Disclaimer * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES gjuyztx7q99mibud1hj8f9ke5i80jb1 8 7 2013-06-18T18:49:06Z Patrick 2 8 wikitext text/x-wiki * users ** Homepage|Homepage ** News|News ** Screenshots|Screenshots ** Videos|Videos ** Download|Download ** Documentation|Documentation ** About|About ** Features|Features ** Security Guide|Security Guide ** FAQ|FAQ ** Forum|Forum ** You Can Help|Contribute ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges Support|Bridges ** VPN/Tunnel Support|Features/#vpn-tunnel-support ** Location/IP Hidden Servers|HostingLocationHiddenServices ** Windows Support|OtherOperatingSystems ** Flash Support|BrowserPlugins * Developers ** Contribute|Contribute ** Techical Design|Design ** Source Code / Hacking / Development Tickets|Dev/SourceCode ** Changelog|Dev/Changelog ** Authorship|Dev/Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES t7di4w9vufzw3wp0fsxh5wop2k9967y 9 8 2013-06-18T18:51:05Z Patrick 2 9 wikitext text/x-wiki * users ** Homepage|Homepage ** News|News ** Screenshots|Screenshots ** Videos|Videos ** Download|Download ** Documentation|Documentation ** About|About ** Features|Features ** SecurityGuide|Security Guide ** FAQ|FAQ ** Forum|Forum ** Contribute|You Can Help ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features/#vpn-tunnel-support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Developers ** Contribute|Contribute ** Design|Technical Design ** Dev/SourceCode|Source Code / Hacking / Development Tickets ** Dev/Changelog|Changelog| ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES q2jdztewljoh41sslvpokasmmyi8q23 10 9 2013-06-18T18:51:48Z Patrick 2 10 wikitext text/x-wiki * users ** Homepage|Homepage ** News|News ** Screenshots|Screenshots ** Videos|Videos ** Download|Download ** Documentation|Documentation ** About|About ** Features|Features ** SecurityGuide|Security Guide ** FAQ|FAQ ** Forum|Forum ** Contribute|You Can Help ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features/#vpn-tunnel-support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Developers ** Contribute|Contribute ** Design|Technical Design ** Dev/SourceCode|Source Code / Hacking / Development Tickets ** Dev/Changelog|Changelog| ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES 36iu5s72rkumu4i4atv1ndhw0hvu4bt 11 10 2013-06-18T18:53:35Z Patrick 2 11 wikitext text/x-wiki * users ** Homepage|Homepage ** About|About ** Features|Features ** Download|Download ** Documentation|Documentation ** News|News ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** Forum|Forum ** Contribute|You Can Help ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features/#vpn-tunnel-support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Developers ** Contribute|Contribute ** Design|Technical Design ** Dev/SourceCode|Source Code / Hacking / Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES 57iuaojs49zy75ea6qyjpdca2qsf0zk 12 11 2013-06-18T18:54:06Z Patrick 2 12 wikitext text/x-wiki * users ** Homepage|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** News|News ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** Forum|Forum ** Contribute|You Can Help ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features/#vpn-tunnel-support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Developers ** Contribute|Contribute ** Design|Technical Design ** Dev/SourceCode|Source Code / Hacking / Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES bqczdfrw93zqooelizqa2rv0sj8b4ca 13 12 2013-06-18T18:56:21Z Patrick 2 13 wikitext text/x-wiki * users ** Homepage|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** News|News ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** Forum|Forum ** Contribute|You Can Help ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features/#vpn-tunnel-support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Developers ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** x|Hacking ** x|Developer Portal ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES 5nlo0e3mpye4chwmpbqtar5el4hwdr6 14 13 2013-06-18T18:58:15Z Patrick 2 14 wikitext text/x-wiki * users ** Homepage|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** News|News ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** Forum|Forum ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features/#vpn-tunnel-support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Developers ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** x|Hacking ** x|Developer Portal ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES g0alir6cofe0uqu6k94lbk0ycuiti4u 78 14 2013-06-27T16:26:29Z Fortasse 1 78 wikitext text/x-wiki * users ** Homepage|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** News|News ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** http://sourceforge.net/p/whonix/discussion|Forum ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features/#vpn-tunnel-support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Developers ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** x|Hacking ** x|Developer Portal ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES 3cighrbqrafkeaiuz5xiyxwnzn7nf4z 81 78 2013-06-27T16:31:40Z Fortasse 1 81 wikitext text/x-wiki * users ** Homepage|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** News|News ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** http://sourceforge.net/p/whonix/discussion|Forum ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#vpn-tunnel-support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Developers ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** x|Hacking ** x|Developer Portal ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES kssqvxak36nofpxald8z13s39cb2squ 82 81 2013-06-27T16:35:03Z Fortasse 1 82 wikitext text/x-wiki * users ** Homepage|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** News|News ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** http://sourceforge.net/p/whonix/discussion|Forum ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Featrues#VPN / Tunnel support |VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Developers ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** x|Hacking ** x|Developer Portal ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES a88qlk6vmr29gj9hfd24gtr092lmpl1 83 82 2013-06-27T16:35:21Z Fortasse 1 83 wikitext text/x-wiki * users ** Homepage|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** News|News ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** http://sourceforge.net/p/whonix/discussion|Forum ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support |VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Developers ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** x|Hacking ** x|Developer Portal ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES o2t6mi1ldbwc8pi7sal47chokxu0z17 167 83 2013-07-01T16:55:36Z Patrick 2 167 wikitext text/x-wiki * users ** Homepage|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** News|News ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** http://sourceforge.net/p/whonix/discussion|Forum ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Mailing List|https://whonix.org/cgi-bin/mailman/listinfo/whonix-users ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support |VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Developers ** Mailing List|https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** x|Hacking ** x|Developer Portal ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES hjnoxcnmueqzuqga1kwuo7sbgd8tolo 168 167 2013-07-01T16:56:24Z Patrick 2 168 wikitext text/x-wiki * users ** Homepage|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** News|News ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** http://sourceforge.net/p/whonix/discussion|Forum ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support |VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** x|Hacking ** x|Developer Portal ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES hb8sbbes0y1ibt8vpdshv3m4y4xtr3f 170 168 2013-07-01T17:14:02Z Patrick 2 170 wikitext text/x-wiki * users ** Homepage|Main Page ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** News|News ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** http://sourceforge.net/p/whonix/discussion|Forum ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support |VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** x|Hacking ** x|Developer Portal ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES hbv4zfao402uoalpeacyuvkiap6ydqa 171 170 2013-07-01T17:14:33Z Patrick 2 171 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** News|News ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** http://sourceforge.net/p/whonix/discussion|Forum ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support |VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** x|Hacking ** x|Developer Portal ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES 1nr0elekdxbmvyt3e2e7j6kwrb1e8h2 367 171 2013-07-04T00:24:49Z Patrick 2 367 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** http://sourceforge.net/p/whonix/discussion|Forum ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support |VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Danger Zone ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225/about|Google+ * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** x|Hacking ** x|Developer Portal ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES mflbe6bwkcvqr472gr5nl54kj8ps988 368 367 2013-07-04T00:26:43Z Patrick 2 368 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** http://sourceforge.net/p/whonix/discussion|Forum ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support |VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Danger Zone ** OnlineProfiles|Social Media Profiles| ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225/about|Google+ ** https://www.facebook.com/pages/Whonix/369240439779108|Facebook ([https://sourceforge.net/p/whonix/featureblog/2013/01/facebook-asking-for-government-issued-photo-id-ex-passport-drivers-license---whonix-facebook-account-permanently-blocked/ defunct]) * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** x|Hacking ** x|Developer Portal ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES 946soghwkeglvaac1gjy3dsr03h7225 369 368 2013-07-04T00:27:45Z Patrick 2 369 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** http://sourceforge.net/p/whonix/discussion|Forum ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support |VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Danger Zone ** OnlineProfiles|Social Media Profiles| ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225/about|Google+ ** Facebook|Facebook * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** x|Hacking ** x|Developer Portal ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES 55a55qtr46wmc4amsri0ymx02t2z4cf 371 369 2013-07-04T00:30:51Z Patrick 2 371 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** http://sourceforge.net/p/whonix/discussion|Forum ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support |VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Danger Zone ** OnlineProfiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225/about|Google+ ** Facebook|Facebook * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** x|Hacking ** x|Developer Portal ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES nx8fjhrwxbn61xxay3cs1mflmhkl1xl 373 371 2013-07-05T15:32:42Z Patrick 2 373 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** SecurityGuide|Security Guide ** FAQ|FAQ ** http://sourceforge.net/p/whonix/discussion|Forum ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|User Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support |VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Danger Zone ** OnlineProfiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225/about|Google+ ** Facebook|Facebook * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** x|Hacking ** x|Developer Portal ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES 8i95n51k1snks5shpeto8lcx9trc6mr 753 373 2013-07-10T15:23:47Z Patrick 2 753 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** http://sourceforge.net/p/whonix/discussion|User Help Forum ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|User Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_.2F_Tunnel_support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** OtherOperatingSystems|Windows Support ** BrowserPlugins|Flash Support * Danger Zone ** Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225/about|Google+ ** Facebook|Facebook * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer_Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES jbogqfh6ag7otwjcteua960xw5jklgf 754 753 2013-07-10T15:25:02Z Patrick 2 754 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** http://sourceforge.net/p/whonix/discussion|User Help Forum ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|User Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_.2F_Tunnel_support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support * Danger Zone ** Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225/about|Google+ ** Facebook|Facebook * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer_Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Dev/Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES bkjh3tgc662gx9hfcvrzfozsi6nfxa2 1330 754 2013-07-15T16:18:53Z Patrick 2 1330 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** http://sourceforge.net/p/whonix/discussion|User Help Forum ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|User Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_.2F_Tunnel_support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support * Danger Zone ** Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225/about|Google+ ** Facebook|Facebook * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer_Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES o1ps2rolrabjlceojzg0w8nblsi7nmq 1340 1330 2013-07-15T16:57:19Z Patrick 2 Text replace - "Online Profiles" to "Official Whonix Online Profiles" 1340 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** http://sourceforge.net/p/whonix/discussion|User Help Forum ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|User Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_.2F_Tunnel_support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225/about|Google+ ** Facebook|Facebook * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer_Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES i2go4hyry4moy83l6z4ld8u447cz6tu 1423 1340 2013-07-16T03:33:33Z Patrick 2 1423 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** http://sourceforge.net/p/whonix/discussion|User Help Forum ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|User Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_.2F_Tunnel_support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical_Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225/about|Google+ ** Facebook|Facebook * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer_Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES mcz4iti07rerg30lqnyvfbxnadyejjn 1424 1423 2013-07-16T03:34:54Z Patrick 2 1424 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** http://sourceforge.net/p/whonix/discussion|User Help Forum ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|User Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_.2F_Tunnel_support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical_Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** Facebook|Facebook * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer_Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES eisqhvea068xko6rszai2uwioia8wf6 1924 1424 2013-07-29T02:53:39Z Patrick 2 1924 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Special:AWCforum|User Help Forum ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|User Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_.2F_Tunnel_support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical_Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** Facebook|Facebook * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer_Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES r843hbb30aroz8qooi9fznq923zcj99 1925 1924 2013-07-29T03:17:16Z Patrick 2 1925 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Special:AWCforum|User Help Forum ** <html><a href="https://whonix.org/cgi-bin/mailman/listinfo/whonix-users">User Mailing List</a></html>|User Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_.2F_Tunnel_support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical_Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** Facebook|Facebook * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer_Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES o4b71yx1f6gzgxj0bvuz0qtfjgn8fny 1926 1925 2013-07-29T03:18:16Z Patrick 2 Undo 1926 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Special:AWCforum|User Help Forum ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|User Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_.2F_Tunnel_support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical_Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** Facebook|Facebook * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer_Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES r843hbb30aroz8qooi9fznq923zcj99 1928 1926 2013-07-29T03:31:51Z Patrick 2 1928 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Special:AWCforum|User Help Forum ** <html><a href="../cgi-bin/mailman/listinfo/whonix-users">User Mailing List</a></html> ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_.2F_Tunnel_support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical_Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** Facebook|Facebook * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer_Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES rz0eqls18y6cf1gmaecukdwtxmz8vzc 1929 1928 2013-07-29T03:32:41Z Patrick 2 Undo 1929 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Special:AWCforum|User Help Forum ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|User Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_.2F_Tunnel_support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical_Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** Facebook|Facebook * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer_Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES r843hbb30aroz8qooi9fznq923zcj99 2004 1929 2013-08-01T19:25:36Z Fortasse 1 add relative links to mailman 2004 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Special:AWCforum|User Help Forum ** <html><A href="/cgi-bin/mailman/listinfo/whonix-users">User Mailing List</A></html> ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_.2F_Tunnel_support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical_Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** Facebook|Facebook * Developers ** <html><A href="/cgi-bin/mailman/listinfo/whonix-devel">Development Mailing List</A></html> ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer_Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES pnztxh74go49aqq0cwcaclegfg2oqp1 2005 2004 2013-08-01T19:26:20Z Fortasse 1 Undo revision 2004 by [[Special:Contributions/Fortasse|Fortasse]] ([[User talk:Fortasse|talk]]) 2005 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Special:AWCforum|User Help Forum ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-users|User Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_.2F_Tunnel_support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical_Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** Facebook|Facebook * Developers ** https://whonix.org/cgi-bin/mailman/listinfo/whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer_Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES r843hbb30aroz8qooi9fznq923zcj99 2047 2005 2013-08-05T17:54:28Z Fortasse 1 2047 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Special:AWCforum|User Help Forum ** Mailing_Lists#whonix-users|User Mailing List ** Contact|Contact ** Disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_.2F_Tunnel_support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical_Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** Facebook|Facebook * Developers ** Mailing_Lists#whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer_Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES q9my8akktleqtgafof275wjd4ho9k7q 2720 2047 2013-09-08T22:35:45Z Anon 10 2720 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Special:AWCforum|User Help Forum ** Mailing Lists#whonix-users|User Mailing List ** Contact|Contact ** Whonix:General disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** Facebook|Facebook * Developers ** Mailing Lists#whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES i4yl7rdfreztc4ibpn8gnx86hmx60pu 3503 2720 2013-10-17T00:14:53Z Patrick 2 3503 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** Download#Known_bugs|Known Issues ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Special:AWCforum|User Help Forum / Support ** Contact|Contact ** Whonix:General disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** Facebook|Facebook * Developers ** Mailing Lists#whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES lgzrvbea93ltexc3a6lx0pyfu9kyew5 3504 3503 2013-10-17T00:15:37Z Patrick 2 3504 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** Download#Known_bugs|Known Issues ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Support|User Help Forum / Support ** Contact|Contact ** Whonix:General disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** Facebook|Facebook * Developers ** Mailing Lists#whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES hr2yhxn5eznljob4f9d4sglbs2rsduh 4021 3504 2013-11-11T13:52:07Z Patrick 2 4021 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** Download#Known_bugs|Known Issues ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Support|User Help Forum / Support ** Contact|Contact ** Whonix:General disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** https://www.facebook.com/pages/Whonix/622399681135624|Facebook * Developers ** Mailing Lists#whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES hgdv0jux06uklm3vu7prn0f03wij3h5 4790 4021 2014-01-18T17:10:12Z Patrick 2 Replaced content with "* SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES" 4790 wikitext text/x-wiki * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES 3mhu15l4fnefafxvptvlwj1c381ybn4 4791 4790 2014-01-18T17:15:21Z Patrick 2 4791 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** Download#Known_bugs|Known Issues ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Support|User Help Forum / Support ** Contact|Contact ** Whonix:General disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** https://www.facebook.com/pages/Whonix/622399681135624|Facebook * Developers ** Mailing Lists#whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES hgdv0jux06uklm3vu7prn0f03wij3h5 4792 4791 2014-01-18T17:32:21Z Patrick 2 Blanked the page 4792 wikitext text/x-wiki phoiac9h4m842xq45sp7s6u21eteeq1 4793 4792 2014-01-18T17:32:57Z Patrick 2 4793 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** Download#Known_bugs|Known Issues ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Support|User Help Forum / Support ** Contact|Contact ** Whonix:General disclaimer|Disclaimer mbhi5hplg5eermaavpzlhx2ccp6jpel 4794 4793 2014-01-18T17:33:27Z Patrick 2 4794 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** Download#Known_bugs|Known Issues ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Support|User Help Forum / Support ** Contact|Contact ** Whonix:General disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** https://www.facebook.com/pages/Whonix/622399681135624|Facebook * Developers ** Mailing Lists#whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES hgdv0jux06uklm3vu7prn0f03wij3h5 4834 4794 2014-01-24T01:20:08Z Patrick 2 4834 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://anonymousoperatingsystem.wordpress.com/|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** Download#Known_bugs|Known Issues ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Support|User Help Forum / Support ** Contact|Contact ** Whonix:General disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** https://www.facebook.com/Whonix|Facebook * Developers ** Mailing Lists#whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES lp2t4tcrg4332t86dwy6vg0uhliimb2 4858 4834 2014-02-01T18:32:32Z Patrick 2 4858 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://www.whonix.org/blog|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** Download#Known_bugs|Known Issues ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Support|User Help Forum / Support ** Contact|Contact ** Whonix:General disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** https://www.facebook.com/Whonix|Facebook * Developers ** Mailing Lists#whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Dev/Changelog|Changelog ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES f2d9nrcnfjrrsnboa55t5yn0jh27gqk 5559 4858 2014-02-22T02:27:21Z Patrick 2 5559 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://www.whonix.org/blog|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** Download#Known_bugs|Known Issues ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Support|User Help Forum / Support ** Contact|Contact ** Whonix:General disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN / Tunnel support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** https://www.facebook.com/Whonix|Facebook * Developers ** Mailing Lists#whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES noxshsksfa7qppy2rq2dfduzm3uto6f 5561 5559 2014-02-22T02:30:22Z Patrick 2 5561 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://www.whonix.org/blog|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** Download#Known_bugs|Known Issues ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Support|User Help Forum / Support ** Contact|Contact ** Whonix:General disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_and_Tunnel_Support|VPN/Tunnel Support ** HostingLocationHiddenServices|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** https://www.facebook.com/Whonix|Facebook * Developers ** Mailing Lists#whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES 8ba2kjlko2764xvbo3ok07oneabfizz 5564 5561 2014-02-22T02:32:13Z Patrick 2 5564 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://www.whonix.org/blog|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** Download#Known_bugs|Known Issues ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Support|User Help Forum / Support ** Contact|Contact ** Whonix:General disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_and_Tunnel_Support|VPN/Tunnel Support ** Hosting_Location_Hidden_Services|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** https://www.facebook.com/Whonix|Facebook * Developers ** Mailing Lists#whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES hsyijhyhxfa1sfgomd8f0e87ysrzh59 6132 5564 2014-03-01T20:53:15Z Patrick 2 Replaced content with "* users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads" 6132 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads hgwu8b6coxuuyv6n068s2t5a5smk8cu 6133 6132 2014-03-01T20:55:07Z Patrick 2 Undo revision 6132 by [[Special:Contributions/Adrelanos|Adrelanos]] ([[User talk:Adrelanos|talk]]) 6133 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://www.whonix.org/blog|News Blog ** Screenshots|Screenshots ** Videos|Videos ** Security Guide|Security Guide ** FAQ|FAQ ** Contribute|You Can Help ** Download#Known_bugs|Known Issues ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Support|User Help Forum / Support ** Contact|Contact ** Whonix:General disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_and_Tunnel_Support|VPN/Tunnel Support ** Hosting_Location_Hidden_Services|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** https://www.facebook.com/Whonix|Facebook * Developers ** Mailing Lists#whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets ** Authorship|Authorship * SEARCH * TOOLBOX ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * LANGUAGES hsyijhyhxfa1sfgomd8f0e87ysrzh59 6160 6133 2014-03-01T22:31:23Z Patrick 2 6160 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://www.whonix.org/blog|News Blog ** Screenshots|Screenshots ** FAQ|FAQ ** Contribute|You Can Help ** Download#Known_bugs|Known Issues ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Support|User Help Forum / Support ** Contact|Contact ** Whonix:General disclaimer|Disclaimer * Frequently Asked Features ** Bridges|Bridges Support ** Features#VPN_and_Tunnel_Support|VPN/Tunnel Support ** Hosting_Location_Hidden_Services|Location/IP Hidden Servers ** Other Operating Systems|Windows Support ** Browser Plugins|Flash Support ** Physical Isolation|Physical Isolation * Danger Zone ** Official Whonix Online Profiles|Social Media Profiles ** https://twitter.com/Whonix|@Whonix Twitter ** https://plus.google.com/108150429836421683225|Google+ ** https://www.facebook.com/Whonix|Facebook * Developers ** Mailing Lists#whonix-devel|Development Mailing List ** Contribute|Contribute ** Design|Technical Design ** https://github.com/Whonix/Whonix/|Source Code ** Dev/Developer Portal|Developer Portal / Hacking ** https://github.com/Whonix/Whonix/issues|Development Tickets l95aqc0psg1h0u2b3wanocyvn978yaw 6161 6160 2014-03-01T22:34:11Z Patrick 2 6161 wikitext text/x-wiki * users ** Main Page|Homepage ** About|About ** Features|Features ** Download|Downloads ** Documentation|Documentation ** https://www.whonix.org/blog|News Blog ** Screenshots|Screenshots ** FAQ|FAQ ** Contribute|You Can Help ** Download#Known_bugs|Known Issues ** https://github.com/Whonix/Whonix/issues?labels=bug&page=1&state=open|Bugs ** https://github.com/Whonix/Whonix/issues?labels=enhancement&page=1&state=open|Feature Requests ** Support|User Help Forum / Support ** Contact|Contact ** Whonix:General disclaimer|Disclaimer * Dev/Developer Portal|Development p145b3zb908e0nzzxmf5jil0opr43p0 6162 6161 2014-03-01T22:35:29Z Patrick 2 6162 wikitext text/x-wiki * Main Page|Home * Download|Download * Documentation|Documentation * https://www.whonix.org/blog|Blog * Support * Dev/Developer Portal|Development 84tlbks7q4tztwhxbzxvannou57ojra 6164 6162 2014-03-01T22:36:20Z Patrick 2 6164 wikitext text/x-wiki * Menu ** Main Page|Home ** Download|Download ** Documentation|Documentation ** https://www.whonix.org/blog|Blog ** Support ** Dev/Developer Portal|Development hovzjzlu4md1ahoudtz29cph24pl5p4 6165 6164 2014-03-01T22:36:56Z Patrick 2 6165 wikitext text/x-wiki * Menu ** Main Page|Home ** Download ** Documentation|Documentation ** https://www.whonix.org/blog|Blog ** Support ** Dev/Developer Portal|Development inuobh99siqn1lbafhwedoxc0v3fo8i 6166 6165 2014-03-01T22:37:25Z Patrick 2 6166 wikitext text/x-wiki * Menu ** Main Page|Home ** Download|Download ** Documentation|Documentation ** https://www.whonix.org/blog|Blog ** Support ** Dev/Developer Portal|Development hovzjzlu4md1ahoudtz29cph24pl5p4 6167 6166 2014-03-01T22:41:56Z Fortasse 1 6167 wikitext text/x-wiki * Menu ** Main Page|Home ** Download| Download ** Documentation|Documentation ** https://www.whonix.org/blog|Blog ** Support ** Dev/Developer Portal|Development gmww6fxb7sa1e96mt8qhuk7s1q9n6ms 6168 6167 2014-03-01T22:42:23Z Fortasse 1 6168 wikitext text/x-wiki * Menu ** Main Page|Home ** Download |Download ** Documentation|Documentation ** https://www.whonix.org/blog|Blog ** Support ** Dev/Developer Portal|Development 7vzj8m73i6hyae50luv03df5dwl0b07 6169 6168 2014-03-01T22:42:44Z Fortasse 1 6169 wikitext text/x-wiki * Menu ** Main Page|Home ** Download|Download ** Documentation|Documentation ** https://www.whonix.org/blog|Blog ** Support ** Dev/Developer Portal|Development hovzjzlu4md1ahoudtz29cph24pl5p4 6172 6169 2014-03-01T22:44:40Z Fortasse 1 6172 wikitext text/x-wiki * Menu ** Main Page|Home ** Documentation|Documentation ** Download|Download ** https://www.whonix.org/blog|Blog ** Support ** Dev/Developer Portal|Development jg9abmbs8me1lnzuthvxf4tewaias7h 6173 6172 2014-03-01T22:45:37Z Fortasse 1 6173 wikitext text/x-wiki * Main Page|Home * Documentation|Documentation * Download|Download * https://www.whonix.org/blog|Blog * Support * Dev/Developer Portal|Development lh0m9ar9q9t6ndjsvtumt8d4npn0dok 6174 6173 2014-03-01T22:46:04Z Fortasse 1 Undo revision 6173 by [[Special:Contributions/Fortasse|Fortasse]] ([[User talk:Fortasse|talk]]) 6174 wikitext text/x-wiki * Menu ** Main Page|Home ** Documentation|Documentation ** Download|Download ** https://www.whonix.org/blog|Blog ** Support ** Dev/Developer Portal|Development jg9abmbs8me1lnzuthvxf4tewaias7h 6175 6174 2014-03-01T22:46:29Z Fortasse 1 6175 wikitext text/x-wiki * Menu ** Main Page|Home ** Download|Downloads ** Documentation|Documentation ** https://www.whonix.org/blog|Blog ** Support ** Dev/Developer Portal|Development 2tj6i9g0qpvzitayiy19nd9pw0jwq2z 6176 6175 2014-03-01T22:47:15Z Fortasse 1 6176 wikitext text/x-wiki * Menu ** Main Page|Home ** download|Download ** Documentation|Documentation ** https://www.whonix.org/blog|Blog ** Support ** Dev/Developer Portal|Development p7h37ync5pgiicb0nt0gag0979s6jjm 6177 6176 2014-03-01T22:48:02Z Fortasse 1 6177 wikitext text/x-wiki * Menu ** Main Page|Home ** [[Download]] ** Documentation|Documentation ** https://www.whonix.org/blog|Blog ** Support ** Dev/Developer Portal|Development ecqztw9j851lfqlg0venwgytxboklcw 6178 6177 2014-03-01T22:48:18Z Fortasse 1 6178 wikitext text/x-wiki * Menu ** Main Page|Home ** [[Download]]|Download ** Documentation|Documentation ** https://www.whonix.org/blog|Blog ** Support ** Dev/Developer Portal|Development 4lx7n5llorchz9tw3c3p8yyflyuewy8 6179 6178 2014-03-01T22:48:34Z Fortasse 1 6179 wikitext text/x-wiki * Menu ** Main Page|Home ** Download|Download ** Documentation|Documentation ** https://www.whonix.org/blog|Blog ** Support ** Dev/Developer Portal|Development hovzjzlu4md1ahoudtz29cph24pl5p4 6180 6179 2014-03-01T22:49:08Z Fortasse 1 6180 wikitext text/x-wiki * Menu ** Main Page|Home ** Download | Download ** Documentation|Documentation ** https://www.whonix.org/blog|Blog ** Support ** Dev/Developer Portal|Development 395yrw39871gw649z65w8hi494btt63 6181 6180 2014-03-01T22:50:46Z Fortasse 1 6181 wikitext text/x-wiki * Menu ** Main Page | Home ** Download | Download ** Documentation | Documentation ** https://www.whonix.org/blog | Blog ** Support ** Dev/Developer Portal | Development jw7dl9d0eogybxe8rnyne9el9u409ld 6182 6181 2014-03-01T22:52:57Z Fortasse 1 6182 wikitext text/x-wiki * Menu ** Main Page | Home ** Download | Downloads ** Documentation | Documentation ** https://www.whonix.org/blog | Blog ** Support ** Dev/Developer Portal | Development e6yta5jq2ynmwl0fbvmo5kot8u6d9d2 6185 6182 2014-03-01T22:58:06Z Patrick 2 6185 wikitext text/x-wiki * Menu ** Main Page | HOME ** Download | DOWNLOADS ** Documentation | DOCUMENTATION ** https://www.whonix.org/blog | BLOG ** SUPPORT ** Dev/Developer Portal | DEVELOP 42p22tgognk798bhd4v4gby81q08i8y 6211 6185 2014-03-02T03:09:38Z Patrick 2 6211 wikitext text/x-wiki * Menu ** Main Page | HOME ** Download | DOWNLOADS ** Documentation | DOCUMENTATION ** Support | SUPPORT ** https://www.whonix.org/blog | BLOG ** SUPPORT ** Dev/Developer Portal | DEVELOP cixtn70ixw3qjpctrmg3tk9w5nkhssj 7420 6211 2014-04-08T21:54:43Z Patrick 2 7420 wikitext text/x-wiki * Menu ** Main Page | HOME ** Download | DOWNLOADS ** Documentation | DOCUMENTATION ** Support | SUPPORT ** https://www.whonix.org/blog | BLOG ** https://www.whonix.org/forum | COMMUNITY ** Dev/Developer Portal | DEVELOP rzsnacibiswxbqtynwzazar8a2qy8bh 7435 7420 2014-04-09T00:38:51Z Patrick 2 7435 wikitext text/x-wiki * Menu ** Main Page | HOME ** Download | DOWNLOADS ** Documentation | DOCUMENTATION ** https://www.whonix.org/blog | BLOG ** https://www.whonix.org/forum | COMMUNITY ** Dev/Developer Portal | DEVELOP dspl52g78wekgnko2iu5nayejaml5me 7542 7435 2014-04-15T01:06:15Z Patrick 2 7542 wikitext text/x-wiki * Menu ** Main Page | HOME ** Download | DOWNLOADS ** Documentation | DOCUMENTATION ** https://www.whonix.org/blog | BLOG ** Support | SUPPORT ** https://www.whonix.org/forum | COMMUNITY ** Dev/Developer Portal | DEVELOP qxmbf43iw4ra1xqvot6m453tkc4512u 15078 7542 2015-03-02T21:43:17Z Patrick 2 15078 wikitext text/x-wiki * Menu ** Main Page | HOME ** Download | DOWNLOADS ** Documentation | DOCUMENTATION ** https://www.whonix.org/blog/ | BLOG ** Support | SUPPORT ** https://www.whonix.org/forum/ | COMMUNITY ** Dev/Developer Portal | DEVELOP qn6g6j86lraqtpjgqm21zsbs8c71f4q 17027 15078 2015-09-01T13:24:32Z Patrick 2 17027 wikitext text/x-wiki * Menu ** Main Page | HOME ** Main_Page#Download_Whonix | DOWNLOAD ** Documentation | DOCUMENTATION ** https://www.whonix.org/blog/ | BLOG ** Support | SUPPORT ** https://www.whonix.org/forum/ | COMMUNITY ** Dev/Developer Portal | DEVELOP nt6a3atf44y4r769dv6cyy51e30xljc 19054 17027 2015-11-07T21:20:59Z Patrick 2 19054 wikitext text/x-wiki * Menu ** https://www.whonix.org | HOME ** Main_Page#Download_Whonix | DOWNLOAD ** Documentation | DOCUMENTATION ** https://www.whonix.org/blog/ | BLOG ** Support | SUPPORT ** https://www.whonix.org/forum/ | COMMUNITY ** Dev/Developer Portal | DEVELOP t6kxceqjq5c1m3pmnkknr8sac9n54oa 19055 19054 2015-11-07T21:25:21Z Patrick 2 Undo revision 19054 by [[Special:Contributions/Patrick|Patrick]] ([[User talk:Patrick|talk]]) 19055 wikitext text/x-wiki * Menu ** Main Page | HOME ** Main_Page#Download_Whonix | DOWNLOAD ** Documentation | DOCUMENTATION ** https://www.whonix.org/blog/ | BLOG ** Support | SUPPORT ** https://www.whonix.org/forum/ | COMMUNITY ** Dev/Developer Portal | DEVELOP nt6a3atf44y4r769dv6cyy51e30xljc 19155 19055 2015-11-16T02:58:21Z Patrick 2 19155 wikitext text/x-wiki * Menu ** Main Page | HOME ** Main_Page#Download_Whonix | DOWNLOAD ** Documentation | DOCUMENTATION ** https://www.whonix.org/blog/ | BLOG ** Support | SUPPORT ** https://forums.whonix.org | COMMUNITY ** Dev/Developer Portal | DEVELOP etbwyghjz0105mjyzai34bhkob82au5 19420 19155 2015-11-27T18:34:19Z Patrick 2 19420 wikitext text/x-wiki * Menu ** Main Page | HOME ** Download | DOWNLOAD ** Documentation | DOCUMENTATION ** https://www.whonix.org/blog/ | BLOG ** Support | SUPPORT ** https://forums.whonix.org | COMMUNITY ** Dev/Developer Portal | DEVELOP tpw7r8sdytobzyma9yccse6n6tzqfqe 22177 19420 2016-02-11T20:17:33Z Patrick 2 22177 wikitext text/x-wiki * Menu ** Main Page | HOME ** Download | DOWNLOAD ** Documentation | DOCUMENTATION ** https://www.whonix.org/blog/ | NEWS ** Support | SUPPORT ** https://forums.whonix.org | COMMUNITY ** Dev/Developer Portal | DEVELOP 4u1hkqfx6z1y7kaf608hbignqc0qna1 22178 22177 2016-02-11T20:18:01Z Patrick 2 22178 wikitext text/x-wiki * Menu ** Main Page | HOME ** Download | DOWNLOAD ** Documentation | DOCUMENTATION ** https://www.whonix.org/blog/ | NEWS ** Support | SUPPORT ** https://forums.whonix.org | COMMUNITY s1o7kozquns96ltgba29w9kcfsai829 22179 22178 2016-02-11T20:19:03Z Patrick 2 22179 wikitext text/x-wiki * Menu ** Main Page | HOME ** Download | DOWNLOAD ** Documentation | DOCUMENTATION ** Support | HELP ** https://www.whonix.org/blog/ | NEWS mhd17vvitpp686rvionwwgvsypznoig 22180 22179 2016-02-11T20:19:15Z Patrick 2 22180 wikitext text/x-wiki * Menu ** Main Page | HOME ** Download | DOWNLOAD ** Support | HELP ** https://www.whonix.org/blog/ | NEWS glue96idtsfoeqw6e4d7t0rexf0gyyf 23958 22180 2016-06-05T14:14:35Z Patrick 2 23958 wikitext text/x-wiki * Menu ** Main Page | HOME ** Download | DOWNLOAD ** Documentation | DOCS ** Support | HELP ** https://www.whonix.org/blog/ | NEWS s4h60hf0kadp8xvn8ssczclq276w21y 26039 23958 2016-10-18T16:14:33Z Patrick 2 26039 wikitext text/x-wiki * Menu ** https://www.whonix.org | HOME ** Download | DOWNLOAD ** Documentation | DOCS ** Support | HELP ** https://www.whonix.org/blog/ | NEWS 2cv64bp7bmoyx7gcd0fpgfviyp8bjgj 37154 26039 2018-09-27T09:22:33Z Patrick 2 37154 wikitext text/x-wiki * Menu ** https://www.whonix.org | HOME ** Download | DOWNLOAD ** Documentation | DOCS ** Support | HELP ** http://forums.whonix.org/c/news | NEWS ckq0x3f3a0q2dc4gw78t9y87wkq2uve 55009 37154 2020-03-05T14:35:10Z Patrick 2 55009 wikitext text/x-wiki * Menu ** https://www.whonix.org | HOME ** Download | DOWNLOAD ** Documentation | DOCS ** FAQ | FAQ ** Support | HELP ** http://forums.whonix.org/c/news | NEWS i8du2mlzv4kzw0oq9g8jol2wo16q0qm 55010 55009 2020-03-05T14:35:51Z Patrick 2 55010 wikitext text/x-wiki * Menu ** https://www.whonix.org | HOME ** Download | DOWNLOAD ** Documentation | DOCS ** FAQ | FAQ ** Support | HELP ** Contribute | CONTRIBUTE ** http://forums.whonix.org/c/news | NEWS 01ydwegfkcdhgfw9o8rdbl6gz2y7u74 61258 55010 2020-12-08T19:18:12Z Patrick 2 61258 wikitext text/x-wiki * Menu ** https://www.{{project_clearnet}} | HOME ** Download | DOWNLOAD ** Documentation | DOCS ** FAQ | FAQ ** Support | HELP ** Contribute | CONTRIBUTE ** http://forums.{{project_clearnet}}/c/news | NEWS t99b2h3rr0g99fcyh1wdgia58np6vq0 61306 61258 2020-12-09T13:18:50Z Patrick 2 61306 wikitext text/x-wiki * Menu ** https://www.{{project_clearnet}} | HOME ** Download | DOWNLOAD ** Documentation | DOCS ** FAQ | FAQ ** Support | HELP ** Contribute | CONTRIBUTE ** https://forums.{{project_clearnet}}/c/news | NEWS q849h56a4xrjryhcfqlzohleudojcg2 76786 61306 2022-01-08T09:27:15Z Patrick 2 76786 wikitext text/x-wiki ** https://www.{{project_clearnet}} | HOME ** Download | DOWNLOAD ** Documentation | DOCS ** FAQ | FAQ ** Support | HELP ** Contribute | CONTRIBUTE ** https://forums.{{project_clearnet}}/c/news | NEWS 170qnqbljn0ztbx59q7z876rrkx9c5s 76787 76786 2022-01-08T09:27:37Z Patrick 2 76787 wikitext text/x-wiki * https://www.{{project_clearnet}} | HOME * Download | DOWNLOAD * Documentation | DOCS * FAQ | FAQ * Support | HELP * Contribute | CONTRIBUTE * https://forums.{{project_clearnet}}/c/news | NEWS gwkfwfgmviyx49gm9jfae5gpdzebx29 76788 76787 2022-01-08T09:28:58Z Patrick 2 76788 wikitext text/x-wiki * Menu ** https://www.{{project_clearnet}} | HOME ** Download | DOWNLOAD ** Documentation | DOCS ** FAQ | FAQ ** Support | HELP ** Contribute | CONTRIBUTE ** https://forums.{{project_clearnet}}/c/news | NEWS q849h56a4xrjryhcfqlzohleudojcg2 76797 76788 2022-01-08T10:12:53Z Hans 5031 76797 wikitext text/x-wiki * Menu ** Download | Download ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us! 71wxpfdqyctlvn5z3l7p9aropt7t8o3 76798 76797 2022-01-08T10:14:54Z Hans 5031 76798 wikitext text/x-wiki * Menu ** Download | DOWNLOAD ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Want to help? ggshng5o2vcl7cchndskmu8m5sr8r5w 76799 76798 2022-01-08T10:16:02Z Hans 5031 76799 wikitext text/x-wiki * Menu ** Download | DOWNLOAD ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us ev23f9x5p3am0m28x3af381792i8ys1 76800 76799 2022-01-08T10:16:20Z Hans 5031 76800 wikitext text/x-wiki * Menu ** Download | Download ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us 5rskvtk327nzaqrj6o8rrdi44efqhu3 76801 76800 2022-01-08T10:16:30Z Hans 5031 76801 wikitext text/x-wiki * Menu ** Download | Download ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us 84rk0zz6d3tz3gusfzlm6mov46i02hf 76802 76801 2022-01-08T10:16:50Z Hans 5031 76802 wikitext text/x-wiki * Menu ** Download | Download ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us ewyrpf9z2m0yfknq7cu4rrjkwkldxi4 76803 76802 2022-01-08T10:17:02Z Hans 5031 76803 wikitext text/x-wiki * Menu ** Download|Download ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us fpz7wnn1j8fv7dko6aa3ww6qy1t8i1u 76804 76803 2022-01-08T10:17:18Z Hans 5031 76804 wikitext text/x-wiki * Menu ** Download | Download&bnsp; ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us 2l4zotpzi6dcyavtvuwien54d0lcz1r 76805 76804 2022-01-08T10:18:09Z Hans 5031 76805 wikitext text/x-wiki * Menu ** Download | Download​ ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us g3522jz8k5jly35qs5ob4scekbjc0gg 76806 76805 2022-01-08T10:18:34Z Hans 5031 76806 wikitext text/x-wiki * Menu ** Download | Download ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us 84rk0zz6d3tz3gusfzlm6mov46i02hf 76807 76806 2022-01-08T10:18:53Z Hans 5031 76807 wikitext text/x-wiki * Menu ** Download | Download  ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us gtiadkorbvdllk35pp53x3xa8ujcrng 76943 76807 2022-01-09T07:59:40Z Hans 5031 76943 wikitext text/x-wiki * Menu ** Download | Download  ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us <div class="helper"></div> 4t2kupnzjrznshktw7xghq2uxggkai9 76944 76943 2022-01-09T08:00:37Z Hans 5031 76944 wikitext text/x-wiki * Menu ** Download | Download  ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us gtiadkorbvdllk35pp53x3xa8ujcrng 76945 76944 2022-01-09T08:06:10Z Hans 5031 76945 wikitext text/x-wiki * Menu ** Download | Download  ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us ** Donate | Donate r5wy8puvqjzx27750n8ala8i4e2q9oj 76965 76945 2022-01-09T09:17:38Z Hans 5031 76965 wikitext text/x-wiki * Menu ** {{SERVER}} | Home ** Download | Download  ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us ** Donate | Donate gndex90nbuh6w7mijxuz8sljb4x49rl 77014 76965 2022-01-09T10:25:24Z Hans 5031 77014 wikitext text/x-wiki * Menu ** {{SERVER}} | Home ** Download | Download  ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us ** Donate | Donate ** #abc | Supermenu lsxmtasr2e9mzq8q9pqe362p0gfrd4i 77015 77014 2022-01-09T10:25:57Z Hans 5031 77015 wikitext text/x-wiki * Menu ** {{SERVER}} | Home ** Download | Download  ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us ** Donate | Donate ** # | Supermenu jrl60vxw81l3hnxmmoov5hpcsfffzlo 77016 77015 2022-01-09T10:26:20Z Hans 5031 77016 wikitext text/x-wiki * Menu ** {{SERVER}} | Home ** Download | Download  ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us ** Donate | Donate ** #supermenu | Supermenu c0v0e9h5evq6q73vztmzi7ctnwoyvgl 77213 77016 2022-01-13T16:09:03Z Hans 5031 77213 wikitext text/x-wiki * Menu ** Download | Download  ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us gtiadkorbvdllk35pp53x3xa8ujcrng 85745 77213 2022-08-12T15:24:02Z Patrick 2 remove-trailing-spaces 85745 wikitext text/x-wiki * Menu ** Download | Download ** Documentation | Docs ** https://forums.{{project_clearnet}}/c/news | News ** Contribute | Help us 5rskvtk327nzaqrj6o8rrdi44efqhu3 10 9 22 2013-06-25T23:26:45Z Fortasse 1 testing 22 wikitext text/x-wiki {{#if: {{{1|<noinclude>demo</noinclude>}}} | <div class="note note-{{#switch:{{{2|}}} |gotcha=error |=info |#default={{{2|}}} }}">{{{1}}}</div> | [[File:Bulbgraph.png|18px|Note|link=]]&nbsp;'''Note''': }}<noinclude> {{documentation}} [[Category:Templates|{{PAGENAME}}]] </noinclude> 6qevdf7dbh69e3z130t7fwlmnzvdtzu 23 22 2013-06-25T23:37:28Z Fortasse 1 23 wikitext text/x-wiki {{#if: {{{1|<noinclude>demo</noinclude>}}} | <div class="note note-{{#switch:{{{2|}}} |gotcha=error |=info |#default={{{2|}}} }}">{{{1}}}</div> | [[File:Bulbgraph.png|18px|Note|link=]]&nbsp;'''Note''': }} h3q7tw546q9uth7geoji8e0m65y7k8f 25 23 2013-06-25T23:41:34Z Fortasse 1 25 wikitext text/x-wiki {{#if: {{{1|<noinclude>demo</noinclude>}}} | <div class="note note-{{#switch:{{{2|}}} |gotcha=error |=info |#default={{{2|}}} }}">{{{1}}}</div> | [[File:Bulbgraph.png|18px|Note|link=]]&nbsp;'''Note''': }}<noinclude> {{documentation}} [[Category:Templates|{{PAGENAME}}]] </noinclude> 6qevdf7dbh69e3z130t7fwlmnzvdtzu 102343 25 2024-11-30T20:15:34Z Nurmagoz 4391 102343 wikitext text/x-wiki {{#if: {{{1|<noinclude>demo</noinclude>}}} | <div class="note note-{{#switch:{{{2|}}} |gotcha=error |=info |#default={{{2|}}} }}">{{{1}}}</div> | [[File:Bulbgraph.png|18px|Note|link=]]&nbsp;'''Note''': }}<noinclude> [[Category:Templates|{{PAGENAME}}]] </noinclude> ezy5317q29h1pcq6kx2vp1h2gppe6gi 6 10 24 2013-06-25T23:39:41Z Fortasse 1 24 wikitext text/x-wiki phoiac9h4m842xq45sp7s6u21eteeq1 2013-06-25T23:39:41Z Fortasse 1 Bulbgraph.png https://www.whonix.org/w/images/6/60/Bulbgraph.png 2277 cv1pmuwj4fw0ojlmtiadl2pqghuz9oo 6/60/Bulbgraph.png iVBORw0KGgoAAAANSUhEUgAAABcAAAAcCAYAAACK7SRjAAAGVUlEQVRIx52WC1BUZRTHL1mUCTVW ygCKL1IslVnFTFQeuwguroCt4Bt8DFqWhCmrBIgigWWBFCIKsmX5wiIeKhABUkopsEgiD2mABZTH AkOswnL33vvvLM40kzJBfjNnzs693/l95/zPud8swwyxgEYmNiaJPAw2JvJw4qT9Bz6fr1BEirb6 Kczo2WjDPsXuvcz/WlUV9xhTo5VM6oWrph4yX6mj49vHnSSzVO4rZt6XSqe3SJzeLBE7OCZ6yuTO ra3aUbsCdzNNze3DgzWd3KCPCj89xUW8OHLrttm1Kd+4orR8CxqbNqNBvQY3StxwLOkNrF87rXae 7byg3btCxj+qFsMfsPPdwNddxXYJJ5Nc29s7DkAQLlHcrwCXS/4c2VEI2AZ1kxhh4dN1jg62F6I+ ibFmGNvBeAFdT0L9NwYyySnfv+awaO7JY8clOt3AUQKqwAka6PkucLyafAn5n8HpleCFQPRqVyE6 eqp+8ZL58adP5ZryPG+AGz3WQDDfHGthxGLJqoD352q6uiLB81lk9wnSS74LAtdBvokOu0Y+nSr6 kmwH7rVJsG79lHvuLmslBs4TmdNDowD/A2Pemm+Vkf/zcgqKI2gJ9Fw3BgQteE4Loa8ZHFeDARQT nLLnTtOeIJLIDd9fnM07LBJd/Pr0xRf/BQc6BzPfsHKvtbf35Dtt7X4UlAy9UE4QzeABurbf8eDu fgy074NOm0ny5FECp2ifAgK/Hnfr3oBsxaS6iIjkmY9l/QjutGi5vSLQpp5lt1PgtwRWkbWS7g/R 92csHrScR3/Td9DVh5Pu2ZTxCQoLAfSb0N0zB+v9rDSbNgYveQJuWA6OS8ShwdNaWNaX4CkUWAYI zWD5Tgj1n0LfWYCBxh8g3PmI3tHkUHUQwsjWoadvBjZvsWhzc1nz9pBwqcxDtP29qTV/aX0o43iy IgqsI23rwWqV6K/dDt3NzeCb4gmeRZZISQST96KmWmOV3PzPrZs/nD7kfCuCY81clk4rqqpeOjjL vGGuhUrw+gZq6m2wtxXgbh+gMfyFJDlPFkMWSHvd8dv1yXB1tFEpU1Ith4TXNTwcPd9uTnhiwhyO 50MJnkbjV0qylILDb+CqPwNH8rD4kZr8NY1kNGm/HWy/Aw7tG8u7LHQMr75TP2pIeMG1Jma5VD7D bZllRdmtNRD0qSQJjZxQCh7Xob9LB6qpmVwGWP1J9CMYep0XCtPMILGboPrAL3jG78W3hv7sDRNT Val5ZrFkoe8mP9H927f2UfapNG4ZBM8GW7MHXON+sMJZeh4Cfa87ruWaY6X4lRY3R08vin/mP++V yIivmPikb43Fzs575B7T24vz3yHN6RAowVb7QWhYhgGdD3Q9IlxNexlSezO1p1zu36fjTGkmjYa9 uLbtfJ+5ci3N2NN97Uc7vcf1apvsSIZIsH8sBHfnOXDqF9H2hzFWy8f/tdrn3W2UsbHhCwf6R3an R34ewoQfTp22aYWlqrXEBPoHH0Aofgt88ShwN0ehOucFSJ2tCi6nqyweSdrO/K91KOqEudTBMic3 2UToN1wJv86FcN0IfYXGOB9rDFtbi+yUCzdNR3SPP74OH/rCwnnJ0vQPfWVC1CEplCE2OPbxCwhf Owl21uNgZTXrp7TM715inmbFx0WYi+zs8vco9kN54SzOnzqLsLBdeMfTG5aTrWFhMSW7IDvR9Kng R458Zmlvb39TsVeBqOgoHDx4kO6PLXB2dqasrWBmNv5yQUHBmKeSJSYmxsLW1rbc398fSqUSZ86c oczDIJPJMGHCBEycOPFqdnb2q/SOuXTpEnPjxg2mubmZ6e7uHh6enJw8ViQSpQUFBXH0G3FxcQgI CICHh4cBbKigJzMzMykvLy+6qKgooqKi4mO1Wu3R09Pz7LBwQ7kEmrlgwYIcLy8vYceOHSAPGxsb SCQSJCQkICsrC1euXAHJg/Ly8n7K/DjBnx8Wnp+f/+hvRlSUDcmTa2Ji0krW6eTk1E2VaNPT0/tI jr6cnJyHhYWFvSqVqoYyj+zq6np+RLpTyYMVxMbGmsvl8nkbNmxwyMjIkJSVla0g2KqqqipvspV1 dXWy2traKQ0NDSYdHR1GI24sy7JMaGgo4+Liwvj4+DDnzp0bbF5paSlTWVk5aARmampqmMbGRkaj 0fwT+ze2H2xSyyGWFQAAAABJRU5ErkJggg== 6 11 26 2013-06-25T23:44:18Z Fortasse 1 26 wikitext text/x-wiki phoiac9h4m842xq45sp7s6u21eteeq1 2013-06-25T23:44:18Z Fortasse 1 18px-Attention_niels_epting.svg.png https://www.whonix.org/w/images/4/4b/18px-Attention_niels_epting.svg.png 810 4sjgl22m8ect5fm1h7nglg3jy4vixpr 4/4b/18px-Attention_niels_epting.svg.png iVBORw0KGgoAAAANSUhEUgAAABIAAAASCAMAAABhEH5lAAABUFBMVEUAAAAzAAAuAAArAABYAAAz AAA6AAA4AAA2AAA8AABvAgBvBQByBQBzBwJyBQCFBACFBACHBACNEg6QGBSNFBCPGhaYBACVBACZ DQmYDQmeGhehHhisNzShBQCsODOuBgCvBgCwBgCyBgCrGxatIx6uJB+/PDfCOzfDQDzGQj68UE3S BwDUBwDVBwD/CAD2CAD4CADhV1LsBwD/GRH/GhP/GxTjWVTcBwD/MizdGRO/BQD/R0K1BQDrgX3q gX7sR0H/XFifBQDJLir/cWz/d3KLBQDaWlWCBQD/hIG5QT5wAwD/l5P/mJX/m5fMa2ewVVL/qKbF fXv/tLL/uLb/ubepZmT/xsTAjYz/ysioeXj/29ojAQCpionAnp3mxcTgxMPhxMMoERDEr66smpq0 rKwoJCQAAAAQEBAkJCQ3NzdLS0teXl5ycnKFhYWYmJirq6vdWxDlAAAAZnRSTlMACgsMHR4fICEi Z2dnaGl3eXl9fn+AiouMjZGSmZqanZ2enqCio6usrq6wvb29y8zMzs7Ozs7P0dLU1tbY2NnZ2tzc 3t/g4eLi4+Xm5+fo6ert7e7u7/Hy8vP29/f39/j4+fr7/f4qNaUeAAAAzklEQVQYGQXByy4DUQAA 0HNnrqmKNwsLIhEk+P9PYWUhQWxEakq1c1/OCWA2O9w1LtIGAvrju7OI/PG0KATizUM0BGEtPT5n ve76PtQ6P9guqxpO05fO8W3NOafWWs653h6J86taMTWbBJfLGPcLTE0pcDLE/ZZgaHICB3GngHUz FbATawKtmRJocVVAyf2mgN+4zAHk7q9AHWNed+Al/lUoqVu/A8NWB95SZ7EEp+db8D3q+ZkPWH2u ML5XAf3eRQD1dWwEMMS9weYnT/AP96xp/r/HAwUAAAAASUVORK5CYII= 6 12 27 2013-06-25T23:44:31Z Fortasse 1 27 wikitext text/x-wiki phoiac9h4m842xq45sp7s6u21eteeq1 2013-06-25T23:44:31Z Fortasse 1 22px-Appunti_architetto_franc_01.svg.png https://www.whonix.org/w/images/0/0f/22px-Appunti_architetto_franc_01.svg.png 1114 nfvz7kv3tsue3js6mn5vtvc56ar8xsc 0/0f/22px-Appunti_architetto_franc_01.svg.png iVBORw0KGgoAAAANSUhEUgAAABYAAAAcCAYAAABlL09dAAAD/0lEQVQYGaXBy2+UVRjA4d97vuvM dEpngNapSBURpSZqiNeFCVsNGzdE3ZqYeFnhLfEPkK1GV25kxYKtYeNl4c54CdSaUKAIARSBlunM dOa7nvPamYphYai2zyNs4MSJE97ExMQXtVrt2bIoyk63+3WapkcOHz5suQvDBpxzb0+3Wi+fPXNm 4ey5cxfGarW3yrJ8nw34bKDRaOzzPC+oj49H1lpPjPGMMU+yAWHN3NFHXnFin3HWcyJaFVVZifdN 5q2D+yf3Pre7Um9WrLXkRUGv26V981qaLP92Pciu3ZzpfXPawzrWGEOkoovn9pw/Kj9/tPezqXva b8ZxJuoMIspl7wWKe19jrLmLLE1xqoRhiLOWfr9Pnuf0ej263Q5B9wcOThzHkwLfsyRppH/8vuNz P47zQ35Qyvz53aTVA/itx6hMP835xYuE4RLNZpNmo0FlfBwRIc9zer0eq/0+nU6XQTLDl8U77NTr ZEtneP7hH8X3yyf8ICjqq/2YZZ3lpSPHOHXqNPWxMaq1Os45VBVV5Va7TVEUDAYD0iwDVYznoark YYNDr3/A3HcnuTb3BpUwb/lA6Jxhe2sGEcMDMzMsXrhAmqYkScJgMMA5RxAEhEGAAp4xVCoVgiBg amqK2f37yfOcHfc9yJWfKtRrA+OrSiAolB1QJYoiHp2d5X9TZfXWdWrBAAGMqgpriqSLGMNmiTGs /HmRSgSqikGVoSxZZStEhCzpIgIoGAMZa8RlDIkIm1WmfdY5jKoypLZgRITNEBHyNGFIFQyqljVO HUPCJokgYrnNKDjWFIVjKwTwPdY5MCgjtkjZqqTfY0QJDOoYMmGFIWULTMiQUzyjrAuiKiOqbIYC YRwzoohBlSHxKwypKpuhzuEkZsiphkaVEfVC/qs0Ten2ehRFgaoypM5RnWihyohBGRE/RlXZSKfb ZWl5meb27SRZxq2VFXr9PlaV+2efop8CCj7KOglBlY0kSUKr1WJhYYF2u82dpExoirAmNDhlKIjH QISNGM8jimPa7TZ38ozh6slPKTMHCoa/+UENEcHzfe4mjiLSJOFORuDKyY+Jlk6RZ6CquW/V2ADl xuIvZMmAuFLFOYezFlVFVVHncM4xVK/XKcqS2zRPuPHtJ1SW5pHIgFEQMj/pmGJ8qqSZznP83RfZ tucA1kRkpRIEAbWxOvXGJNsmp5mYnCaujtHrD1BbcHPhe4JfjxGRI5EBgVq1oBzQ95NVs1hamd6x K2Csf5Xs+mVs7igKS2lhUCqdUrmkYB1Yr4of1YhllWalRGqCZwK8UIgrsK2RcOlqPCdfvbrzoXDC +zCMebxIifkXinj8Q1XAcZt1vnOIBKb0AxJrZd4v3Xt/AY6cBJ0D6BqfAAAAAElFTkSuQmCC 6 13 28 2013-06-25T23:44:40Z Fortasse 1 28 wikitext text/x-wiki phoiac9h4m842xq45sp7s6u21eteeq1 2013-06-25T23:44:40Z Fortasse 1 24px-Attention_niels_epting.svg.png https://www.whonix.org/w/images/7/7f/24px-Attention_niels_epting.svg.png 1081 9oshayxoxhojtrqyswh6orhhamhhgsp 7/7f/24px-Attention_niels_epting.svg.png iVBORw0KGgoAAAANSUhEUgAAABgAAAAYCAMAAADXqc3KAAABtlBMVEUAAAAAAAAAAAAxAAA7AAA5 AAA3AAA+AABKBQBJBQAoAAAnAAAsAABOBQArAAAvAAAuAABLAwBOAwBNAwBMAwBOAwBZBABZBABd BABYBABzBABvBABxBABzBABvBAB7AwB8BwODAwCFAwCADAiEAwCDAwCMFBCMFxOMFxOPGBWLAwCK BQCMBQCSGhWWHRitBQCbJyKuBACeKya8Kya8Lyu7Liq+MCzVCADWCADWEQnWEAnrCADtCAD/CADz BwD/GRH/IRr/IRv/KSPWBgDfRT/hRkD/NjDLBgD/OjTVFxG8BgD/S0WyBgDzYl7/WVT1ZF//Xlr/ YVy8JiLpdG//aGP/eHP2gX73d3L4hYH/hYJ1AwB3AwCqMzB/ExD/kY3qg4D/k5BpAwD/m5eeQj// op/3oZ7gj43/r610Ix//r63/sK7/srCST03/vbrurKrZnJppMC3/ycf/zMuJW1rouLf/zcz/0dDU p6bwx8b/1dRkPTznxcT/29rUtbSGaWhfS0rWwsGEdnUMAABdVlaGg4MAAAAODg4dHR0rKys6OjpI SEhWVlZlZWVzc3OCgoKRkZGfn5+urq5GsgP9AAAAhXRSTlMAAQIaGhscHTAxMzQ0NDU2N1hYWVtb dXZ2d4eIiImKlZaWlpeXmJudnp+io6Spqqqrq66ztLW1xsbIycnJy83Oz8/R0tLT09TU1dbX2Nra 29vb3Nzd4OHh4eLk5OTl5ebm5+fp6err6+zs7Ozu7u/w8fLy8/Pz8/T09Pb29vf4+fr7/P7+RtaL awAAAT9JREFUGBkFwUtPE1EYANAz04+WVxXUpCEkBMMC3MgKN/7/uFcWEiERNEgMFKG0087Mvddz AlC/2oihtl/MMhCgfnPwfrI1smj+Xv2eZggYHp0eDEhGo52jn1+vOgTGH86GXTdaR7ew/2583hCM js/qnsEu7nsGn/K3VqgPP/ZQFbQtnM4uc3h7UidoCpYJ6uP7adR7r3tgvknTg939xxhPOkAqrFpg ch0bWz0gFZYZ2F6PYVUA87FlAlTDqFMCrIq+BYiQAJqiSwAidzVgVSwSIHfRdhVgUSxbQO6jWa0B mmKeAO1LzJ53AfMfHjLgeRH5z04FlEsA5baEx7s9YPOzixvg9knIN+NtYKAAL9dZ0H4/2YbmiwY8 XyQCzfnhpKI8gXz7q0dAdzWdvFoD7ezuX4YA+WG6Na7WdGnWFOA/Er2cKdTcpBYAAAAASUVORK5C YII= 10 14 31 2013-06-27T15:11:48Z Fortasse 1 Created page with "<!--Blank for now-->" 31 wikitext text/x-wiki <!--Blank for now--> 5uaw0vkkohacmk3h47991c0nx1r9gh1 172 31 2013-07-01T17:18:51Z Patrick 2 172 wikitext text/x-wiki <!--Blank for now--> '''Still migrating from sourceforge...''' Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and markdown: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} lkyqpw1pvow235clq3nrjhpdv6vtgke 194 172 2013-07-02T18:16:02Z Fortasse 1 194 wikitext text/x-wiki <!--Blank for now--> '''Still migrating from sourceforge... You can help so this header can go away!''' Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and markdown: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} shj2l0cjw5rjdffyc4rxjjv9tgqwtea 267 194 2013-07-03T14:35:41Z Patrick 2 267 wikitext text/x-wiki [https://whonix.org/{{PAGENAME}} TLS (secure)] | [http://whonix.org.nyud.net/{{PAGENAME}} CoralCDN] | [http://maybe_soon.onion/{{PAGENAME}} Tor Hidden Service] '''Still migrating from sourceforge... You can help so this header can go away!''' Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and markdown: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} jq1or3nq40cfjizs0acxqmrbpxsv4xr 268 267 2013-07-03T14:38:14Z Patrick 2 268 wikitext text/x-wiki [https://whonix.org/wiki/{{PAGENAME}} TLS (secure)] | [http://whonix.org.nyud.net/wiki/{{PAGENAME}} CoralCDN] | [http://maybe_soon.onion/wiki/{{PAGENAME}} Tor Hidden Service] '''Still migrating from sourceforge... You can help so this header can go away!''' Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and markdown: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} she0qchtu5psf3283uk5h3f8qno3152 269 268 2013-07-03T14:38:42Z Patrick 2 269 wikitext text/x-wiki [https://whonix.org/wiki/index.php/{{PAGENAME}} TLS (secure)] | [http://whonix.org.nyud.net/wiki/index.php/{{PAGENAME}} CoralCDN] | [http://maybe_soon.onion/wiki/index.php/{{PAGENAME}} Tor Hidden Service] '''Still migrating from sourceforge... You can help so this header can go away!''' Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and markdown: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} sc26indl6dva2o6a6jp34a1jvqa2gho 270 269 2013-07-03T14:48:55Z Patrick 2 270 wikitext text/x-wiki [https://whonix.org/wiki/index.php/{{PAGENAME}}/ TLS (secure)] | [http://whonix.org.nyud.net/wiki/index.php/{{PAGENAME}}/ CoralCDN] | [http://maybe_soon.onion/wiki/index.php/{{PAGENAME}}/ Tor Hidden Service] '''Still migrating from sourceforge... You can help so this header can go away!''' Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and markdown: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} bsiqrh3oz71gv1wkzfgydr2vbeo7md7 271 270 2013-07-03T14:55:35Z Patrick 2 271 wikitext text/x-wiki [https://whonix.org/wiki/index.php/{{BASEPAGENAMEE}}/ TLS (secure)] | [http://whonix.org.nyud.net/wiki/index.php/{{PAGENAME}}/ CoralCDN] | [http://maybe_soon.onion/wiki/index.php/{{PAGENAME}}/ Tor Hidden Service] '''Still migrating from sourceforge... You can help so this header can go away!''' Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and markdown: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} 3g8thg6mnl2ll0q8hche9rcsy6xmqjc 272 271 2013-07-03T14:56:11Z Patrick 2 272 wikitext text/x-wiki [https://whonix.org/wiki/index.php/{{BASEPAGENAMEE}}/ TLS (secure)] | [http://whonix.org.nyud.net/wiki/index.php/{{BASEPAGENAMEE}}/ CoralCDN] | [http://maybe_soon.onion/wiki/index.php/{{BASEPAGENAMEE}}/ Tor Hidden Service] '''Still migrating from sourceforge... You can help so this header can go away!''' Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and markdown: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} 3v3jo0miltkndw5608vv5cquyrqti6h 273 272 2013-07-03T14:57:24Z Patrick 2 273 wikitext text/x-wiki [https://whonix.org/wiki/index.php/{{BASEPAGENAMEE}} TLS (secure)] | [http://whonix.org.nyud.net/wiki/index.php/{{BASEPAGENAMEE}} CoralCDN] | [http://maybe_soon.onion/wiki/index.php/{{BASEPAGENAMEE}} Tor Hidden Service] '''Still migrating from sourceforge... You can help so this header can go away!''' Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and markdown: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} 4cqv1ts9vooigo0okt8jmr0f0t0fn97 274 273 2013-07-03T14:58:10Z Patrick 2 274 wikitext text/x-wiki [https://whonix.org/wiki/index.php/{{FULLPAGENAMEE}} TLS (secure)] | [http://whonix.org.nyud.net/wiki/index.php/{{FULLPAGENAMEE}} CoralCDN] | [http://maybe_soon.onion/wiki/index.php/{{FULLPAGENAMEE}} Tor Hidden Service] '''Still migrating from sourceforge... You can help so this header can go away!''' Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and markdown: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} tpsj321k5vsy7t3vc9gw9atsumpg9l8 275 274 2013-07-03T15:08:53Z Patrick 2 275 wikitext text/x-wiki [https://whonix.org/wiki/index.php/{{FULLPAGENAMEE}} TLS (secure)] | [http://whonix.org.nyud.net/wiki/index.php/{{FULLPAGENAMEE}} CoralCDN] | [http://maybe_soon.onion/wiki/index.php/{{FULLPAGENAMEE}} Tor Hidden Service] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p --> '''Still migrating from sourceforge... You can help so this header can go away!''' Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and markdown: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} gyg3ekqb60l5amicl97iuui1632gmzf 327 275 2013-07-03T20:42:49Z Fortasse 1 327 wikitext text/x-wiki [https://whonix.org/wiki/index.php/{{FULLPAGENAMEE}} TLS (secure)] | [http://whonix.org.nyud.net/wiki/index.php/{{FULLPAGENAMEE}} CoralCDN] | [http://zo7fksnun4b4v4jv.onion/wiki/index.php/{{FULLPAGENAMEE}} Tor Hidden Service] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p --> '''Still migrating from sourceforge... You can help so this header can go away!''' Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and markdown: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} 2yqhaa042hhaigm7qen268n0guynqre 329 327 2013-07-03T22:10:57Z Patrick 2 329 wikitext text/x-wiki [https://whonix.org/wiki/index.php/{{FULLPAGENAMEE}} TLS (secure)] | [http://whonix.org.nyud.net/wiki/index.php/{{FULLPAGENAMEE}} CoralCDN] | [http://zo7fksnun4b4v4jv.onion/wiki/index.php/{{FULLPAGENAMEE}} Tor Hidden Service] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p --> [https://whonix.org/wiki/index.php/{{FULLPAGENAMEE}} .ssl] | [http://whonix.org.nyud.net/wiki/index.php/{{FULLPAGENAMEE}} .cdn] | [http://zo7fksnun4b4v4jv.onion/wiki/index.php/{{FULLPAGENAMEE}} .onion] | [http://zo7fksnun4b4v4jv.onion.tor2web.org/wiki/index.php/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/index.php/{{FULLPAGENAMEE}} .to] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p --> '''Still migrating from sourceforge... You can help so this header can go away!''' Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and markdown: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} p3pe5f8130pdl55czqseqrwawwm2n70 381 329 2013-07-05T21:37:09Z 127.0.0.1 381 wikitext text/x-wiki [https://whonix.org/wiki/index.php/{{FULLPAGENAMEE}} TLS (secure)] | [http://whonix.org.nyud.net/wiki/index.php/{{FULLPAGENAMEE}} CoralCDN] | [http://zo7fksnun4b4v4jv.onion/wiki/index.php/{{FULLPAGENAMEE}} Tor Hidden Service] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p --> [https://whonix.org/wiki/index.php/{{FULLPAGENAMEE}} .ssl] | [http://whonix.org.nyud.net/wiki/index.php/{{FULLPAGENAMEE}} .cdn] | [http://zo7fksnun4b4v4jv.onion/wiki/index.php/{{FULLPAGENAMEE}} .onion] | [http://zo7fksnun4b4v4jv.onion.tor2web.org/wiki/index.php/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/index.php/{{FULLPAGENAMEE}} .to] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p --> '''Still migrating from sourceforge... You can help so this header can go away!''' Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki format: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and old markdown format: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} cex57vtxtkmjzzx6wtk5s2te1kbr0jq 432 381 2013-07-06T16:40:27Z Patrick 2 432 wikitext text/x-wiki [https://whonix.org/wiki/index.php/{{FULLPAGENAMEE}} .ssl] | [http://whonix.org.nyud.net/wiki/index.php/{{FULLPAGENAMEE}} .cdn] | [http://zo7fksnun4b4v4jv.onion/wiki/index.php/{{FULLPAGENAMEE}} .onion] | [http://zo7fksnun4b4v4jv.onion.tor2web.org/wiki/index.php/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/index.php/{{FULLPAGENAMEE}} .to] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p --> '''Still migrating from sourceforge... You can help so this header can go away!''' Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki format: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and old markdown format: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} qg1ah8thoy28h2ffbapzxnsydqpzgwk 677 432 2013-07-09T23:50:28Z Patrick 2 677 wikitext text/x-wiki [https://whonix.org/wiki/index.php/{{FULLPAGENAMEE}} .ssl] | [http://whonix.org.nyud.net/wiki/index.php/{{FULLPAGENAMEE}} .cdn] | [http://zo7fksnun4b4v4jv.onion/wiki/index.php/{{FULLPAGENAMEE}} .onion] | [http://zo7fksnun4b4v4jv.onion.tor2web.org/wiki/index.php/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/index.php/{{FULLPAGENAMEE}} .to] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p --> '''Still migrating from sourceforge... You can help so this header can go away! In meanwhile, go the the old homepage: https://sourceforge.net/p/whonix/wiki/Home/''' <!-- Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki format: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and old markdown format: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} --> cdewrnvmauy12uo7o0699dtgaq7w2ab 908 677 2013-07-11T02:36:42Z Patrick 2 908 wikitext text/x-wiki [https://whonix.org/wiki/index.php/{{FULLPAGENAMEE}} .ssl] | [http://zo7fksnun4b4v4jv.onion/wiki/index.php/{{FULLPAGENAMEE}} .onion] | [http://whonix.org.nyud.net/wiki/index.php/{{FULLPAGENAMEE}} .cdn] | [http://zo7fksnun4b4v4jv.onion.tor2web.org/wiki/index.php/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/index.php/{{FULLPAGENAMEE}} .to] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p --> '''Still migrating from sourceforge... You can help so this header can go away! In meanwhile, go the the old homepage: https://sourceforge.net/p/whonix/wiki/Home/''' <!-- Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki format: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and old markdown format: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} --> 2lg4pjsbe4skjk52wqsj5s69lt938db 911 908 2013-07-11T02:46:03Z Patrick 2 911 wikitext text/x-wiki <font size="3">[https://whonix.org/wiki/index.php/{{FULLPAGENAMEE}} .ssl] | [http://zo7fksnun4b4v4jv.onion/wiki/index.php/{{FULLPAGENAMEE}} .onion]</font> <font size="-3">| [http://whonix.org.nyud.net/wiki/index.php/{{FULLPAGENAMEE}} .cdn] | [http://zo7fksnun4b4v4jv.onion.tor2web.org/wiki/index.php/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/index.php/{{FULLPAGENAMEE}} .to]</font size> <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p --> '''Still migrating from sourceforge... You can help so this header can go away! In meanwhile, go the the old homepage: https://sourceforge.net/p/whonix/wiki/Home/''' <!-- Website questions, shell account requests, and wiki permissions requests to fortasse@riseup.net <ref>https://whonix.org/fortasse.asc</ref> Whonix-specific questions to adrelanos at riseup dot net <ref>https://whonix.org/adrelanos.asc</ref> User account creation has been disabled for now due to automatic spam bots. Please mail fortasse or adrelanos for new user accounts. '''Old docs:''' In mediawiki format: https://github.com/adrelanos/Whonix-documentation/tree/master/mediawiki and old markdown format: https://github.com/adrelanos/Whonix-documentation {{reflist|close=1}} --> lkhyqum9axx0p6ypzvkcyvv19gsktza 1118 911 2013-07-12T15:20:49Z Patrick 2 1118 wikitext text/x-wiki <font size="3">[https://whonix.org/wiki/index.php/{{FULLPAGENAMEE}} .ssl] | [http://zo7fksnun4b4v4jv.onion/wiki/index.php/{{FULLPAGENAMEE}} .onion]</font> <font size="-3">| [http://whonix.org.nyud.net/wiki/index.php/{{FULLPAGENAMEE}} .cdn] | [http://zo7fksnun4b4v4jv.onion.tor2web.org/wiki/index.php/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/index.php/{{FULLPAGENAMEE}} .to]</font size><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> k7cnb9acrsvimjxvlunszkhp4vcked5 1294 1118 2013-07-14T20:28:23Z Patrick 2 removed index.php/ 1294 wikitext text/x-wiki <font size="3">[https://whonix.org/wiki/{{FULLPAGENAMEE}} .ssl] | [http://zo7fksnun4b4v4jv.onion/wiki/{{FULLPAGENAMEE}} .onion]</font> <font size="-3">| [http://whonix.org.nyud.net/wiki/{{FULLPAGENAMEE}} .cdn] | [http://zo7fksnun4b4v4jv.onion.tor2web.org/wiki/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/{{FULLPAGENAMEE}} .to]</font size><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> pyahl9cbfnp2pq1dry9oxmlqisf47sv 1469 1294 2013-07-17T19:00:28Z Patrick 2 1469 wikitext text/x-wiki <font size="3">[https://whonix.org/wiki/{{FULLPAGENAMEE}} .ssl] | [http://zo7fksnun4b4v4jv.onion/wiki/{{FULLPAGENAMEE}} .onion]</font> <font size="-3">| [http://whonix.org.nyud.net/wiki/{{FULLPAGENAMEE}} .cdn] | [http://zo7fksnun4b4v4jv.onion.tor2web.org/wiki/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/{{FULLPAGENAMEE}} .to]</font size>[[Image:donate.png|frame|link=Contribute#Donate|[[Contribute#Donate|Donate!]]]]<!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> nqx3bjxsej715scaww8a50fwkvw4rdg 1472 1469 2013-07-17T19:14:40Z Patrick 2 1472 wikitext text/x-wiki <font size="3">[https://whonix.org/wiki/{{FULLPAGENAMEE}} .ssl] | [http://zo7fksnun4b4v4jv.onion/wiki/{{FULLPAGENAMEE}} .onion]</font> <font size="-3">| [http://whonix.org.nyud.net/wiki/{{FULLPAGENAMEE}} .cdn] | [http://zo7fksnun4b4v4jv.onion.tor2web.org/wiki/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/{{FULLPAGENAMEE}} .to]</font size>[[Image:donate.png|frame|link=Contribute#Donate|[[Contribute#Donate|Donate to Whonix!]]]]<!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> 3ob8m9kodovcig4r9yefba68f1q8pvp 1473 1472 2013-07-17T19:18:28Z Patrick 2 1473 wikitext text/x-wiki <font size="3">[https://whonix.org/wiki/{{FULLPAGENAMEE}} .ssl] | [http://zo7fksnun4b4v4jv.onion/wiki/{{FULLPAGENAMEE}} .onion]</font> <font size="-3">| [http://whonix.org.nyud.net/wiki/{{FULLPAGENAMEE}} .cdn] | [http://zo7fksnun4b4v4jv.onion.tor2web.org/wiki/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/{{FULLPAGENAMEE}} .to] | [[Contribute#Donate|Donate to Whonix!]]</font size><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> aion30w4c689dizz4eecw3c9ki91ik4 1475 1473 2013-07-17T19:21:42Z Patrick 2 1475 wikitext text/x-wiki <font size="3">[https://whonix.org/wiki/{{FULLPAGENAMEE}} .ssl] | [http://zo7fksnun4b4v4jv.onion/wiki/{{FULLPAGENAMEE}} .onion]</font> <font size="-3">| [http://whonix.org.nyud.net/wiki/{{FULLPAGENAMEE}} .cdn] | [http://zo7fksnun4b4v4jv.onion.tor2web.org/wiki/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/{{FULLPAGENAMEE}} .to] | [[Donate|Donate to Whonix!]]</font size><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> b3fhzobv0nvczfsvhp8xr1m03704116 2011 1475 2013-08-01T23:01:17Z Patrick 2 2011 wikitext text/x-wiki <html> <a href="https://github.com/Whonix/Whonix"><img style="position: absolute; top: 0; right: 0; border: 0;" src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png" alt="Fork me on GitHub"></a> </html> <font size="3">[https://whonix.org/wiki/{{FULLPAGENAMEE}} .ssl] | [http://zo7fksnun4b4v4jv.onion/wiki/{{FULLPAGENAMEE}} .onion]</font> <font size="-3">| [http://whonix.org.nyud.net/wiki/{{FULLPAGENAMEE}} .cdn] | [http://zo7fksnun4b4v4jv.onion.tor2web.org/wiki/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/{{FULLPAGENAMEE}} .to] | [[Donate|Donate to Whonix!]]</font size><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> gh2fbd2qgn8810qkx76m77h7x9pf8oi 2059 2011 2013-08-07T11:35:42Z Anon 10 2059 wikitext text/x-wiki <font size="3">[https://whonix.org/wiki/{{FULLPAGENAMEE}} .ssl] | [http://zo7fksnun4b4v4jv.onion/wiki/{{FULLPAGENAMEE}} .onion]</font> <font size="-3">| [http://whonix.org.nyud.net/wiki/{{FULLPAGENAMEE}} .cdn] | [http://zo7fksnun4b4v4jv.tor2web.org/wiki/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/{{FULLPAGENAMEE}} .to] | [[Donate|Donate to Whonix!]]</font size><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> 4nrozaf33502fsu99d65fw64h0t9j4p 2188 2059 2013-08-09T09:31:37Z Anon 10 2188 wikitext text/x-wiki <font size="3">[https://whonix.org/wiki/{{FULLPAGENAMEE}} .ssl] | [http://zo7fksnun4b4v4jv.onion/wiki/{{FULLPAGENAMEE}} .onion]</font> <font size="-3">| [http://whonix.org.nyud.net/wiki/{{FULLPAGENAMEE}} .cdn] | [https://zo7fksnun4b4v4jv.tor2web.org/wiki/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/{{FULLPAGENAMEE}} .to] | [[Donate|Donate to Whonix!]]</font size><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> n175kwh85ar9mqvh13sjnekchh962pt 2189 2188 2013-08-09T09:35:41Z Anon 10 2189 wikitext text/x-wiki <font size="3">[https://whonix.org/wiki/{{FULLPAGENAMEE}} .ssl] | <html><a class="link-https" href="http://zo7fksnun4b4v4jv.onion/wiki/</html>{{FULLPAGENAMEE}}<html>" rel="nofollow">.onion</a></html></font> <font size="-3">| [http://whonix.org.nyud.net/wiki/{{FULLPAGENAMEE}} .cdn] | [https://zo7fksnun4b4v4jv.tor2web.org/wiki/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/{{FULLPAGENAMEE}} .to] | [[Donate|Donate to Whonix!]]</font size><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> benf8saqxeoek26p39atafwpsgwgnku 2190 2189 2013-08-09T09:44:16Z Anon 10 2190 wikitext text/x-wiki <font size="3">[https://whonix.org/wiki/{{FULLPAGENAMEE}} https] | <html><a class="link-https" style="color: #3366BB" href="http://zo7fksnun4b4v4jv.onion/wiki/</html>{{FULLPAGENAMEE}}<html>" rel="nofollow">.onion</a></html></font> <font size="-3">| [http://whonix.org.nyud.net/wiki/{{FULLPAGENAMEE}} .cdn] | [https://zo7fksnun4b4v4jv.tor2web.org/wiki/{{FULLPAGENAMEE}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to/wiki/{{FULLPAGENAMEE}} .to] | [[Donate|Donate to Whonix!]]</font size><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> pu814cd6f3vypu984bocspk8l4w7dng 2191 2190 2013-08-09T09:51:29Z Anon 10 2191 wikitext text/x-wiki <font size="3">[https://whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://zo7fksnun4b4v4jv.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="-3">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} .cdn] | [https://zo7fksnun4b4v4jv.tor2web.org{{localurl:{{FULLPAGENAME}}}} .tor2web] | [http://zo7fksnun4b4v4jv.onion.to{{localurl:{{FULLPAGENAME}}}} .to] | [[Donate|Donate to Whonix!]]</font size><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> p55u2tudujyf7pgyqpl1oveh6miyj7k 2192 2191 2013-08-09T10:01:19Z Anon 10 2192 wikitext text/x-wiki <font size="3">[https://whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://zo7fksnun4b4v4jv.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="-3">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} cdn] | [[Donate|Donate to Whonix!]]</font size><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> tugeuiomjkst30feq3zx564vx92cnxb 2277 2192 2013-08-10T19:25:07Z Anon 10 2277 wikitext text/x-wiki <font size="3">[https://whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://zo7fksnun4b4v4jv.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="-3">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} mirror] | [[Donate|Donate to Whonix!]]</font size><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> owg0dltsy9ub2bzo0nwma0pags7wlrs 2278 2277 2013-08-10T19:45:55Z Anon 10 2278 wikitext text/x-wiki <font size="3">[https://whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://zo7fksnun4b4v4jv.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="-3">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> tdvtl4c8olzs1iql6ln6r9w0oted24u 2480 2278 2013-08-31T23:34:24Z Anon 10 2480 wikitext text/x-wiki <font size="3">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://zo7fksnun4b4v4jv.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="-3">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> l05i8kdop53yx2p7lh2cxwggdin1g7o 2524 2480 2013-09-02T16:17:54Z Patrick 2 2524 wikitext text/x-wiki <font size="4">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://zo7fksnun4b4v4jv.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="-1">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror]</font> <font size="-3">|[https://zo7fksnun4b4v4jv.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror2]</font> | <font size="-3">[[Contribute#Donate|Donate to Whonix!]]</font><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> 54fx6qt4kw85brk6nko43wl2e5l90et 2525 2524 2013-09-02T16:20:55Z Patrick 2 2525 wikitext text/x-wiki <font size="4">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://zo7fksnun4b4v4jv.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="-1">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | </font><font size="-3">[https://zo7fksnun4b4v4jv.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror2]</font> |<font size="-3">[[Contribute#Donate|Donate to Whonix!]]</font><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> rcwuezycfmsx284v42afthmowsen25o 2526 2525 2013-09-02T17:15:21Z 127.0.0.1 2526 wikitext text/x-wiki <font size="3">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://zo7fksnun4b4v4jv.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="1">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://zo7fksnun4b4v4jv.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> qr531t4zbhd1s87f7wgkqq886gzjo48 4084 2526 2013-11-23T23:28:17Z Patrick 2 4084 wikitext text/x-wiki <font size="3">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="1">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> pg8qs1uri4qjqyik6qo4p3a290g089u 4339 4084 2013-12-18T14:03:50Z Fortasse 1 4339 wikitext text/x-wiki <font size="3">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="1">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> The .onion is currently down, we are aware, and are working on it! ceta8oa9osea7g9cr8aswtxajeud7qg 4340 4339 2013-12-18T14:09:38Z Fortasse 1 i fixed it! :D 4340 wikitext text/x-wiki <font size="3">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="1">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> pg8qs1uri4qjqyik6qo4p3a290g089u 4630 4340 2014-01-09T20:17:25Z Fortasse 1 4630 wikitext text/x-wiki <font size="3">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="1">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font><!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> <font size="2">We are making some DNS changes, so the site may be a little broken for a few days. The .onion address should continue to work 100%.</font> 8w9in22s9svdx7hztr52kprusd5tik1 4671 4630 2014-01-13T23:24:36Z Patrick 2 4671 wikitext text/x-wiki <font size="3">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="1">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font> | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]]<!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> bog7bkq8xpfv9ot083w6abkf1meqiel 4782 4671 2014-01-16T18:02:29Z Fortasse 1 4782 wikitext text/x-wiki <font size="3">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="1">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font> | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]]<!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> We are aware of the issues, they are the result of DNS changes. They should be resolved in a few hours. The .onion continues to work. fgwo7fqfvcx7u79tpplkoyw5ttamrhz 4783 4782 2014-01-16T19:54:23Z Fortasse 1 4783 wikitext text/x-wiki <font size="3">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="1">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font> | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]]<!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> bog7bkq8xpfv9ot083w6abkf1meqiel 5288 4783 2014-02-11T12:57:57Z Patrick 2 5288 wikitext text/x-wiki <font size="3">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="1">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font> | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]]<!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> {{#seo: |og:type=website |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |og:image=https://www.whonix.org/blog/wp-content/uploads/2014/01/Banner2.png }} jyc76agoa772ijjh5zajq0o5oc526bc 5289 5288 2014-02-11T12:59:04Z Patrick 2 5289 wikitext text/x-wiki <font size="3">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="1">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font> | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]]<!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> {{#seo: |metakeywords=anonymity |og:type=website |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |og:image=https://www.whonix.org/blog/wp-content/uploads/2014/01/Banner2.png }} jplcmamvukdtnvlr1opqqm2lp131m3y 5330 5289 2014-02-12T03:00:19Z Patrick 2 5330 wikitext text/x-wiki <font size="3">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="1">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font> | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]]<!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> {{#seo: |metakeywords=anonymity |og:type=website |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |og:image=https://www.whonix.org/blog/wp-content/uploads/2014/01/Banner2.png }} <html> <!--[if !(lt IE 8)]><!--> <script type="text/javascript"> (function(){var e=document.createElement("script");e.type="text/javascript";e.async=true;e.src=document.location.protocol+"//d1agz031tafz8n.cloudfront.net/thedaywefightback.js/widget.min.js";var t=document.getElementsByTagName("script")[0];t.parentNode.insertBefore(e,t)})() </script> <!--<![endif]--> </html> juq3z41ke3dqouhbczp6sf29d8rmmdt 5334 5330 2014-02-12T15:09:22Z Patrick 2 5334 wikitext text/x-wiki <font size="3">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="1">| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font> | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]]<!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> {{#seo: |metakeywords=anonymity |og:type=website |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |og:image=https://www.whonix.org/blog/wp-content/uploads/2014/01/Banner2.png }} jplcmamvukdtnvlr1opqqm2lp131m3y 6151 5334 2014-03-01T22:18:56Z Fortasse 1 6151 wikitext text/x-wiki <font size="3">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="1"> ^{[[Forcing .onion on Whonix.org | note]]}| [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font> | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]]<!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> {{#seo: |metakeywords=anonymity |og:type=website |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |og:image=https://www.whonix.org/blog/wp-content/uploads/2014/01/Banner2.png }} 682mvtdtimfpd6n7hbzhpopp6rdh1rb 6685 6151 2014-03-07T23:39:50Z Patrick 2 6685 wikitext text/x-wiki <font size="3">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html></font> <font size="1"> ^{[[Forcing .onion on Whonix.org|note]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | [[Contribute#Donate|Donate to Whonix!]]</font> | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]]<!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> {{#seo: |metakeywords=anonymity |og:type=website |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |og:image=https://www.whonix.org/blog/wp-content/uploads/2014/01/Banner2.png }} b4zjnm9rynl92f0209iz3tuayhr4nki 6852 6685 2014-03-11T23:04:06Z Patrick 2 6852 wikitext text/x-wiki {{#seo: |metakeywords=anonymity |og:type=website |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |og:image=https://www.whonix.org/blog/wp-content/uploads/2014/01/Banner2.png }} 625gdewfc221mzclrg4kyszsjd9b8kq 7089 6852 2014-03-27T23:51:45Z Patrick 2 7089 wikitext text/x-wiki {{#seo: |metakeywords=anonymity |og:type=website |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer }} 3uci61sog05s6qn0lddfrehnyeq4vis 7123 7089 2014-03-28T04:23:01Z Patrick 2 7123 wikitext text/x-wiki {{#seo: |og:type=article |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer }} mxizdvcneoqhj8cm6we9wbc8jmlbcm9 7129 7123 2014-03-28T04:41:25Z Patrick 2 7129 wikitext text/x-wiki {{#seo: |og:site_name=Whonix |fb:admins=100007482551659 }} jo5lialy1lilysc368w1nnbbhd6oc30 7132 7129 2014-03-28T04:49:15Z Patrick 2 7132 wikitext text/x-wiki {{#seo: |fb:admins=100007482551659 }} 07e7ni1c5qcuaybwbm4qsl72ty5wnp5 7133 7132 2014-03-28T04:52:55Z Patrick 2 7133 wikitext text/x-wiki {{#seo: |fb:admins=100007482551659 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image:src=https://www.whonix.org/w/skins/common/images/135px_Whonix_lock.png }} d03ffuznxr6ut3mkzgb9who5ee86osd 7138 7133 2014-03-28T05:35:38Z Patrick 2 7138 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |fb:admins=100007482551659 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image:src=https://www.whonix.org/w/skins/common/images/135px_Whonix_lock.png }} j7k3mywtnsuhfy5xsupu1btiu3kqmry 7140 7138 2014-03-28T05:42:58Z Patrick 2 7140 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image:src=https://www.whonix.org/w/skins/common/images/135px_Whonix_lock.png }} kpda1ctfftv28ifrw6xaw1t48oi6p7z 7658 7140 2014-05-02T16:27:33Z Patrick 2 7658 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image:src=https://www.whonix.org/w/skins/common/images/135px_Whonix_lock.png }} [u]Random News:[/u] <random>Bored? Want to chat with other Whonix users? Join us in [url=http://irc://irc.oftc.net/whonix]IRC[/url] chat ([url=https://webirc.oftc.net:8443/?channels=Whonix]Webchat[/url]). @@@ Don't mind having your name connected to Whonix? Follow us. [url=https://twitter.com/Whonix]Twitter[/url] / [url=https://www.facebook.com/Whonix]Facebook[/url] / [url=https://plus.google.com/108150429836421683225]g+[/url] @@@ Check out [url=https://www.whonix.org]Whonix blog[/url]. @@@ Did you know that anyone can edit [url=https://www.whonix.org]Whonix's wiki[/url]? @@@ Want to make Whonix more safe and usable? We're looking for helping hands. Check out [url=https://github.com/Whonix/Whonix/issues]Github Issues[/url] and [url=https://www.whonix.org/forum/index.php/board,5.0.html]development forum[/url]. @@@ Please consider a [url=https://www.whonix.org/wiki/Donate]recurring donation[/url]! @@@ Want to get involved with Whonix? Check out our [url=https://www.whonix.org/wiki/Contribute]Contribute[/url] page. @@@ Did you know you can [url=https://www.whonix.org/wiki/Forcing_.onion_on_Whonix.org]enforce using an alternative .onion domain[/url] to access this website? @@@ Did you know, that Whonix has some protection against [url=https://en.wikipedia.org/wiki/Backdoor_(computing)]backdoors[/url]? The [url=https://www.whonix.org/wiki/Verifiable_Builds]Verifiable Builds[/url] feature only adds security if people like you actually use it! @@@ Do you know our [url=https://www.whonix.org/wiki/Documentation]Documentation[/url], [url=https://www.whonix.org/wiki/Design]Technical Design[/url] and [url=https://www.whonix.org/wiki/Dev/Developer_Portal]Developer Portal[/url] already? @@@ There are [url=https://www.whonix.org/wiki/Dev/git#subscribe_to_code_changes]5 different options[/url] to subscribe to Whonix source code changes. @@@ Join us testing new [url=https://www.whonix.org/wiki/AppArmor]AppArmor profiles[/url] for improved security! ([url=https://www.whonix.org/forum/index.php/topic,97.0.html]forum discussion[/url]) @@@ Brainstorming: [url=https://www.whonix.org/forum/index.php/topic,215.0.html]Where Whonix wants to be in 2 or 5 years?[/url] @@@ Interested in becoming author for [url=https://www.whonix.org/blog]Whonix blog[/url]? Writing about anonymity/privacy/security? Get in touch! @@@ Wondering why Whonix will always be Free? Check out [url=https://www.whonix.org/wiki/Why_Whonix_is_Free_Software]Why Whonix is Free Software[/url]. @@@ It would be great if you could create a Wikipedia page for Whonix ([url=https://en.wikipedia.org/w/index.php?title=Whonix&redirect=no]its own article[/url], not a [url=https://en.wikipedia.org/wiki/Whonix#Whonix_.28Anonymous_Operating_System.29]redirection[/url] to another page). @@@ Did you [url=https://www.whonix.org/wiki/Contribute]contribiute[/url] to Whonix? Feel free to add your name and what you did to the [url=https://www.whonix.org/wiki/Authorship]Whonix Authorship[/url] page. @@@ Please [url=https://www.whonix.org/wiki/Contribute]contribute[/url] by [url=http://https://www.whonix.org/wiki/Contribute#Answer_Questions]answering questions[/url]. @@@ [url=https://www.whonix.org/blog/translations-coordinator]Whonix Project looking for Translations Coordinator![/url] </random> 14x1vzy3k47io5ta68d22tkvpx53mac 7659 7658 2014-05-02T16:29:22Z Patrick 2 7659 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image:src=https://www.whonix.org/w/skins/common/images/135px_Whonix_lock.png }} {{RandomNews}} 0puyybw36jahvfo33or6hya9mvjhf7j 15413 7659 2015-03-17T20:34:36Z Patrick 2 15413 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image:src=https://www.whonix.org/w/skins/common/images/135px_Whonix_lock.png }} <!--{{#widget:Header}}--> {{RandomNews}} gaoz6tlhe9r9hr1mhf7s4db9uyn6y1k 15421 15413 2015-03-17T20:49:51Z Patrick 2 15421 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image:src=https://www.whonix.org/w/skins/common/images/135px_Whonix_lock.png }} {{#widget:Header}} {{RandomNews}} oui7xkqweuup01vhx905yvxih8xlrj6 15434 15421 2015-03-18T20:00:21Z Patrick 2 15434 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image:src=https://www.whonix.org/w/images/e/e0/210-Banner.png }} {{#widget:Header}} {{RandomNews}} k2793zkesn9gwaqatkob1yrxdmab65t 15436 15434 2015-03-18T20:06:50Z Patrick 2 15436 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image:src=https://www.whonix.org/w/skins/common/images/135px_Whonix_lock.png }} {{#widget:Header}} {{RandomNews}} oui7xkqweuup01vhx905yvxih8xlrj6 19426 15436 2015-11-27T18:54:34Z Patrick 2 19426 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image:src=https://www.whonix.org/w/skins/common/images/135px_Whonix_lock.png }} {{#widget:Header}} 46xlbjll9i211y7vanxv5k5ujtmpecj 20113 19426 2015-12-07T11:23:57Z Patrick 2 20113 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/patrick.schleizer |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image:src=https://www.whonix.org/w/skins/common/images/135px_Whonix_lock.png |og:image=https://www.whonix.org/w/images/7/7f/Whonix_logo470x246.png }} {{#widget:Header}} 66k7rdgvjtgak2nfodf619p1c2nj4g2 21270 20113 2016-01-03T15:47:00Z Patrick 2 21270 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image:src=https://www.whonix.org/w/skins/common/images/135px_Whonix_lock.png |og:image=https://www.whonix.org/w/images/7/7f/Whonix_logo470x246.png }} {{#widget:Header}} l9jrri5plre42ih8dl9tsxlmbxe1z8s 21273 21270 2016-01-03T15:52:43Z Patrick 2 21273 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/Whonix |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image:src=https://www.whonix.org/w/skins/common/images/135px_Whonix_lock.png |og:image=https://www.whonix.org/w/images/7/7f/Whonix_logo470x246.png }} {{#widget:Header}} ig1qoh2o5tqithmoz6avfas0ms317g6 24427 21273 2016-06-27T12:19:30Z Patrick 2 24427 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/Whonix |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image:src=https://www.whonix.org/w/images/c/c9/Whonix_logo600x321.png |og:image=https://www.whonix.org/w/images/7/7f/Whonix_logo470x246.png }} {{#widget:Header}} 4wvgrh1clru0nq01hieham3ucsf310i 24498 24427 2016-06-28T19:33:35Z Patrick 2 24498 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/Whonix |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image:src=https://www.whonix.org/w/images/c/c9/Whonix_logo600x321.png |og:image=https://www.whonix.org/w/images/4/47/Whonix_Facebook_Social_Share.png }} {{#widget:Header}} pe4pmx49xlgevjlboh87g31co0t18lx 27163 24498 2017-01-03T17:49:26Z Patrick 2 27163 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/Whonix |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |twitter:image=https://www.whonix.org/w/images/c/c9/Whonix_logo600x321.png |og:image=https://www.whonix.org/w/images/4/47/Whonix_Facebook_Social_Share.png }} {{#widget:Header}} e8gvcl98dnvvt6ct4cqv66stq2ayjam 27165 27163 2017-01-03T18:17:28Z Patrick 2 27165 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/Whonix |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |image=https://www.whonix.org/w/images/4/47/Whonix_Facebook_Social_Share.png }} {{#widget:Header}} 0h6o96o4u5trcd65qnsqjdvtf38mcgf 31808 27165 2018-01-06T04:29:04Z Mrscreenshot 4497 Protected "[[Template:Header]]" ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite)) 31808 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/Whonix |article:author=https://www.facebook.com/Whonix |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |image=https://www.whonix.org/w/images/4/47/Whonix_Facebook_Social_Share.png }} {{#widget:Header}} 0h6o96o4u5trcd65qnsqjdvtf38mcgf 45485 31808 2019-04-25T11:39:49Z Patrick 2 Text replacement - "/Whonix" to "/{{project_name_short}}" 45485 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |article:author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |image=https://www.whonix.org/w/images/4/47/{{project_name_short}}_Facebook_Social_Share.png }} {{#widget:Header}} 4fp1mdwt6ravupwqr7wz9d4glrgodba 51786 45485 2019-10-29T14:03:23Z Patrick 2 51786 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |article:author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 |fb:app_id=606207202785157 |twitter:card=summary_large_image |twitter:site=@Whonix |twitter:domain=Whonix |twitter:creator=@Whonix |image=https://www.whonix.org/w/images/4/47/Whonix_Facebook_Social_Share.png }} {{#widget:Header}} pm2ax4sua04r7t5rr8fi8wrstws211k 51824 51786 2019-10-31T14:42:06Z Patrick 2 51824 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} {{#widget:Header}} ntynyl2543ceq98suujyl65mhc4f3jv 52321 51824 2019-11-08T09:08:47Z Patrick 2 52321 wikitext text/x-wiki [[File:Donate.png|thumbnail|125px|alt=Donate|link=#Donate|[[Donate]]]] {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} {{#widget:Header}} jjfy2r0io0q5i64p1nrto33e0ej4o9n 52329 52321 2019-11-08T09:23:50Z Patrick 2 52329 wikitext text/x-wiki [[File:Donate.png|thumbnail|125px|alt=Donate|link=Donate|[[Donate]]]] {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} {{#widget:Header}} 8rwsvd61qysyfrhxq7bbwl7yby045v0 52384 52329 2019-11-08T15:24:01Z Patrick 2 52384 wikitext text/x-wiki [[File:Donate.png|thumbnail|125px|alt=Donate|link=Donate|[[Donate]]]] {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} 73mxhyehle14zfb3qsb4j406x6orgkj 53228 52384 2019-12-04T06:44:08Z Patrick 2 53228 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} 1t4jsz685bl3dgkgwzcak6onjuc64ol 54293 53228 2020-01-22T18:50:06Z Patrick 2 Blanked the page 54293 wikitext text/x-wiki phoiac9h4m842xq45sp7s6u21eteeq1 54294 54293 2020-01-22T18:50:26Z Patrick 2 54294 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} 1t4jsz685bl3dgkgwzcak6onjuc64ol 54295 54294 2020-01-22T18:51:17Z Patrick 2 54295 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} <!--comment--> aifuyvafmyejarol53nsraoxol6qdxz 54296 54295 2020-01-22T18:51:52Z Patrick 2 54296 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} <!--testcomment--> 396xv21qowzi7x8imopewv8ynzner5k 54297 54296 2020-01-22T18:52:10Z Patrick 2 54297 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} 1t4jsz685bl3dgkgwzcak6onjuc64ol 54298 54297 2020-01-22T18:53:12Z Patrick 2 54298 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} <noinclude>test</noinclude> r1bxbj2aj0xhjeszqyyfz446yv6rvkt 54299 54298 2020-01-22T18:54:24Z Patrick 2 54299 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} &zwnj; 1a8nnii8scqxj0iel584dyx14r83qzy 54300 54299 2020-01-22T18:54:36Z Patrick 2 54300 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }}&zwnj; pjq547xr99g4onp6znxhvx4922fwq9r 54301 54300 2020-01-22T18:55:51Z Patrick 2 54301 wikitext text/x-wiki {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} 1t4jsz685bl3dgkgwzcak6onjuc64ol 54302 54301 2020-01-22T18:57:12Z Patrick 2 54302 wikitext text/x-wiki <includeonly>This is a template. </includeonly> {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} e26x0tv1a6ryfx7g6kqvssez8392a8n 54303 54302 2020-01-22T18:58:51Z Patrick 2 54303 wikitext text/x-wiki <includeonly>This is a template. </includeonly> <nowiki></nowiki> {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} nffdl3fbrjkf1i18qxee054mybloele 54304 54303 2020-01-22T18:59:22Z Patrick 2 54304 wikitext text/x-wiki <nowiki></nowiki> {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} m8ns9mmo46nqcu8d5mawqjyx308pv6p 54311 54304 2020-01-22T19:07:18Z Patrick 2 Replaced content with "<nowiki></nowiki>" 54311 wikitext text/x-wiki <nowiki></nowiki> 5piame0cpweko5j83shgekca1bwnrtu 56051 54311 2020-04-19T17:32:03Z Patrick 2 56051 wikitext text/x-wiki <nowiki></nowiki> {{#seo: |title_mode=replace }} 88hxfolwls3ehzon79fp42e4qd7j1b9 56232 56051 2020-04-26T09:41:15Z Patrick 2 56232 wikitext text/x-wiki <nowiki></nowiki> {{#seo: |title_mode=replace |title={{PAGENAME}} }} n8gft7pv1vf6je8rvg66iecl88fa8xx 56247 56232 2020-04-26T11:21:13Z Patrick 2 56247 wikitext text/x-wiki <nowiki></nowiki> {{#seo: |title_mode=replace }} 88hxfolwls3ehzon79fp42e4qd7j1b9 77195 56247 2022-01-13T15:29:18Z Hans 5031 77195 wikitext text/x-wiki <nowiki></nowiki> {{#seo: |title_mode=replace }} {{#css:Mediawiki:Header2.css}} {{#widget:Header2|page={{FULLPAGENAME}}}} mw9wf9fkr7whnb4ugyrt03u0kbjowe5 77230 77195 2022-01-13T16:58:57Z Hans 5031 77230 wikitext text/x-wiki {{#css:Mediawiki:Header2.css}} <nowiki></nowiki> {{#seo: |title_mode=replace }}{{#widget:Header2|page={{FULLPAGENAME}}}} srhzc7w4ak0w4gqhbc8gc3m9pud6578 77231 77230 2022-01-13T16:59:36Z Hans 5031 77231 wikitext text/x-wiki {{#css:Mediawiki:Header2.css}} <nowiki></nowiki> {{#seo: |title_mode=replace }} {{#widget:Header2|page={{FULLPAGENAME}}}} qy09nmxq3ewiac4qt9u21787jxhbs0u 77543 77231 2022-01-15T15:49:16Z Hans 5031 77543 wikitext text/x-wiki {{#css:Mediawiki:Header2.css}} {{#css:MediaWiki:SiteSpecific.css}} <nowiki></nowiki> {{#seo: |title_mode=replace }} {{#widget:Header2|page={{FULLPAGENAME}}}} 6wxtvgn8j8aognjcce6yvp28adbwvhz 77645 77543 2022-01-17T13:51:26Z Hans 5031 77645 wikitext text/x-wiki {{#css:Mediawiki:Header2.css}} {{#css:MediaWiki:SiteSpecific.css}} {{#widget:Header2|page={{FULLPAGENAME}}}} 2e27rb6vk6t3a4h1a7xyo76i3yg9ctu 77646 77645 2022-01-17T13:51:46Z Hans 5031 77646 wikitext text/x-wiki {{#css:Mediawiki:Header2.css}} {{#css:MediaWiki:SiteSpecific.css}} <nowiki></nowiki> {{#seo: |title_mode=replace }} {{#widget:Header2|page={{FULLPAGENAME}}}} 6wxtvgn8j8aognjcce6yvp28adbwvhz 77647 77646 2022-01-17T13:52:04Z Hans 5031 Blanked the page 77647 wikitext text/x-wiki phoiac9h4m842xq45sp7s6u21eteeq1 77648 77647 2022-01-17T13:52:12Z Hans 5031 77648 wikitext text/x-wiki {{#css:Mediawiki:Header2.css}} {{#css:MediaWiki:SiteSpecific.css}} <nowiki></nowiki> {{#seo: |title_mode=replace }} {{#widget:Header2|page={{FULLPAGENAME}}}} 6wxtvgn8j8aognjcce6yvp28adbwvhz 77650 77648 2022-01-17T13:52:57Z Hans 5031 Blanked the page 77650 wikitext text/x-wiki phoiac9h4m842xq45sp7s6u21eteeq1 77651 77650 2022-01-17T13:53:34Z Hans 5031 77651 wikitext text/x-wiki {{#css:Mediawiki:Header2.css}} {{#css:MediaWiki:SiteSpecific.css}} {{#seo: |title_mode=replace }} {{#widget:Header2|page={{FULLPAGENAME}}}} rzrxmbtjodmc0xxnaw14gczv50vc0n6 77654 77651 2022-01-17T13:57:32Z Hans 5031 77654 wikitext text/x-wiki {{#css:Mediawiki:Header2.css}}{{#css:MediaWiki:SiteSpecific.css}}{{#seo:|title_mode=replace}}{{#widget:Header2|page={{FULLPAGENAME}}}} n4f67x3yjis0gjn8f9uimhwipvw478h 77718 77654 2022-01-17T16:08:22Z Hans 5031 77718 wikitext text/x-wiki {{#css:Mediawiki:Header.css}}{{#css:MediaWiki:SiteSpecific.css}}{{#seo:|title_mode=replace}}{{#widget:Header|page={{FULLPAGENAME}}}} 8hgaqlgcgnang4awch1l4uilz399gie 78569 77718 2022-01-26T19:35:57Z Patrick 2 78569 wikitext text/x-wiki {{#css:Mediawiki:Header.css}}{{#css:MediaWiki:SiteSpecific.css}}{{#widget:Header|page={{FULLPAGENAME}}}} 9t3dbdwlbwqxgag3w3ldubp8yw7wre5 79137 78569 2022-02-02T10:26:06Z Hans 5031 79137 wikitext text/x-wiki {{#css:Mediawiki:Header.css}}{{#css:MediaWiki:SiteSpecific.css}}{{#widget:Header|page={{FULLPAGENAME|url={{localurl:page name |query_string}}}}}} r3mgw81rlk7aj0fkjc4f1qstayaze5w 79139 79137 2022-02-02T10:29:19Z Hans 5031 79139 wikitext text/x-wiki {{#css:Mediawiki:Header.css}}{{#css:MediaWiki:SiteSpecific.css}}{{#widget:Header|page={{FULLPAGENAME|url={{localurl:{{FULLPAGENAME}} |query_string}}}}}} s7qt09smw67hc6vle8ojmmi98rjtuyh 79140 79139 2022-02-02T10:29:47Z Hans 5031 79140 wikitext text/x-wiki {{#css:Mediawiki:Header.css}}{{#css:MediaWiki:SiteSpecific.css}}{{#widget:Header|page={{FULLPAGENAME}}|url={{localurl:{{FULLPAGENAME}} |query_string}}}} 7cxl768yz9j58wsum8rcw5zad23xjvs 79141 79140 2022-02-02T10:30:11Z Hans 5031 79141 wikitext text/x-wiki {{#css:Mediawiki:Header.css}}{{#css:MediaWiki:SiteSpecific.css}}{{#widget:Header|page={{FULLPAGENAME}}|url={{localurl:page name |query_string}}}} ppd245chcuzkx1pi4waz2zjf41sogjn 79142 79141 2022-02-02T10:39:44Z Hans 5031 79142 wikitext text/x-wiki {{#css:Mediawiki:Header.css}}{{#css:MediaWiki:SiteSpecific.css}}{{#widget:Header|page={{FULLPAGENAME}}}} 9t3dbdwlbwqxgag3w3ldubp8yw7wre5 79144 79142 2022-02-02T10:47:23Z Hans 5031 79144 wikitext text/x-wiki {{#css:Mediawiki:Header.css}}{{#css:MediaWiki:SiteSpecific.css}}{{#widget:Header|page={{FULLPAGENAME}}|revision={{REVISIONID}}}} srvrznz489kta12w2reeg48axb4de4o 79382 79144 2022-02-04T10:33:34Z Hans 5031 79382 wikitext text/x-wiki {{#css:Mediawiki:Header.css}}{{#widget:Header|page={{FULLPAGENAME}}|revision={{REVISIONID}}}} fcas5otkunuvbv914zk562oxjpvsevr 79385 79382 2022-02-04T10:38:04Z Hans 5031 Undo revision 79382 by [[Special:Contributions/Hans|Hans]] ([[User talk:Hans|talk]]) 79385 wikitext text/x-wiki {{#css:Mediawiki:Header.css}}{{#css:MediaWiki:SiteSpecific.css}}{{#css:MediaWiki:Sitenotice.css}}{{#widget:Header|page={{FULLPAGENAME}}|revision={{REVISIONID}}}} jaw7lt3yuvhoi2dpr6l6k05p64fia2e 82024 79385 2022-03-05T11:55:33Z Patrick 2 82024 wikitext text/x-wiki {{#css:Mediawiki:Header.css}}{{#css:MediaWiki:SiteSpecific.css}}{{#css:MediaWiki:Sitenotice.css}}{{#widget:Header|page={{FULLPAGENAME}}|revision={{REVISIONID}}}}{{#seo:|type=website}} 0uz5z063rwdrs5wobwkcvg4tpn0nleh 82026 82024 2022-03-05T11:58:11Z Patrick 2 82026 wikitext text/x-wiki {{#css:Mediawiki:Header.css}}{{#css:MediaWiki:SiteSpecific.css}}{{#css:MediaWiki:Sitenotice.css}}{{#widget:Header|page={{FULLPAGENAME}}|revision={{REVISIONID}}}}{{#seo: |type=website }} bh8pflx996og5sdw66zaqyn8tlrjptz 82691 82026 2022-03-15T09:43:49Z Hans 5031 82691 wikitext text/x-wiki {{#css:Mediawiki:Header.css}}{{#css:MediaWiki:SiteSpecific.css}}{{#css:MediaWiki:Sitenotice.css}}{{#widget:Header|page={{FULLPAGENAME}}|revision={{REVISIONID}}}}{{#seo: |type=website }}{{#widget:FlyInNotification}} 888iwtznyon161u5zjdxwbqjjq5ze1x 84674 82691 2022-07-26T14:47:31Z Hans 5031 84674 wikitext text/x-wiki {{#css:Mediawiki:LocalSkin.css}}{{#css:MediaWiki:Sitenotice_LocalSkin.css}}{{#css:Mediawiki:Header.css}}{{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} }}{{#seo: |type=website }}{{FlyInNotification |headline=Sorry to interrupt! |text=Do you use {{project_name}} regularly? Do you want to help sustain and grow the project? Then |linktext= Learn more about our 10 year success story and maybe donate! }} eqz9hrs8n1g509iac3rmq7gteu6tfzg 84728 84674 2022-07-27T12:46:29Z Patrick 2 84728 wikitext text/x-wiki {{#css:Mediawiki:LocalSkin.css}}{{#css:MediaWiki:Sitenotice_LocalSkin.css}}{{#css:Mediawiki:Header.css}}{{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} }}{{#seo: |type=website }}{{FlyInNotification |headline=Sorry to interrupt! |text=Do you use {{project_name_short}} regularly? Do you want to help sustain and grow the project? Then |linktext= Learn more about our 10 year success story and maybe donate! }} 5icyatrj3ro19ropjfs0o9fhkj23lo7 85024 84728 2022-08-02T10:20:44Z Hans 5031 85024 wikitext text/x-wiki {{#css:/mw-combined-headercss.min.css}} {{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} }}{{#seo: |type=website }}{{FlyInNotification |headline = Sorry to interrupt! |text = Do you use {{project_name}} regularly? Do you want to help sustain and grow the project? Then |linktext = Learn more about our 10 year success story and maybe donate! }} prhak1mc32i49c4ov6b89lnk3au9pjb 85032 85024 2022-08-02T10:40:25Z Hans 5031 85032 wikitext text/x-wiki {{#css:/mw-combined-headercss.min.css}} {{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} }}{{#seo: |type=website }}{{FlyInNotification |headline = Sorry to interrupt! |text = Do you use {{project_name_long}} regularly? Do you want to help sustain and grow the project? Then |linktext = Learn more about our 10 year success story and maybe donate! }} dxlofqlnmctui9tabr1r7bjtt26k39j 85034 85032 2022-08-02T11:05:22Z Patrick 2 85034 wikitext text/x-wiki {{#css:/mw-combined-headercss.min.css}} {{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} }}{{#seo: |type=website }}{{FlyInNotification |headline = Sorry to interrupt! |text = Do you use {{project_name_short}} regularly? Do you want to help sustain and grow the project? Then |linktext = Learn more about our 10 year success story and maybe donate! }} 4osc8avp2qehuxphg363q7zfkg6qotm 85276 85034 2022-08-05T09:00:19Z Patrick 2 85276 wikitext text/x-wiki {{#css:/mw-combined-headercss.min.css}}{{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} }}{{#seo: |type=website }}{{FlyInNotification |headline = Sorry to interrupt! |text = Do you use {{project_name_short}} regularly? Do you want to help sustain and grow the project? Then |linktext = Learn more about our 10 year success story and maybe donate! }} lrjd26k2ejkkjpkn1llnqcmfg6ecmvh 85763 85276 2022-08-12T15:26:27Z Patrick 2 remove-trailing-spaces 85763 wikitext text/x-wiki {{#css:/mw-combined-headercss.min.css}}{{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} }}{{#seo: |type=website }}{{FlyInNotification |headline = Sorry to interrupt! |text = Do you use {{project_name_short}} regularly? Do you want to help sustain and grow the project? Then |linktext = Learn more about our 10 year success story and maybe donate! }} bubm2ufjm3nl8gu9w9es5v2rrv46iyv 89124 85763 2022-10-28T10:06:01Z Hans 5031 89124 wikitext text/x-wiki {{#css:/mw-combined-skin.min.css}}{{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} }}{{#seo: |type=website }}{{FlyInNotification |headline = Sorry to interrupt! |text = Do you use {{project_name_short}} regularly? Do you want to help sustain and grow the project? Then |linktext = Learn more about our 10 year success story and maybe donate! }} 2vr271ji2ddo82sxy7h2vqdngker21n 89125 89124 2022-10-28T10:06:55Z Hans 5031 89125 wikitext text/x-wiki {{#css:/mw-combined-skincss.min.css}}{{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} }}{{#seo: |type=website }}{{FlyInNotification |headline = Sorry to interrupt! |text = Do you use {{project_name_short}} regularly? Do you want to help sustain and grow the project? Then |linktext = Learn more about our 10 year success story and maybe donate! }} ep7q22qz8zijazve39ca5eizxpluyoe 89450 89125 2022-11-15T11:59:39Z Hans 5031 89450 wikitext text/x-wiki {{#css:/mw-combined-skincss.min.css}}{{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} }} {{#seo: |type=website }}{{FlyInNotification |headline = Sorry to interrupt! |text = Do you use {{project_name_short}} regularly? Do you want to help sustain and grow the project? Then |linktext = Learn more about our 10 year success story and maybe donate! }} 3rvk4fivf52xocvrp245368yjhs035k 92196 89450 2023-01-20T14:41:59Z Hans 5031 92196 wikitext text/x-wiki {{#css:/mw-combined-skincss.min.css}}{{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} |textLogo=/w/images/c/c1/Whonix-logo-text.svg }} {{#seo: |type=website }}{{FlyInNotification |headline = Sorry to interrupt! |text = Do you use {{project_name_short}} regularly? Do you want to help sustain and grow the project? Then |linktext = Learn more about our 10 year success story and maybe donate! }} ft3wmotizsd19gmvl1cwk9m4no5uy21 92257 92196 2023-01-23T14:24:31Z Hans 5031 92257 wikitext text/x-wiki {{#css:/mw-combined-skincss.min.css}}{{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} |textLogoAttributes= src="/w/images/c/c1/Whonix-logo-text.svg" width="135" height="32" }} {{#seo: |type=website }}{{FlyInNotification |headline = Sorry to interrupt! |text = Do you use {{project_name_short}} regularly? Do you want to help sustain and grow the project? Then |linktext = Learn more about our 10 year success story and maybe donate! }} tphmf2c289o8nqyfio62hoo87stqfoz 92296 92257 2023-01-23T19:06:37Z Patrick 2 92296 wikitext text/x-wiki {{#css:/mw-combined-skincss.min.css}}{{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} |textLogoAttributes= src="/w/images/c/c1/Whonix-logo-text.svg" width="135" height="32" alt="{{project_name_short}}" }} {{#seo: |type=website }}{{FlyInNotification |headline = Sorry to interrupt! |text = Do you use {{project_name_short}} regularly? Do you want to help sustain and grow the project? Then |linktext = Learn more about our 10 year success story and maybe donate! }} 1o622lhq4ols89rvpcq9jx0cvwccciz 92814 92296 2023-03-01T16:58:45Z Hans 5031 92814 wikitext text/x-wiki {{HeaderMultiWiki}} {{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} |textLogoAttributes= src="/w/images/c/c1/Whonix-logo-text.svg" width="135" height="32" alt="{{project_name_short}}" }} {{#seo: |type=website }}{{FlyInNotification |headline = Sorry to interrupt! |text = Do you use {{project_name_short}} regularly? Do you want to help sustain and grow the project? Then |linktext = Learn more about our 10 year success story and maybe donate! }} dx1zi6ilh6z8krisnwkumoc2f9cgfgy 92815 92814 2023-03-01T16:58:56Z Hans 5031 92815 wikitext text/x-wiki {{HeaderMultiWiki}}{{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} |textLogoAttributes= src="/w/images/c/c1/Whonix-logo-text.svg" width="135" height="32" alt="{{project_name_short}}" }} {{#seo: |type=website }}{{FlyInNotification |headline = Sorry to interrupt! |text = Do you use {{project_name_short}} regularly? Do you want to help sustain and grow the project? Then |linktext = Learn more about our 10 year success story and maybe donate! }} 3vrfcpap6fczbbjjdp2xb2q9sut758d 93724 92815 2023-05-05T09:24:19Z Patrick 2 93724 wikitext text/x-wiki {{HeaderMultiWiki}}{{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} |textLogoAttributes= src="/w/images/c/c1/Whonix-logo-text.svg" width="135" height="32" alt="{{project_name_short}}" }} {{#seo: |type=website }}{{FlyInNotification |imgSrc=/w/images/thumb/e/e8/Flyin-donate-promo.jpg/300px-Flyin-donate-promo.jpg |imgWidth=300 |imgHeight=215 |imgLink=/wiki/Donate |headline=Your support makes<br>all the difference! |html=We believe security software like {{project_name_short}} needs to remain open source and independent. <b>Would you help</b> sustain and grow the project? Learn more about our <a href="/wiki/Donate" target="_blank">10 year success story and maybe DONATE!</a> }} ci8irgrdgnto16cvql5owpu8qyis6ru 93784 93724 2023-05-06T10:54:41Z Hans 5031 93784 wikitext text/x-wiki {{HeaderMultiWiki}}{{#widget:Header |page={{FULLPAGENAME}} |revision={{REVISIONID}} |projectDomainClearnet={{project_clearnet}} |textLogoAttributes= src="/w/images/c/c1/Whonix-logo-text.svg" width="135" height="32" alt="{{project_name_short}}" }} {{#seo: |type=website }} lor7bi4x1euf2edlo843ssdgumnf6pl 95741 93784 2023-08-23T09:35:44Z Hans 5031 95741 wikitext text/x-wiki {{HeaderMultiWiki}} {{#seo: |type=website }} {{#widget:HeaderMultiWiki |part=1 |textLogoAttributes= src="/w/images/c/c1/Whonix-logo-text.svg" width="135" height="32" alt="{{project_name_short}}" }} {{#widget:Header |part=1 }} {{#widget:HeaderMultiWiki |part=1 |page={{FULLPAGENAME}} |revision={{REVISIONID}} }} 1b4b4ry75v0v8d8rz22wrw9uy9iqvdb 95743 95741 2023-08-23T09:39:28Z Hans 5031 95743 wikitext text/x-wiki {{HeaderMultiWiki}} {{#seo: |type=website }} {{#widget:HeaderMultiWiki |part=1 |textLogoAttributes= src="/w/images/c/c1/Whonix-logo-text.svg" width="135" height="32" alt="{{project_name_short}}" }} {{#widget:Header |part=1 }} {{#widget:HeaderMultiWiki |part=2 |page={{FULLPAGENAME}} |revision={{REVISIONID}} }} ckh0nym5v81tobzjlgjtpmbja74uau6 95745 95743 2023-08-23T09:40:42Z Hans 5031 95745 wikitext text/x-wiki {{HeaderMultiWiki}}{{#seo: |type=website }}{{#widget:HeaderMultiWiki |part=1 |textLogoAttributes= src="/w/images/c/c1/Whonix-logo-text.svg" width="135" height="32" alt="{{project_name_short}}" }}{{#widget:Header |part=1 }}{{#widget:HeaderMultiWiki |part=2 |page={{FULLPAGENAME}} |revision={{REVISIONID}} }} j0wpaohw7q916tj2j05udofwkr28rcp 95746 95745 2023-08-23T10:20:07Z Hans 5031 95746 wikitext text/x-wiki {{GoogleOff | content= {{HeaderMultiWiki}}{{#seo: |type=website }}{{#widget:HeaderMultiWiki |part=1 |textLogoAttributes= src="/w/images/c/c1/Whonix-logo-text.svg" width="135" height="32" alt="{{project_name_short}}" }}{{#widget:Header |part=1 }}{{#widget:HeaderMultiWiki |part=2 |page={{FULLPAGENAME}} |revision={{REVISIONID}} }} }} 3xfr0us8wefr6xui0needj9wouwkzvb 95748 95746 2023-08-23T10:28:16Z Hans 5031 95748 wikitext text/x-wiki {{GoogleOff | content= {{HeaderMultiWiki}}{{#seo: |type=website }}{{#widget:HeaderMultiWiki |part=1 }}{{#widget:Header |part=1 }}{{#widget:HeaderMultiWiki |part=2 |page={{FULLPAGENAME}} |revision={{REVISIONID}} }} }} 0f5h0dmrdflc0rr0kvoy3vmtqnb0xj0 95755 95748 2023-08-23T12:17:23Z Hans 5031 95755 wikitext text/x-wiki {{GoogleOff | content= {{#css:/mw-combined-skincss.min.css }}{{#css: body.ctbc_hide-sitenotice-{{Sitenotice_id}}_true #siteNotice .sitenotice-body[data-sitenotice-id="{{Sitenotice_id}}"] { display: none !important; } }}{{#seo: |type=website }}{{#widget:HeaderMultiWiki |part=1 }}{{#widget:Header |part=1 }}{{#widget:HeaderMultiWiki |part=2 |page={{FULLPAGENAME}} |revision={{REVISIONID}} }} }} <noinclude> [[Category:MultiWiki]] </noinclude> thxwogkrfo0u9tznl8ioxhvpi4ic83d 95756 95755 2023-08-23T12:21:34Z Hans 5031 95756 wikitext text/x-wiki {{GoogleOff | content= {{#css:/mw-combined-skincss.min.css }}{{#css: body.ctbc_hide-sitenotice-{{Sitenotice_id}}_true #siteNotice .sitenotice-body[data-sitenotice-id="{{Sitenotice_id}}"] { display: none !important; } }}{{#seo: |type=website }}{{#widget:Header |part=1 }}{{#widget:HeaderLocalWiki |part=1 }}{{#widget:Header |part=2 |page={{FULLPAGENAME}} |revision={{REVISIONID}} }} }} <noinclude> [[Category:MultiWiki]] </noinclude> 8rne5gz9qfntpjsosph01xpffai0ubv 98731 95756 2024-01-31T14:55:28Z Patrick 2 mediawiki-shell-bot-mirror-multi-wiki-page-from-kicksecure-to-whonix 98731 wikitext text/x-wiki {{GoogleOff | content= {{#css:/mw-combined-skincss.min.css?hsversion={{Hsversion}} }}{{#css: body.ctbc_hide-sitenotice-{{Sitenotice_id}}_true #siteNotice .sitenotice-body[data-sitenotice-id="{{Sitenotice_id}}"] { display: none !important; } }}{{#seo: |type=website }}{{#widget:Header |part=1 }}{{#widget:HeaderLocalWiki |part=1 }}{{#widget:Header |part=2 |page={{FULLPAGENAME}} |revision={{REVISIONID}} }} }} <noinclude> [[Category:MultiWiki]] </noinclude> hf0do25zmro9yn990poxyjmer04gcmv 101953 98731 2024-10-10T09:18:01Z Patrick 2 mediawiki-shell-bot-mirror-multi-wiki-page-from-kicksecure-to-whonix 101953 wikitext text/x-wiki {{GoogleOff | content= {{#css:/mw-combined-skincss.min.css}}{{#css: body.ctbc_hide-sitenotice-{{Sitenotice_id}}_true #siteNotice .sitenotice-body[data-sitenotice-id="{{Sitenotice_id}}"] { display: none !important; } }}{{#seo: |type=website }}{{#widget:Header |part=1 }}{{#widget:HeaderLocalWiki |part=1 }}{{#widget:Header |part=2 |page={{FULLPAGENAME}} |revision={{REVISIONID}} }} }} <noinclude> [[Category:MultiWiki]] </noinclude> pm8urbtcq880rxcx0a4jll9qihlvmh8 103178 101953 2025-03-24T13:38:03Z Hans 5031 103178 wikitext text/x-wiki {{GoogleOff | content= {{#css:/mw-combined-skincss.min.css}}{{#css: body.ctbc_hide-sitenotice-{{Sitenotice_id}}_true #siteNotice .sitenotice-banner[data-banner-id="{{Sitenotice_id}}"] { display: none !important; } #siteNotice .sitenotice-banner:not([data-banner-id="{{Sitenotice_id}}"]) { display: none !important; } }}{{#seo: |type=website }}{{#widget:Header |part=1 }}{{#widget:HeaderLocalWiki |part=1 }}{{#widget:Header |part=2 |page={{FULLPAGENAME}} |revision={{REVISIONID}} }} }} <noinclude> [[Category:MultiWiki]] </noinclude> tk01bct3t2w3qyla9bdd66dwwo28afp 10 15 32 2013-06-27T15:15:30Z Fortasse 1 Created page with "<!--Blank for now-->" 32 wikitext text/x-wiki <!--Blank for now--> 5uaw0vkkohacmk3h47991c0nx1r9gh1 87 32 2013-06-27T21:57:52Z Patrick 2 87 wikitext text/x-wiki This is a wiki. Want to improve this page? Contact us! <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> [[File:Whonix-ad.png|options|caption]] inkzf1xnzlwr4pjmfvgob39kkahr632 88 87 2013-06-27T21:59:14Z Patrick 2 88 wikitext text/x-wiki = Footer = This is a wiki. Want to improve this page? Contact us! <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> [[File:Whonix-ad.png|options|caption]] b3ifrg9ma1ph4p85hk121u4yx2azfyz 716 88 2013-07-10T09:15:31Z Fortasse 1 716 wikitext text/x-wiki = Footer = This is a wiki. Want to improve this page? [[Contact | Contact us!]] <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> [[File:Whonix-ad.png|options|caption]] kvsgh5212egs2aq4fery3riw68dr7sw 720 716 2013-07-10T09:57:37Z Fortasse 1 720 wikitext text/x-wiki = Footer = This is a wiki. Want to improve this page? Edit it using the link in the top right! IP addresses are scrubbed, but editing over Tor is recommended. Questions? [[Contact | Contact us!]] <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> [[File:Whonix-ad.png|options|caption]] 50c2hqvk0zx2uwggxtqppsmwf9cgq1b 721 720 2013-07-10T10:02:29Z Fortasse 1 721 wikitext text/x-wiki = Footer = This is a wiki. Want to improve this page? Edit it using the link in the top right! IP addresses are scrubbed, but editing over Tor is recommended. Questions? [[Contact | Contact us!]] Note: IP edits are held for moderation. <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> [[File:Whonix-ad.png|options|caption]] 5q2fblow1v29dw4icunspucyyp4t0e0 1260 721 2013-07-12T21:28:54Z Patrick 2 1260 wikitext text/x-wiki = Footer = This is a wiki. Want to improve this page? Edit it using the link in the top right! IP addresses are scrubbed, but editing over Tor is recommended. Questions? [[Contact | Contact us!]] Note: IP edits are held for moderation. <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> [[Image:OIN_logo_200px.png|left|frame|link=http://www.openinventionnetwork.com|Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the [https://en.wikipedia.org/wiki/Open_Invention_Network Open Invention Network].]] [[File:Whonix-ad.png|left|caption]] pdhybrxr6upx7un43xwa56i99h8vm46 1470 1260 2013-07-17T19:13:33Z Patrick 2 1470 wikitext text/x-wiki = Footer = This is a wiki. Want to improve this page? Edit it using the link in the top right! IP addresses are scrubbed, but editing over Tor is recommended. Questions? [[Contact | Contact us!]] Note: IP edits are held for moderation. <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> <gallery> Image:donate.png|link=Contribute#Donate|[[Contribute#Donate|Donate to Whonix!]] </gallery> kyo2yos1ieimked18kqiqinpj7jxuvk 1476 1470 2013-07-17T19:22:07Z Patrick 2 /* Footer */ 1476 wikitext text/x-wiki = Footer = This is a wiki. Want to improve this page? Edit it using the link in the top right! IP addresses are scrubbed, but editing over Tor is recommended. Questions? [[Contact | Contact us!]] Note: IP edits are held for moderation. <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> <gallery> Image:donate.png|link=Contribute#Donate|[[Donate|Donate to Whonix!]] </gallery> 7mtq8lhmuzgladl6l1drk8s9u0gn9jm 1479 1476 2013-07-17T19:32:30Z Patrick 2 /* Footer */ 1479 wikitext text/x-wiki = Footer = This is a wiki. Want to improve this page? Edit it using the link in the top right! IP addresses are scrubbed, but editing over Tor is recommended. Questions? [[Contact | Contact us!]] Note: IP edits are held for moderation. <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> <gallery> Image:donate.png|link=Donate|[[Donate|Donate to Whonix!]] </gallery> 8vfrhlfj1j3kyun4l41tp7gfmcxm3rd 1773 1479 2013-07-25T18:31:17Z 127.0.0.1 1773 wikitext text/x-wiki = Footer = <font size="-3">This is a wiki. Want to improve this page? Edit it using the link in the top right! IP addresses are scrubbed, but editing over Tor is recommended. Questions? [[Contact | Contact us!]] Note: IP edits are held for moderation.</font> <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> <gallery> Image:donate.png|link=Donate|[[Donate|Donate to Whonix!]] </gallery> ro3qulpsqyg2oowzsfyb823h459n2tx 1776 1773 2013-07-25T21:43:55Z Fortasse 1 adjust per talk page 1776 wikitext text/x-wiki = Footer = <font size="-3">This is a wiki. Want to improve this page? Edit it using the link in the top right! IP addresses are scrubbed, but editing over Tor is recommended. Questions? [[Contact | Contact us!]] Note: IP edits are held for moderation.</font> <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> <font size="-3"> [[Donate|Donate to Whonix!]] </font> m0766fllpqs0kjgpq355nffld49bzjo 1787 1776 2013-07-25T23:04:52Z Fortasse 1 1787 wikitext text/x-wiki = Footer = <font size="-3">This is a wiki. Want to improve this page? Edit it using the link in the top right! IP addresses are scrubbed, but editing over Tor is recommended. Questions? [[Contact | Contact us!]] Note: IP edits are held for moderation.</font> <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> <font size="-3"> [[Donate|Donate to Whonix!]] </font> eigu67i00pk413ztbt5h64gb4u9elnr 1883 1787 2013-07-28T17:44:38Z Anon 10 /* Footer */ 1883 wikitext text/x-wiki = = <font size="-3">This is a wiki. Want to improve this page? Edit it using the link in the top right! IP addresses are scrubbed, but editing over Tor is recommended. Questions? [[Contact | Contact us!]] Note: IP edits are held for moderation.</font> <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> <font size="-3"> [[Donate|Donate to Whonix!]] </font> gild0r8ltxcj60b4b0bcmflwcnk2yjk 1884 1883 2013-07-28T17:51:18Z Anon 10 1884 wikitext text/x-wiki <hr> <font size="-3">This is a wiki. Want to improve this page? Edit it using the link in the top right! IP addresses are scrubbed, but editing over Tor is recommended. Questions? [[Contact | Contact us!]] Note: IP edits are held for moderation.</font> <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> <font size="-3"> [[Donate|Donate to Whonix!]] </font> n205mk3ah6nwawloy6d80q090frcvyf 1885 1884 2013-07-28T17:59:00Z Anon 10 1885 wikitext text/x-wiki <br /><hr> <font size="-3">This is a wiki. Want to improve this page? Edit it using the link in the top right! IP addresses are scrubbed, but editing over Tor is recommended. Questions? [[Contact | Contact us!]] Note: IP edits are held for moderation.</font> <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> <font size="-3"> [[Donate|Donate to Whonix!]] </font> aw31qxi1vv3du00p2ti2jh5hm42xv2z 1936 1885 2013-07-29T05:45:34Z Anon 10 Trying edit link 1936 wikitext text/x-wiki <br /><hr> <font size="-3">This is a wiki. Want to improve this page? <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Questions? [[Contact | Contact us!]] Note: IP edits are held for moderation.</font> <font size="-3">Unless otherwise noted above, content of this particular page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself.</font> <font size="-3"> [[Donate|Donate to Whonix!]] </font> tnflx7dk008nmrw1vs9wni8rhz0jwxv 2279 1936 2013-08-10T20:06:32Z Anon 10 2279 wikitext text/x-wiki <br /><hr> <font size="-3">This is a wiki. Want to improve this page? <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. IP edits are held for moderation. Unless otherwise noted above, content of this page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself. Questions? [[Contact | Contact us!]] [[Donate|Donate to Whonix!]]</font> qp9t2yag5bepkk9rd7tdwkv4m3b9060 2280 2279 2013-08-10T20:09:53Z Anon 10 2280 wikitext text/x-wiki <br /><hr> <font size="-3">This is a wiki. Want to improve this page? <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. IP edits are held for moderation. Unless otherwise noted above, content of this page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself. Questions? [[Contact | Contact us!]] [[Contribute#Donate|Donate to Whonix!]]</font> p8eeu3scr2hm4wp7uhmoqufqdmi5ck3 4553 2280 2013-12-31T09:34:29Z Patrick 2 4553 wikitext text/x-wiki <br /><hr> <font size="-3">This is a wiki. Want to improve this page? <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Unless otherwise noted above, content of this page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) license as Whonix itself. Questions? [[Contact | Contact us!]] [[Contribute#Donate|Donate to Whonix!]]</font> e5dt149zj0o4bltvjwtsw7tnsbel7oc 4554 4553 2013-12-31T09:47:31Z Patrick 2 4554 wikitext text/x-wiki <br /><hr> <font size="-3">This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the [https://en.wikipedia.org/wiki/Open_Invention_Network Open Invention Network]. Unless otherwise noted above, content of this page is copyrighted by [mailto:adrelanos@riseupDOTnet adrelanos] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. Questions? [[Contact|Contact us!]] [[Contribute#Donate|Donate to Whonix!]]</font> 5rvf5rhjat6u69sxs53h7hwckdpgsdg 4763 4554 2014-01-14T17:43:45Z Patrick 2 4763 wikitext text/x-wiki <br /><hr> <font size="-3">This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the [https://en.wikipedia.org/wiki/Open_Invention_Network Open Invention Network]. Unless otherwise noted above, content of this page is copyrighted by [mailto:adrelanos@riseup.net Patrick Schleizer] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. Questions? [[Contact|Contact us!]] [[Contribute#Donate|Donate to Whonix!]]</font> khny3c1m11ssk5ma8ikjndvnryb0b27 6093 4763 2014-02-28T00:15:01Z Patrick 2 6093 wikitext text/x-wiki <br /><hr> <font size="-3">This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the [[File:OIN_logo_200px.png|link=https://en.wikipedia.org/wiki/Open_Invention_Network|alt=Open Invention Network|140px]]. Unless otherwise noted above, content of this page is copyrighted by [mailto:adrelanos@riseup.net Patrick Schleizer] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. Questions? [[Contact|Contact us!]] [[Contribute#Donate|Donate to Whonix!]]</font> ndh4mjh2ysd3cxb1fwcoswdl4wwndx6 6851 6093 2014-03-11T23:03:51Z Patrick 2 6851 wikitext text/x-wiki <br /><hr><font size="-3">[[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|note]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the [[File:OIN_logo_200px.png|link=https://en.wikipedia.org/wiki/Open_Invention_Network|alt=Open Invention Network|140px]]. Unless otherwise noted above, content of this page is copyrighted by [mailto:adrelanos@riseup.net Patrick Schleizer] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> qmglvqcoeug881tn5hw463tf2vj0na8 6857 6851 2014-03-12T00:11:24Z Patrick 2 6857 wikitext text/x-wiki <br /><hr><font size="-3">[[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|note]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the [[File:OIN_logo_200px.png|link=https://en.wikipedia.org/wiki/Open_Invention_Network|alt=Open Invention Network|140px]]. Unless otherwise noted above, content of this page is copyrighted by [mailto:adrelanos@riseup.net Patrick Schleizer] (<html><a href="/patrick.asc">gpg</a></html>) (<html><a href="https://plus.google.com/u/0/112678569435063398972?rel=author">g+</a>)</html> and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> slg3oqumckt2f7cs1569pzomly9ttty 6862 6857 2014-03-12T02:51:45Z Patrick 2 6862 wikitext text/x-wiki <br /><hr><font size="-3"><html><a href="/w/index.php?title=Special:UserLogin&returnto=Main+Page" />Log in</a></html> | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|note]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the [[File:OIN_logo_200px.png|link=https://en.wikipedia.org/wiki/Open_Invention_Network|alt=Open Invention Network|140px]]. Unless otherwise noted above, content of this page is copyrighted by [mailto:adrelanos@riseup.net Patrick Schleizer] (<html><a href="/patrick.asc">gpg</a></html>) (<html><a href="https://plus.google.com/u/0/112678569435063398972?rel=author">g+</a>)</html> and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> ajohkwwdnary4xlj8rykc6h1xbavzuk 6867 6862 2014-03-12T15:39:11Z Patrick 2 6867 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" style="color: #3366BB" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|note]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the [[File:OIN_logo_200px.png|link=https://en.wikipedia.org/wiki/Open_Invention_Network|alt=Open Invention Network|140px]]. Unless otherwise noted above, content of this page is copyrighted by [mailto:adrelanos@riseup.net Patrick Schleizer] (<html><a href="/patrick.asc">gpg</a></html>) (<html><a href="https://plus.google.com/u/0/112678569435063398972?rel=author">g+</a>)</html> and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> dz142orzqqg10vd1zux2971kzwiawp7 6919 6867 2014-03-15T07:47:13Z 127.0.0.1 6919 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|note]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the [[File:OIN_logo_200px.png|link=https://en.wikipedia.org/wiki/Open_Invention_Network|alt=Open Invention Network|140px]]. Unless otherwise noted above, content of this page is copyrighted by [mailto:adrelanos@riseup.net Patrick Schleizer] (<html><a href="/patrick.asc">gpg</a></html>) (<html><a href="https://plus.google.com/u/0/112678569435063398972?rel=author">g+</a>)</html> and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> maknfpz2b32mkmhzj5cobob2ab5h0ug 6921 6919 2014-03-15T08:06:10Z 127.0.0.1 6921 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|[note]]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the [[File:OIN_logo_200px.png|link=https://en.wikipedia.org/wiki/Open_Invention_Network|alt=Open Invention Network|140px]]. Unless otherwise noted above, content of this page is copyrighted by [mailto:adrelanos@riseup.net Patrick Schleizer] (<html><a href="/patrick.asc">gpg</a></html>) (<html><a href="https://plus.google.com/u/0/112678569435063398972?rel=author">g+</a>)</html> and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> l7v70cbetzpxigwyrlbm0bjd4f4sao4 7023 6921 2014-03-23T13:01:26Z Patrick 2 7023 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutzerklärung]] | [[Disclaimer|Haftungsausschluss]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|[note]]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the [[File:OIN_logo_200px.png|link=https://en.wikipedia.org/wiki/Open_Invention_Network|alt=Open Invention Network|140px]]. Unless otherwise noted above, content of this page is copyrighted by [mailto:adrelanos@riseup.net Patrick Schleizer] (<html><a href="/patrick.asc">gpg</a></html>) <!--(<html><a href="https://plus.google.com/u/0/112678569435063398972?rel=author">g+</a>)</html>--> and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> 293zts07qvhnforzf391qptptdi5i9t 7304 7023 2014-04-05T04:58:34Z Patrick 2 7304 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" href="http://kkkkkkkkkk63ava6.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|[note]]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the [[File:OIN_logo_200px.png|link=https://en.wikipedia.org/wiki/Open_Invention_Network|alt=Open Invention Network|140px]]. Unless otherwise noted above, content of this page is copyrighted by [mailto:adrelanos@riseup.net Patrick Schleizer] (<html><a href="/patrick.asc">gpg</a></html>) <!--(<html><a href="https://plus.google.com/u/0/112678569435063398972?rel=author">g+</a>)</html>--> and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> 35e1h6wgb570se2br0i7b3fz7fbzb83 7410 7304 2014-04-08T03:17:45Z Fortasse 1 7410 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" href="http://xxxxxxxxxxh5kyrx.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|[note]]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the [[File:OIN_logo_200px.png|link=https://en.wikipedia.org/wiki/Open_Invention_Network|alt=Open Invention Network|140px]]. Unless otherwise noted above, content of this page is copyrighted by [mailto:adrelanos@riseup.net Patrick Schleizer] (<html><a href="/patrick.asc">gpg</a></html>) <!--(<html><a href="https://plus.google.com/u/0/112678569435063398972?rel=author">g+</a>)</html>--> and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> es3c5jm9hv3x36pb2hg5ox3b4whwywq 7447 7410 2014-04-10T04:21:54Z Patrick 2 7447 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" href="http://xxxxxxxxxxh5kyrx.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|[note]]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the [[File:OIN_logo_200px.png|link=https://en.wikipedia.org/wiki/Open_Invention_Network|alt=Open Invention Network|140px]]. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> 8hyw54torwwn56zao9znr7kn6loh2i3 7512 7447 2014-04-13T14:44:12Z Patrick 2 7512 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" href="http://xxxxxxxxxxh5kyrx.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|[note]]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the [[File:OIN_logo_200px.jpeg|link=https://en.wikipedia.org/wiki/Open_Invention_Network|alt=Open Invention Network|140px]]. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> sxq8lrihl6qbbjwfl6orkorh6w4u75v 7523 7512 2014-04-13T16:21:11Z Patrick 2 7523 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" href="http://xxxxxxxxxxh5kyrx.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|[note]]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> jd88v6a118471vi7m7q65cuzy1qsu5d 7704 7523 2014-05-07T12:58:12Z Patrick 2 7704 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" href="http://xxxxxxxxxxh5kyrx.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|[note]]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> 1mjiw3u3iwcku4gnhvfsndk2iobnt9d 7946 7704 2014-05-28T07:20:53Z Patrick 2 7946 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" href="http://xxxxxxxxxxh5kyrx.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|[note]]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | Share: <html> <a href="https://twitter.com/intent/tweet?url=https://www.whonix.org</html>{{localurl:{{FULLPAGENAME}}}}<html>&text=&via=Whonix">Twitter</a> | <a href="https://facebook.com/sharer.php?u=https://www.whonix.org</html>{{localurl:{{FULLPAGENAME}}}}<html>">Facebook</a> | <a href="https://plus.google.com/share?url=https://www.whonix.org</html>{{localurl:{{FULLPAGENAME}}}}<html>">Google+</a> </html> <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> t5310u75ok84eeg2sli5eauqmj2lyla 7948 7946 2014-05-28T07:22:30Z Patrick 2 7948 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" href="http://xxxxxxxxxxh5kyrx.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|[note]]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://kkkkkkkkkk63ava6.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | Share: {{Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> ck7y6um6ydi7kf0k8799wcg7h32h4so 8062 7948 2014-06-12T21:26:42Z 127.0.0.1 8062 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a class="link-https" href="http://xxxxxxxxxxh5kyrx.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|[note]]]} | [http://whonix.org.nyud.net{{localurl:{{FULLPAGENAME}}}} Mirror] | [https://xxxxxxxxxxh5kyrx.tor2web.org{{localurl:{{FULLPAGENAME}}}} Mirror] | Share: {{Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> 1cfglt9iayhgi4gbpx34ng43l4wxrmm 8135 8062 2014-07-01T14:17:33Z Patrick 2 8135 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a href="http://xxxxxxxxxxh5kyrx.onion</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">.onion</a></html> ^{[[Forcing .onion on Whonix.org|[note]]]} | <html><a href="http://whonix.org.nyud.net</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">Mirror</a></html> | <html><a href="https://xxxxxxxxxxh5kyrx.tor2web.org</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">Mirror</a></html> | Share: {{Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> fsvba4ni2ovrbq5ob4mqi49erhgk6p8 12007 8135 2014-11-09T23:17:54Z Patrick 2 12007 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a href="http://whonix.org.nyud.net</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">Mirror</a></html> | <html><a href="https://xxxxxxxxxxh5kyrx.tor2web.org</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">Mirror</a></html> | Share: {{Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> r5wx77nbdm928r506ey593062ptlf8i 14684 12007 2015-01-27T22:48:57Z Patrick 2 Replaced content with "{{#widget:Footer}}" 14684 wikitext text/x-wiki {{#widget:Footer}} 91vg5ewfnb6ir62netnuolq8pjc67mv 14685 14684 2015-01-27T22:50:19Z Patrick 2 Undo revision 14684 by [[Special:Contributions/Patrick|Patrick]] ([[User talk:Patrick|talk]]) 14685 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a href="http://whonix.org.nyud.net</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">Mirror</a></html> | <html><a href="https://xxxxxxxxxxh5kyrx.tor2web.org</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">Mirror</a></html> | Share: {{Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> r5wx77nbdm928r506ey593062ptlf8i 14687 14685 2015-01-27T22:52:22Z Patrick 2 14687 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | <html><a href="http://whonix.org.nyud.net</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">Mirror</a></html> | <html><a href="https://xxxxxxxxxxh5kyrx.tor2web.org</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">Mirror</a></html> | Share: {{#widget:Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> 9aj4hxobonw0atrb4yw8nrb7l7dr4ga 14700 14687 2015-01-28T19:33:40Z Patrick 2 14700 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | {{Mirror_nyud_net}} | <html><a href="https://xxxxxxxxxxh5kyrx.tor2web.org</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">Mirror</a></html> | Share: {{#widget:Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> azo1y6dvt6m1ixaoa6qkbkzy4cnw2fh 14702 14700 2015-01-28T20:08:53Z Patrick 2 14702 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | {{Mirror_nyud_net}} | <html><a href="https://xxxxxxxxxxh5kyrx.tor2web.org</html>{{localurl:{{FULLPAGENAME}}}}<html>" rel="nofollow">Mirror</a></html> | Share: {{Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> cd3bvqojw1gttv3hbz41taurtnnz71m 14716 14702 2015-01-28T20:26:17Z Patrick 2 14716 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | {{Mirror_nyud_net}} | {{Mirror_tor2web_org}} | Share: {{Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then <html><a href="</html>{{localurl:{{FULLPAGENAME}}|action=edit}}<html>">Edit</a></html> it! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> rc1r4tul34op8dpipwpqlxsfkp3u49g 14722 14716 2015-01-28T20:34:37Z Patrick 2 14722 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | {{Mirror_nyud_net}} | {{Mirror_tor2web_org}} | Share: {{Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix (<html><a href="https://plus.google.com/108150429836421683225" rel="publisher" />g+</a></html>) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> qbpn6bu7wliq8ah7axibj8e0tsog0ml 14724 14722 2015-01-28T20:39:37Z Patrick 2 14724 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | {{Mirror_nyud_net}} | {{Mirror_tor2web_org}} | Share: {{Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? See [https://github.com/Whonix/Whonix/blob/master/debian/copyright Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix ({{#widget:Whonix_g_plus_rel_publisher}}) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> p90ajg3g750zv0du3zcgkq8ug0flp6e 16089 14724 2015-06-26T19:22:42Z Patrick 2 16089 wikitext text/x-wiki <br /><hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | {{Mirror_nyud_net}} | {{Mirror_tor2web_org}} | Share: {{Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? Help welcome, volunteer contributions are happily considered! See [https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix ({{#widget:Whonix_g_plus_rel_publisher}}) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> p4320ygpc7phoaxdgorv3khhhbtehsv 19427 16089 2015-11-27T18:55:17Z Patrick 2 19427 wikitext text/x-wiki <br /><hr>{{RandomNews}}<hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | {{Mirror_nyud_net}} | {{Mirror_tor2web_org}} | Share: {{Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(i2p) coralcdn .sdns .onion .i2p--> This is a wiki. Want to improve this page? Help welcome, volunteer contributions are happily considered! See [https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix ({{#widget:Whonix_g_plus_rel_publisher}}) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> l2fpgnac6192dkwl02u4oxzgv5ein11 19533 19427 2015-12-04T01:24:47Z Patrick 2 Text replacement - "i2p" to "I2P" 19533 wikitext text/x-wiki <br /><hr>{{RandomNews}}<hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | {{Mirror_nyud_net}} | {{Mirror_tor2web_org}} | Share: {{Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(I2P) coralcdn .sdns .onion .I2P--> This is a wiki. Want to improve this page? Help welcome, volunteer contributions are happily considered! See [https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix ({{#widget:Whonix_g_plus_rel_publisher}}) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> hf04heziyr4lfmfcihtt8iqj4ybb8oh 21399 19533 2016-01-06T00:08:46Z Patrick 2 21399 wikitext text/x-wiki <br /><hr>{{RandomNews}}<hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | {{Mirror_nyud_net}} | {{Mirror_tor2web_org}} | Share: {{Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(I2P) coralcdn .sdns .onion .I2P--> This is a wiki. Want to improve this page? Help welcome, volunteer contributions are happily considered! See [https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix ({{#widget:Whonix_g_plus_rel_publisher}}) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. Get a backup of this wiki. * [https://github.com/Whonix/whonix-wiki-backup mediawiki markup] * [https://github.com/WhonixBOT/WhonixWikiBackups mediawiki xml] </font> 1poiirv8n9yqbaouq5ahgvh5r4vjv84 22807 21399 2016-04-03T13:44:58Z Patrick 2 22807 wikitext text/x-wiki <br /><hr>{{RandomNews}}<hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] [https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | {{Mirror_nyud_net}} | {{Mirror_tor2web_org}} | Share: {{Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(I2P) coralcdn .sdns .onion .I2P--> This is a wiki. Want to improve this page? Help welcome, volunteer contributions are happily considered! See [https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix ({{#widget:Whonix_g_plus_rel_publisher}}) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> hf04heziyr4lfmfcihtt8iqj4ybb8oh 23088 22807 2016-04-04T16:39:45Z Patrick 2 23088 wikitext text/x-wiki <br /><hr>{{RandomNews}}<hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] Share: {{Share}} <!-- inspired by http://aboli.sh/ @cnpirates ssl(tor) ssl(I2P) coralcdn .sdns .onion .I2P--> This is a wiki. Want to improve this page? Help welcome, volunteer contributions are happily considered! See [https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix ({{#widget:Whonix_g_plus_rel_publisher}}) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> 76l0zhmeo89r7cs6gpaxjj28hxctnmj 23090 23088 2016-04-04T16:40:18Z Patrick 2 23090 wikitext text/x-wiki <br /><hr>{{RandomNews}}<hr><font size="-3">[[Special:UserLogin|Log in]] | [[Special:OpenIDLogin|OpenID]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] Share: {{Share}} This is a wiki. Want to improve this page? Help welcome, volunteer contributions are happily considered! See [https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix ({{#widget:Whonix_g_plus_rel_publisher}}) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> 0s6v3f4pketphu2ruglnpjagb3vvtn4 23091 23090 2016-04-04T16:41:06Z Patrick 2 23091 wikitext text/x-wiki <br /><hr>{{RandomNews}}<hr><font size="-3">[[Special:UserLogin|Log in]] | [[Contact|Contact]] | [[Impressum]] | [[Datenschutz|Datenschutz]] | [[Disclaimer|Haftungsausschluss]] | [[Investors]] | [[Donate]] Share: {{Share}} This is a wiki. Want to improve this page? Help welcome, volunteer contributions are happily considered! See [https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Whonix ({{#widget:Whonix_g_plus_rel_publisher}}) is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted above, content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Free (as in speech) [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. </font> keuws4xyxjq8idcami40ty84lz4as46 23093 23091 2016-04-04T17:23:24Z Patrick 2 Replaced content with "<br /><hr>{{RandomNews}}<hr> {{FooterLight}}" 23093 wikitext text/x-wiki <br /><hr>{{RandomNews}}<hr> {{FooterLight}} aicb77go0dg5ila2c1kv3zqbl653kbh 23096 23093 2016-04-04T17:24:43Z Patrick 2 23096 wikitext text/x-wiki {{RandomNews}}<hr> {{FooterLight}} mi2phomslx987j21s20d9wya4zbbe1z 23097 23096 2016-04-04T17:24:53Z Patrick 2 23097 wikitext text/x-wiki {{RandomNews}} {{FooterLight}} 9jbx9fgub6i2gv5cw5qiqpc8fp9qrt2 23102 23097 2016-04-04T17:28:36Z Patrick 2 23102 wikitext text/x-wiki {{RandomNews}} {{FooterLight}} {{Footer this is a wiki}} {{Foooter_OIN}} 8qqygadnhkpgaljit809ritjn7ueel0 23117 23102 2016-04-06T14:03:40Z Patrick 2 23117 wikitext text/x-wiki <hr> {{RandomNews}} {{FooterLight}} {{Footer this is a wiki}} {{Foooter_OIN}} b3v06mn52udgtln3q43mkduobb53e5h 29763 23117 2017-04-30T12:43:29Z 127.0.0.1 29763 wikitext text/x-wiki <hr> {{RandomNews}} {{FooterLight}} {{Footer this is a wiki}} {{Foooter_OIN}} nbihceayyqu9ryk7xbogm6x1g3rs538 31793 29763 2018-01-06T04:11:50Z Mrscreenshot 4497 Protected "[[Template:Footer]]" ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite)) 31793 wikitext text/x-wiki <hr> {{RandomNews}} {{FooterLight}} {{Footer this is a wiki}} {{Foooter_OIN}} nbihceayyqu9ryk7xbogm6x1g3rs538 39661 31793 2018-11-20T11:04:27Z Patrick 2 39661 wikitext text/x-wiki <hr> {{RandomNews}} {{FooterLight}} {{Footer this is a wiki}} {{Foooter_OIN}} <font size=-1>Whonix is provided by ENCRYPTED SUPPORT LP. See [[Impressum|Imprint]].</font> c68ngr9qwa2q0lzu1ojdf2g0y827e83 40058 39661 2018-12-14T14:32:48Z Patrick 2 40058 wikitext text/x-wiki <hr> {{RandomNews}} <hr><font size="-1">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_Whonix.org|forcing]]) [http://{{Whonix_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! See [https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation.</font> <font size="-1">Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted, the content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Libre Software [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. ([[Why_Whonix_is_Free_Software|Why?]])</font> <font size=-1>Whonix is provided by ENCRYPTED SUPPORT LP. See [[Impressum|Imprint]].</font> k4qygxocdhqx9q7kpuqfpw0cmhjg90d 40418 40058 2019-01-09T15:59:43Z Patrick 2 40418 wikitext text/x-wiki <hr> <font size="-1">Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_Whonix.org|forcing]]) [http://{{Whonix_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! See [https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation.</font> <font size="-1">Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted, the content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Libre Software [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. ([[Why_Whonix_is_Free_Software|Why?]])</font> <font size=-1>Whonix is provided by ENCRYPTED SUPPORT LP. See [[Impressum|Imprint]].</font> bmz9ksp29md7mo49k5838gmjrmly38c 40880 40418 2019-02-12T18:41:47Z Patrick 2 40880 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_Whonix.org|forcing]]) [http://{{Whonix_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! See [https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation.</font> <font size="-1">Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted, the content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Libre Software [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. ([[Why_Whonix_is_Free_Software|Why?]])</font> <font size=-1>Whonix is provided by ENCRYPTED SUPPORT LP. See [[Impressum|Imprint]].</font> q0r58nhqr46myqv0g7pzs6yxttnk6t7 41016 40880 2019-02-23T04:27:46Z Patrick 2 41016 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_Whonix.org|forcing]]) [http://{{Whonix_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation.</font> <font size="-1">Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted, the content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Libre Software [https://github.com/Whonix/Whonix/blob/master/debian/copyright license] as Whonix itself. ([[Why_Whonix_is_Free_Software|Why?]])</font> <font size=-1>Whonix is provided by ENCRYPTED SUPPORT LP. See [[Impressum|Imprint]].</font> 4m4wa3exj1pllyagk54xqmam6p5sm36 41017 41016 2019-02-23T04:34:41Z Patrick 2 41017 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_Whonix.org|forcing]]) [http://{{Whonix_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation.</font> <font size="-1"> Copyright (C) 2019 {{name}}. [[Whonix Trademark Policy|Whonix is a trademark.]] Unless otherwise noted, the content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Libre Software [[Whonix:Copyrights#License|license]] as Whonix itself. ([[Why_Whonix_is_Free_Software|Why?]]) Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Whonix is provided by {{name}}. See [[Impressum|Imprint]]. </font> jzttxzv7bsfapcfnb28bl01hrk1dq1i 41264 41017 2019-03-03T16:30:16Z Patrick 2 41264 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_Whonix.org|forcing]]) [http://{{Whonix_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Copyright (C) 2019 {{name}}. [[Whonix Trademark Policy|Whonix is a trademark.]] Unless otherwise noted, the content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Libre Software [[Whonix:Copyrights#License|license]] as Whonix itself. ([[Why_Whonix_is_Free_Software|Why?]]) Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Whonix is provided by {{name}}. See [[Impressum|Imprint]]. </font> 6qrwzx3kkz6egdkc2w0empe2kaxktqp 41265 41264 2019-03-03T16:31:13Z Patrick 2 41265 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_Whonix.org|forcing]]) [http://{{Whonix_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md Conditions for Contributions to Whonix], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Copyright (C) 2019 {{name}}. [[Whonix Trademark Policy|Whonix is a trademark.]] Unless otherwise noted, the content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Libre Software [[Whonix:Copyrights#License|license]] as Whonix itself. ([[Why_Whonix_is_Free_Software|Why?]]) Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. Whonix is provided by {{name}}. See [[Impressum|Imprint]]. </font> h2j1nki9nltnnj83bhdesjq6y21qfhc 41266 41265 2019-03-03T16:32:24Z Patrick 2 41266 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_Whonix.org|forcing]]) [http://{{Whonix_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[Whonix:Copyrights#Conditions_for_Contributions_to_Whonix|Conditions for Contributions to Whonix]], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Copyright (C) 2019 {{name}}. [[Whonix Trademark Policy|Whonix is a trademark.]] Unless otherwise noted, the content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Libre Software [[Whonix:Copyrights#License|license]] as Whonix itself. ([[Why_Whonix_is_Free_Software|Why?]]) Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. Whonix is provided by {{name}}. See [[Impressum|Imprint]]. </font> cjfoueaw8j8lgcx43y26yz4ruh068lf 41267 41266 2019-03-03T16:32:35Z Patrick 2 41267 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_Whonix.org|forcing]]) [http://{{Whonix_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[Whonix:Copyrights#Conditions_for_Contributions_to_Whonix|Conditions for Contributions to Whonix]], then {{Edit_it}}! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[Whonix Trademark Policy|Whonix is a trademark.]] Unless otherwise noted, the content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Libre Software [[Whonix:Copyrights#License|license]] as Whonix itself. ([[Why_Whonix_is_Free_Software|Why?]]) Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. Whonix is provided by {{name}}. See [[Impressum|Imprint]]. </font> n5ybqgoypw58mtzlj6tbtlbl5q81scf 41268 41267 2019-03-03T16:33:20Z Patrick 2 remove duplication with Privacy Policy 41268 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_Whonix.org|forcing]]) [http://{{Whonix_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[Whonix:Copyrights#Conditions_for_Contributions_to_Whonix|Conditions for Contributions to Whonix]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[Whonix Trademark Policy|Whonix is a trademark.]] Unless otherwise noted, the content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Libre Software [[Whonix:Copyrights#License|license]] as Whonix itself. ([[Why_Whonix_is_Free_Software|Why?]]) Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. Whonix is provided by {{name}}. See [[Impressum|Imprint]]. </font> 8s7a636g89zl374gbe50yzpiv3014z3 41269 41268 2019-03-03T16:35:56Z Patrick 2 41269 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_Whonix.org|forcing]]) [http://{{Whonix_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[Whonix:Copyrights#Conditions_for_Contributions_to_Whonix|Conditions for Contributions to Whonix]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[Whonix Trademark Policy|Whonix is a trademark.]] Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted, the content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Libre Software [[Whonix:Copyrights#License|license]] as Whonix itself. ([[Why_Whonix_is_Free_Software|Why?]]) By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. Whonix is provided by {{name}}. See [[Impressum|Imprint]]. </font> j69mxiylzhiuibpw4fnb99g5dtf9h5j 41624 41269 2019-03-16T06:25:05Z Patrick 2 Text replacement - "Libre Software" to "Freedom Software" 41624 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_Whonix.org|forcing]]) [http://{{Whonix_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[Whonix:Copyrights#Conditions_for_Contributions_to_Whonix|Conditions for Contributions to Whonix]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[Whonix Trademark Policy|Whonix is a trademark.]] Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted, the content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Freedom Software [[Whonix:Copyrights#License|license]] as Whonix itself. ([[Why_Whonix_is_Free_Software|Why?]]) By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. Whonix is provided by {{name}}. See [[Impressum|Imprint]]. </font> p3949e7qw64hqbs9z0qu76h0rqncg7k 41871 41624 2019-03-24T18:47:36Z Patrick 2 Text replacement - "Why_Whonix_is_Free_Software" to "Why_Whonix_is_Freedom_Software" 41871 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.whonix.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_Whonix.org|forcing]]) [http://{{Whonix_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[Whonix:Copyrights#Conditions_for_Contributions_to_Whonix|Conditions for Contributions to Whonix]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[Whonix Trademark Policy|Whonix is a trademark.]] Whonix is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted, the content of this page is [[Whonix:Copyrights|copyrighted]] and licensed under the same Freedom Software [[Whonix:Copyrights#License|license]] as Whonix itself. ([[Why_Whonix_is_Freedom_Software|Why?]]) By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. Whonix is provided by {{name}}. See [[Impressum|Imprint]]. </font> eliq0sflc0v0byjm1cytn9m36gl2kyt 45207 41871 2019-04-22T20:54:45Z Patrick 2 45207 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{Whonix_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> e9oxg50pi4q6anttxo3mc2vyidjoxct 45592 45207 2019-04-25T11:51:32Z Patrick 2 Text replacement - "{{Whonix_onion}}" to "{{project_onion}}" 45592 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 1b4900bw94nlcbbx61fqq53pzpl8ckp 47217 45592 2019-05-11T07:33:48Z Patrick 2 follow https://www.debian.org/trademark 47217 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is not affiliated with Debian. Debian is a registered trademark owned by Software in the Public Interest, Inc. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 658a6gsdsb3nciu284fj0jdnmycro3h 47218 47217 2019-05-11T07:35:26Z Patrick 2 47218 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with Debian. Debian is a registered trademark owned by Software in the Public Interest, Inc. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> ao7vnjhee0yprut40mpv9hg7unc8vu5 47219 47218 2019-05-11T07:38:20Z Patrick 2 follow https://2019.www.torproject.org/docs/trademark-faq.html.en 47219 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [http://www.openinventionnetwork.com/licensees.php licensee] of the Open Invention Network. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with Debian. Debian is a registered trademark owned by Software in the Public Interest, Inc. {{project name}} is produced independently from the [https://www.torproject.org/ Tor]® anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> awoinbqyt533dmkhoxwqgcdiag7o4hh 47220 47219 2019-05-11T07:42:08Z Patrick 2 47220 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with Debian. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> g9skujetmlbd8oss7o7fk3ypjrvonik 47221 47220 2019-05-11T07:42:50Z Patrick 2 47221 wikitext text/x-wiki <hr> <font size="-1">No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 1acdadbrn3tmh033x3o0j2fvlz8m9ct 47952 47221 2019-06-10T14:20:28Z Patrick 2 47952 wikitext text/x-wiki <hr> <font size="-1">No comments for now due to spam. Use [https://forums.whonix.org/ Whonix forums] instead. <!--No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font>--> <!--<comments />--> <hr> {{RandomNews}} <hr><font size="-1">[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 80ut7ui3ceqrorqs1muu3hguxftxa21 48703 47952 2019-06-22T08:34:56Z Patrick 2 48703 wikitext text/x-wiki <hr> <font size="-1">No comments for now due to spam. Use [https://forums.whonix.org/ Whonix forums] instead. <!--No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font>--> <!--<comments />--> <hr> {{RandomNews}} <hr><font size="-1">[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> <font size="-1">[[Contribute#Follow|Follow]]: [https://twitter.com/Whonix Twitter] | [https://www.facebook.com/Whonix Facebook] | [https://gab.com/Whonix gab.ai]</font> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> ptxza5azms4w73rul65ronjq1hozozt 48706 48703 2019-06-22T09:01:56Z Patrick 2 48706 wikitext text/x-wiki <hr> <font size="-1">No comments for now due to spam. Use [https://forums.whonix.org/ Whonix forums] instead. <!--No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font>--> <!--<comments />--> <hr> {{RandomNews}} <hr><font size="-1">[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> <font size="-1">[[Contribute#Follow|Follow]]: [https://twitter.com/Whonix Twitter] | [https://www.facebook.com/Whonix Facebook] | [https://gab.com/Whonix gab.ai] | [[Stay_Tuned|Stay Tuned]] | [[Stay_Tuned#Whonix_News_Forums|Whonix News]]</font> Share: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 26i893oqqttowyhkrn5xh0598gprmp9 48707 48706 2019-06-22T09:02:41Z Patrick 2 48707 wikitext text/x-wiki <hr> <font size="-1">No comments for now due to spam. Use [https://forums.whonix.org/ Whonix forums] instead. <!--No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font>--> <!--<comments />--> <hr> {{RandomNews}} <hr><font size="-1">[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> <font size="-1">[[Contribute#Follow|Follow]]: [https://twitter.com/Whonix Twitter] | [https://www.facebook.com/Whonix Facebook] | [https://gab.com/Whonix gab.ai] | [[Stay_Tuned|Stay Tuned]] | [[Stay_Tuned#Whonix_News_Forums|Whonix News]]</font> [[Official_Whonix_Online_Profiles|Share]]: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> d7wmf51r88ry7mzwz688k9f0t5agg05 49975 48707 2019-08-11T13:21:44Z Patrick 2 49975 wikitext text/x-wiki <hr> <font size="-1"> <!-- No comments for now due to spam. Use [https://forums.whonix.org/ Whonix forums] instead. --> No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font> <comments /> <hr> {{RandomNews}} <hr><font size="-1">[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> <font size="-1">[[Contribute#Follow|Follow]]: [https://twitter.com/Whonix Twitter] | [https://www.facebook.com/Whonix Facebook] | [https://gab.com/Whonix gab.ai] | [[Stay_Tuned|Stay Tuned]] | [[Stay_Tuned#Whonix_News_Forums|Whonix News]]</font> [[Official_Whonix_Online_Profiles|Share]]: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 9jx7t4np6fvz216ejtfb4dagnjittlp 51399 49975 2019-09-27T06:14:06Z Patrick 2 Undo revision 49975 by [[Special:Contributions/Patrick|Patrick]] ([[User talk:Patrick|talk]]) 51399 wikitext text/x-wiki <hr> <font size="-1">No comments for now due to spam. Use [https://forums.whonix.org/ Whonix forums] instead. <!--No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font>--> <!--<comments />--> <hr> {{RandomNews}} <hr><font size="-1">[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> <font size="-1">[[Contribute#Follow|Follow]]: [https://twitter.com/Whonix Twitter] | [https://www.facebook.com/Whonix Facebook] | [https://gab.com/Whonix gab.ai] | [[Stay_Tuned|Stay Tuned]] | [[Stay_Tuned#Whonix_News_Forums|Whonix News]]</font> [[Official_Whonix_Online_Profiles|Share]]: {{Share}}</font> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> d7wmf51r88ry7mzwz688k9f0t5agg05 51456 51399 2019-10-07T13:24:38Z Patrick 2 51456 wikitext text/x-wiki <hr> <font size="-1">No comments for now due to spam. Use [https://forums.whonix.org/ Whonix forums] instead. <!--No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font>--> <!--<comments />--> <hr> {{RandomNews}} <hr>[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Contribute#Follow|Follow]]: [https://twitter.com/Whonix Twitter] | [https://www.facebook.com/Whonix Facebook] | [https://gab.com/Whonix gab.ai] | [[Stay_Tuned|Stay Tuned]] | [[Stay_Tuned#Whonix_News_Forums|Whonix News]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> mvipei2xknfsshvratvu1qam0nqur85 51458 51456 2019-10-07T13:57:33Z Patrick 2 51458 wikitext text/x-wiki <hr> <font size="-1">No comments for now due to spam. Use [https://forums.whonix.org/ Whonix forums] instead. <!--No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font>--> <!--<comments />--> <hr> {{RandomNews}} <hr>[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Contribute#Follow|Follow]]: [https://twitter.com/Whonix Twitter] | [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] | [https://gab.com/Whonix gab.ai] | [[Stay_Tuned|Stay Tuned]] | [[Stay_Tuned#Whonix_News_Forums|Whonix News]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> h14lmm0swaaje0yajh9bls8pn65pp9s 51460 51458 2019-10-07T14:00:29Z Patrick 2 51460 wikitext text/x-wiki <hr> <font size="-1">No comments for now due to spam. Use [https://forums.whonix.org/ Whonix forums] instead. <!--No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font>--> <!--<comments />--> <hr> {{RandomNews}} <hr>[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Contribute#Follow|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] | [https://gab.com/Whonix gab.ai] | [[Stay_Tuned|Stay Tuned]] | [[Stay_Tuned#Whonix_News_Forums|Whonix News]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> o6wuqqqlgeaoyqpsgwzxaofv2tl40nc 51463 51460 2019-10-07T14:04:47Z Patrick 2 51463 wikitext text/x-wiki <hr> <font size="-1">No comments for now due to spam. Use [https://forums.whonix.org/ Whonix forums] instead. <!--No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font>--> <!--<comments />--> <hr> {{RandomNews}} <hr>[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] https://gab.com/Whonix gab.ai] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> okbq0yhbinsl93p70cg26j0d062wpkf 51464 51463 2019-10-07T14:05:02Z Patrick 2 51464 wikitext text/x-wiki <hr> <font size="-1">No comments for now due to spam. Use [https://forums.whonix.org/ Whonix forums] instead. <!--No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font>--> <!--<comments />--> <hr> {{RandomNews}} <hr>[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] https://gab.com/Whonix [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> hp0kdfk8l7cvdtrn7qlz4takvb2rswa 51466 51464 2019-10-07T14:18:17Z Patrick 2 51466 wikitext text/x-wiki <hr> <font size="-1">No comments for now due to spam. Use [https://forums.whonix.org/ Whonix forums] instead. <!--No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font>--> <!--<comments />--> <hr> {{RandomNews}} <hr>[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> oyl368n23jo417efkalj2b1xbv39a68 51468 51466 2019-10-07T14:20:02Z Patrick 2 51468 wikitext text/x-wiki <hr> <font size="-1">No comments for now due to spam. Use [https://forums.whonix.org/ Whonix forums] instead. <!--No user support in comments. See [[Support]]. Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See [[Wiki Comments Policy]].</font>--> <!--<comments />--> <hr> {{RandomNews}} <hr>[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_All_News]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> gc3fnbzr6m3zpsu9pfbeer5msx6omn7 51517 51468 2019-10-12T11:25:58Z Patrick 2 51517 wikitext text/x-wiki <hr> {{RandomNews}} <hr>[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_All_News]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 5dv931t0ree9tbxy3eoafgizlp2d973 51519 51517 2019-10-12T11:31:43Z Patrick 2 51519 wikitext text/x-wiki <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> [advertisement] '''Looking to Sell Your Company?''' [[Contact#For_Private_Inquiries|Contact]] me. </div> <br /> {{RandomNews}} <hr>[https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_All_News]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> c8ym7xgmgtw8wn5v8o4a10s9jj3w9ht 51520 51519 2019-10-12T11:32:34Z Patrick 2 51520 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> [advertisement] '''Looking to Sell Your Company?''' [[Contact#For_Private_Inquiries|Contact]] me. </div> <br /> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_All_News]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 025vknv9cqf1dlye07npdsiztihjb4s 51549 51520 2019-10-17T16:40:10Z Patrick 2 51549 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> [advertisement] '''Looking to Sell Your Company?''' [[Contact#For_Private_Inquiries|Contact]] me. </div> <br /> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 9hss3pfqz3bgv4y3j6q6gryzr3alam7 52120 51549 2019-11-05T15:30:26Z Patrick 2 52120 wikitext text/x-wiki <hr> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 9o3gsl56ju49pjd6ygfnaccocd2qcol 52125 52120 2019-11-05T15:35:11Z Patrick 2 52125 wikitext text/x-wiki <hr> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> pzbw7tvdv5h4v4l6c5kuymtkxglis5f 52314 52125 2019-11-08T08:41:32Z Patrick 2 52314 wikitext text/x-wiki <hr> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=monero:{{Pay Monero}}]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> t4z1eua2032d2eyha68bku1bw7chhrz 52315 52314 2019-11-08T08:42:21Z Patrick 2 52315 wikitext text/x-wiki <hr> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> ac6k6228yzphqeukk27d8rboji72bj9 52318 52315 2019-11-08T08:58:04Z Patrick 2 52318 wikitext text/x-wiki <hr> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 9gwn6p64rv5646no9zmkqcrffgt4b82 52319 52318 2019-11-08T09:05:21Z Patrick 2 52319 wikitext text/x-wiki <hr> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 3thkd8nu3i8q3icba2uoyl3gxuk68x4 52320 52319 2019-11-08T09:07:05Z Patrick 2 52320 wikitext text/x-wiki <hr> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> mw6idsyx3p453nnmesxoz4uchg7vmju 52352 52320 2019-11-08T10:12:50Z Patrick 2 52352 wikitext text/x-wiki <hr> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> lbp6556t0f04twtivgvugboksie5fjf 52353 52352 2019-11-08T10:16:16Z Patrick 2 52353 wikitext text/x-wiki <hr> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. [[File:Monero donate whonix.png|100px]] </font> 04cssqkjct6852xzxojtdm5w2g0wu1h 52354 52353 2019-11-08T10:16:32Z Patrick 2 52354 wikitext text/x-wiki <hr> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. [[File:Monero donate whonix.png|200px]] </font> cix1ay1iccssci1q475oy4b12awnfys 52770 52354 2019-11-18T09:38:48Z Patrick 2 52770 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> <u>Advertisement</u>:<br/> {{project name}} is [https://evolution-host.com/vps-hosting.php Supported by Evolution Host DDoS Protected VPS] </div> <hr> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. [[File:Monero donate whonix.png|200px]] </font> kl1qak7e4qdp03kmlyanxydtx68sn0d 52774 52770 2019-11-18T10:21:46Z Patrick 2 52774 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> <u>Advertisement</u>:<br/> {{project name}} is {{#widget:Advertisement}} </div> <hr> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. [[File:Monero donate whonix.png|200px]] </font> a3qg3ghpyjzkddn9fra3oyb1dfnkfro 52806 52774 2019-11-18T11:40:33Z Patrick 2 52806 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. [[File:Monero donate whonix.png|200px]] </font> 5daqofpviu41hejues9i0wsf3ks6z0l 53224 52806 2019-12-04T06:23:56Z Patrick 2 53224 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=Stay_Tuned#Whonix_News_Forums]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> rx254yk3zrclobrv6o0pkr4vitygxgz 53226 53224 2019-12-04T06:26:58Z Patrick 2 53226 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=https://forums.whonix.org/tags/important-news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> mnn1u9nsl0dvjef4ilq4p5sxks5kaw5 53227 53226 2019-12-04T06:31:21Z Patrick 2 53227 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=https://forums.whonix.org/tags/important-news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}} https] | ([[Forcing_.onion_on_{{project name short}}.org|forcing]]) [http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}} onion]<br /> <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> dhmtwh9gtwh9fpi1n43wqca8gyn60xr 54032 53227 2020-01-01T07:46:13Z Patrick 2 54032 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=https://forums.whonix.org/tags/important-news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|link=http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 9gwn0evsov4z2ssc9ondsdn7fsc8vra 54033 54032 2020-01-01T07:46:47Z Patrick 2 54033 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=https://forums.whonix.org/tags/important-news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> n3o6tsf0lyzhv69r01xyeae8jmt1rc9 54312 54033 2020-01-22T19:07:28Z Patrick 2 54312 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=https://forums.whonix.org/tags/important-news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} nlbeyt5fkwcg77a8xp4qbhh3qj5g9ez 54313 54312 2020-01-22T19:07:55Z Patrick 2 54313 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=https://forums.whonix.org/tags/important-news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} gwwnejjhj0bpxzdmdu8kx4mpwnpxzem 54331 54313 2020-01-25T09:23:21Z Patrick 2 54331 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=https://forums.whonix.org/tags/important-news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 |fb:app_id=606207202785157 }} qvb4c5vvh341nw7oji42uzr6b79jq63 54332 54331 2020-01-25T09:24:53Z Patrick 2 54332 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=https://forums.whonix.org/tags/important-news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> {{#seo: |article:publisher=https://www.facebook.com/{{project_name_short}} |author=https://www.facebook.com/{{project_name_short}} |fb:admins=100007482551659 }} gwwnejjhj0bpxzdmdu8kx4mpwnpxzem 54333 54332 2020-01-25T11:42:56Z Patrick 2 54333 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=https://forums.whonix.org/tags/important-news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> e99k6k7iimam6epy47jj6wcmkaodpfz 55561 54333 2020-03-28T17:00:28Z Patrick 2 55561 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2019 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> poca4xjqmq70fkezofoxcp8pap5kprs 55907 55561 2020-04-15T17:05:16Z Patrick 2 55907 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> c7635ulhatkt4nmvwkovk75rquyo9dn 56155 55907 2020-04-23T12:48:28Z Patrick 2 56155 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 7u6adpwqhlc98kxqrc5chtibqfxc4or 56256 56155 2020-04-27T06:49:47Z Patrick 2 56256 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 386wnuqtxsqdy0xm2g2ohuyum7oylo9 56319 56256 2020-04-29T15:36:40Z Patrick 2 56319 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]]. </font> 016ah8wd41hct91ox5ybp6jufx1my0x 56924 56319 2020-05-08T22:33:45Z Patrick 2 56924 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 6l7fns2tjckfov9ixcjkb0su65tb8yo 57060 56924 2020-05-15T10:46:34Z Buffy 4651 Capitalize 57060 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 7al72y3jr2sloflzldbdd5nvdyljo97 57857 57060 2020-06-09T20:39:45Z Patrick 2 57857 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1">This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 25o9lxz0a4vxkwf6umfher3kqsjdxrv 57877 57857 2020-06-10T16:59:31Z Patrick 2 57877 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> [https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): sitename: <code>{{SITENAME}}</code>, server: <code>{{SERVER}}</code>, servername: <code>{{SERVERNAME}}</code> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> qy5vght944lvjpl7flk2v2y97ekmfuc 57881 57877 2020-06-10T21:34:49Z Patrick 2 57881 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> [https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 26lsnzikcvrrh872wiz0ijdrs0mllkx 57892 57881 2020-06-11T10:57:32Z Patrick 2 57892 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> <noinclude>[https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code></noinclude> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 4x1sin7h508kjgxg46ibqi5ikblweko 57893 57892 2020-06-11T10:58:29Z Patrick 2 57893 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"><noinclude>[https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code></noinclude> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> o2if5ejl9874e6qgu177cdlga0oahkr 57894 57893 2020-06-11T10:58:59Z Patrick 2 57894 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"><noinclude>[https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code></noinclude> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 4q4dz965qumqud4h4h0jluc5lrgaj4f 57895 57894 2020-06-11T10:59:37Z Patrick 2 57895 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"><noinclude>[https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code></noinclude>This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 4pa1qpymyhk2k7pt9o0pi4ygxwexc8i 57896 57895 2020-06-11T11:00:02Z Patrick 2 57896 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"><noinclude>[https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code></noinclude> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> sn4m6z7n0lb0asr6mbj4l4oz3z8lhu5 57897 57896 2020-06-11T11:00:20Z Patrick 2 57897 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"><noinclude>[https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code></noinclude> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 4q4dz965qumqud4h4h0jluc5lrgaj4f 58284 57897 2020-06-22T20:18:54Z Patrick 2 58284 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"><noinclude>[https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code></noinclude> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> q8371f6dybss6pyrwq0rqshvvz3iqgi 58299 58284 2020-06-23T15:15:58Z Patrick 2 58299 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"><noinclude>[https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code></noinclude> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> m4ofwjph3ath9dxpozuuhc0cakz1ix5 58305 58299 2020-06-23T16:20:46Z Patrick 2 58305 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[File:Gnusocial.png|50px|link=https://gnusocial.cc/whonix]] [[File:Mewe.png|50px|link=https://mewe.com/i/whonixanonymousos]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"><noinclude>[https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code></noinclude> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 9e047su4h7r0udj3vfkqzvi9hhj03bj 58307 58305 2020-06-23T16:28:31Z Patrick 2 58307 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[File:Gnusocial.png|50px|link=https://gnusocial.cc/whonix]] [[File:Mewe.png|50px|link=https://mewe.com/i/whonixanonymousos]] [[File:500px-Tumblr Wordmark.svg.png|50px|link=https://whonix.tumblr.com/]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"><noinclude>[https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code></noinclude> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> m0kky30r6sm8v3azfinac5dtfyb4zvf 58310 58307 2020-06-23T16:32:06Z Patrick 2 58310 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[File:Gnusocial.png|50px|link=https://gnusocial.cc/whonix]] [[File:Mewe.png|50px|link=https://mewe.com/i/whonixanonymousos]] [[File:500px-Tumblr Wordmark.svg.png|50px|link=https://whonix.tumblr.com/]] [[File:Iconfinder youtube 317714.png|50px|link=https://www.youtube.com/user/adrelanos]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"><noinclude>[https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code></noinclude> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> btpvp12bgt12ndat942rfxa1sothl0c 58313 58310 2020-06-23T16:36:46Z Patrick 2 58313 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[File:Gnusocial.png|50px|link=https://gnusocial.cc/whonix]] [[File:Mewe.png|50px|link=https://mewe.com/i/whonixanonymousos]] [[File:500px-Tumblr Wordmark.svg.png|50px|link=https://whonix.tumblr.com/]] [[File:Iconfinder youtube 317714.png|50px|link=https://www.youtube.com/user/adrelanos]] [[File:200px-Minds logo.svg.png|50px|link=https://www.minds.com/Whonix]] [[File:200px-Mastodon Logotype (Simple).svg.png|50px|link=https://mastodon.technology/@whonix]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"><noinclude>[https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code></noinclude> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> jqb4y2jv29k1qhzbulll4yzdwyuzhn2 58315 58313 2020-06-23T16:51:05Z Patrick 2 58315 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[File:Gnusocial.png|50px|link=https://gnusocial.cc/whonix]] [[File:Mewe.png|50px|link=https://mewe.com/i/whonixanonymousos]] [[File:500px-Tumblr Wordmark.svg.png|50px|link=https://whonix.tumblr.com/]] [[File:Iconfinder youtube 317714.png|50px|link=https://www.youtube.com/user/adrelanos]] [[File:200px-Minds logo.svg.png|50px|link=https://www.minds.com/Whonix]] [[File:200px-Mastodon Logotype (Simple).svg.png|50px|link=https://mastodon.technology/@whonix]] [[File:200px-LinkedIn Logo 2013.svg.png|50px|link=https://www.linkedin.com/company/whonix]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"><noinclude>[https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code></noinclude> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 6gihhbr66q3r9airiglsy0vy72mqv8x 58319 58315 2020-06-23T17:59:58Z Patrick 2 58319 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[File:Gnusocial.png|50px|link=https://gnusocial.cc/whonix]] [[File:Mewe.png|50px|link=https://mewe.com/i/whonixanonymousos]] [[File:500px-Tumblr Wordmark.svg.png|50px|link=https://whonix.tumblr.com/]] [[File:Iconfinder youtube 317714.png|50px|link=https://www.youtube.com/user/adrelanos]] [[File:200px-Minds logo.svg.png|50px|link=https://www.minds.com/Whonix]] [[File:200px-Mastodon Logotype (Simple).svg.png|50px|link=https://mastodon.technology/@whonix]] [[File:200px-LinkedIn Logo 2013.svg.png|50px|link=https://www.linkedin.com/company/whonix]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=#Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"><noinclude>[https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code></noinclude> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> kxrjunjzgmzvejt2b4zfyznv74747hz 58320 58319 2020-06-23T18:09:25Z Patrick 2 58320 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[File:Gnusocial.png|50px|link=https://gnusocial.cc/whonix]] [[File:Mewe.png|50px|link=https://mewe.com/i/whonixanonymousos]] [[File:500px-Tumblr Wordmark.svg.png|50px|link=https://whonix.tumblr.com/]] [[File:Iconfinder youtube 317714.png|50px|link=https://www.youtube.com/user/adrelanos]] [[File:200px-Minds logo.svg.png|50px|link=https://www.minds.com/Whonix]] [[File:200px-Mastodon Logotype (Simple).svg.png|50px|link=https://mastodon.technology/@whonix]] [[File:200px-LinkedIn Logo 2013.svg.png|50px|link=https://www.linkedin.com/company/whonix]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"><noinclude>[https://forums.whonix.org/t/onion-forum-site-redirects-to-clearnet/197/18 debug onion] (ignore this): servername: <code>{{SERVERNAME}}</code></noinclude> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 65z30bs82v6lfq9dc4vjzfau044rq85 58321 58320 2020-06-23T18:21:20Z Patrick 2 58321 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Stay Tuned|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[File:Gnusocial.png|50px|link=https://gnusocial.cc/whonix]] [[File:Mewe.png|50px|link=https://mewe.com/i/whonixanonymousos]] [[File:500px-Tumblr Wordmark.svg.png|50px|link=https://whonix.tumblr.com/]] [[File:Iconfinder youtube 317714.png|50px|link=https://www.youtube.com/user/adrelanos]] [[File:200px-Minds logo.svg.png|50px|link=https://www.minds.com/Whonix]] [[File:200px-Mastodon Logotype (Simple).svg.png|50px|link=https://mastodon.technology/@whonix]] [[File:200px-LinkedIn Logo 2013.svg.png|50px|link=https://www.linkedin.com/company/whonix]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> sswc8gyof67s6qp8bnotc6em386ikc2 58322 58321 2020-06-23T18:30:43Z Patrick 2 58322 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Official_Whonix_Online_Profiles|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/!ldUrkJMMqFScVZBdYN:tchncs.de?via=matrix.org&via=tchncs.de&via=privacytools.io]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[File:Gnusocial.png|50px|link=https://gnusocial.cc/whonix]] [[File:Mewe.png|50px|link=https://mewe.com/i/whonixanonymousos]] [[File:500px-Tumblr Wordmark.svg.png|50px|link=https://whonix.tumblr.com/]] [[File:Iconfinder youtube 317714.png|50px|link=https://www.youtube.com/user/adrelanos]] [[File:200px-Minds logo.svg.png|50px|link=https://www.minds.com/Whonix]] [[File:200px-Mastodon Logotype (Simple).svg.png|50px|link=https://mastodon.technology/@whonix]] [[File:200px-LinkedIn Logo 2013.svg.png|50px|link=https://www.linkedin.com/company/whonix]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> fixver4pff79vqb7dszbtw9cczisfte 58330 58322 2020-06-26T16:51:58Z Patrick 2 58330 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Official_Whonix_Online_Profiles|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/#whonix:tchncs.de]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[File:Gnusocial.png|50px|link=https://gnusocial.cc/whonix]] [[File:Mewe.png|50px|link=https://mewe.com/i/whonixanonymousos]] [[File:500px-Tumblr Wordmark.svg.png|50px|link=https://whonix.tumblr.com/]] [[File:Iconfinder youtube 317714.png|50px|link=https://www.youtube.com/user/adrelanos]] [[File:200px-Minds logo.svg.png|50px|link=https://www.minds.com/Whonix]] [[File:200px-Mastodon Logotype (Simple).svg.png|50px|link=https://mastodon.technology/@whonix]] [[File:200px-LinkedIn Logo 2013.svg.png|50px|link=https://www.linkedin.com/company/whonix]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> i3p9h7ms3c3ll2zr3ggsewp70n19fv4 59033 58330 2020-08-05T16:16:13Z Patrick 2 59033 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Official_Whonix_Online_Profiles|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/#whonix:tchncs.de]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[File:Gnusocial.png|50px|link=https://gnusocial.cc/whonix]] [[File:Mewe.png|50px|link=https://mewe.com/i/whonixanonymousos]] [[File:500px-Tumblr Wordmark.svg.png|50px|link=https://whonix.tumblr.com/]] [[File:Iconfinder youtube 317714.png|50px|link=https://www.youtube.com/user/adrelanos]] [[File:200px-Minds logo.svg.png|50px|link=https://www.minds.com/Whonix]] [[File:200px-Mastodon Logotype (Simple).svg.png|50px|link=https://mastodon.technology/@whonix]] [[File:200px-LinkedIn Logo 2013.svg.png|50px|link=https://www.linkedin.com/company/whonix]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] applies. [[Policy On Nonfreedom Software]] is a draft. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> tt0qynp6xcilg3ta7sv3rmufqrrsflr 59061 59033 2020-08-06T18:26:41Z Patrick 2 59061 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} <hr> [[Official_Whonix_Online_Profiles|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/#whonix:tchncs.de]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[File:Gnusocial.png|50px|link=https://gnusocial.cc/whonix]] [[File:Mewe.png|50px|link=https://mewe.com/i/whonixanonymousos]] [[File:500px-Tumblr Wordmark.svg.png|50px|link=https://whonix.tumblr.com/]] [[File:Iconfinder youtube 317714.png|50px|link=https://www.youtube.com/user/adrelanos]] [[File:200px-Minds logo.svg.png|50px|link=https://www.minds.com/Whonix]] [[File:200px-Mastodon Logotype (Simple).svg.png|50px|link=https://mastodon.technology/@whonix]] [[File:200px-LinkedIn Logo 2013.svg.png|50px|link=https://www.linkedin.com/company/whonix]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> qihb2vt7bemobperzbc770fikh6ltek 59242 59061 2020-08-18T16:29:21Z Patrick 2 59242 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_Whonix_Online_Profiles|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/#whonix:tchncs.de]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[File:Gnusocial.png|50px|link=https://gnusocial.cc/whonix]] [[File:Mewe.png|50px|link=https://mewe.com/i/whonixanonymousos]] [[File:500px-Tumblr Wordmark.svg.png|50px|link=https://whonix.tumblr.com/]] [[File:Iconfinder youtube 317714.png|50px|link=https://www.youtube.com/user/adrelanos]] [[File:200px-Minds logo.svg.png|50px|link=https://www.minds.com/Whonix]] [[File:200px-Mastodon Logotype (Simple).svg.png|50px|link=https://mastodon.technology/@whonix]] [[File:200px-LinkedIn Logo 2013.svg.png|50px|link=https://www.linkedin.com/company/whonix]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> lwl9g5gdwtsmzpxx2hnwkpcy62ioeal 59497 59242 2020-09-07T13:22:57Z Patrick 2 59497 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[File:Jobble.png|link=https://jooble.org/|text=Jobs in USA]]<br /> {{link|link=https://search.yacy.net|text=Jobs in USA}} <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_Whonix_Online_Profiles|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/#whonix:tchncs.de]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[File:Gnusocial.png|50px|link=https://gnusocial.cc/whonix]] [[File:Mewe.png|50px|link=https://mewe.com/i/whonixanonymousos]] [[File:500px-Tumblr Wordmark.svg.png|50px|link=https://whonix.tumblr.com/]] [[File:Iconfinder youtube 317714.png|50px|link=https://www.youtube.com/user/adrelanos]] [[File:200px-Minds logo.svg.png|50px|link=https://www.minds.com/Whonix]] [[File:200px-Mastodon Logotype (Simple).svg.png|50px|link=https://mastodon.technology/@whonix]] [[File:200px-LinkedIn Logo 2013.svg.png|50px|link=https://www.linkedin.com/company/whonix]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> tivg42pltb4z9ksl6wb3oi3dkpib2x6 59502 59497 2020-09-07T21:28:46Z Patrick 2 59502 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[File:Jobble.png|link=https://jooble.org|text=Jobs in USA]]<br /> {{link|link=https://jooble.org|text=Jobs in USA}} <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_Whonix_Online_Profiles|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:1280px-Gab_text_logo.svg.png|50px|link=https://gab.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/#whonix:tchncs.de]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[File:Diaspora.png|50px|link=https://diasp.org/u/whonix]] [[File:Gnusocial.png|50px|link=https://gnusocial.cc/whonix]] [[File:Mewe.png|50px|link=https://mewe.com/i/whonixanonymousos]] [[File:500px-Tumblr Wordmark.svg.png|50px|link=https://whonix.tumblr.com/]] [[File:Iconfinder youtube 317714.png|50px|link=https://www.youtube.com/user/adrelanos]] [[File:200px-Minds logo.svg.png|50px|link=https://www.minds.com/Whonix]] [[File:200px-Mastodon Logotype (Simple).svg.png|50px|link=https://mastodon.technology/@whonix]] [[File:200px-LinkedIn Logo 2013.svg.png|50px|link=https://www.linkedin.com/company/whonix]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> scjh1p1mnkmwrqs9pe738zae467nlju 60559 59502 2020-10-24T08:29:17Z Patrick 2 https://www.whonix.org/wiki/Official_Whonix_Online_Profiles#Selection_of_Platforms 60559 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[File:Jobble.png|link=https://jooble.org|text=Jobs in USA]]<br /> {{link|link=https://jooble.org|text=Jobs in USA}} <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_Whonix_Online_Profiles|Follow]]: [[File:twitter.png|50px|link=https://twitter.com/Whonix]] [[File:facebook.png|50px|link=https://www.facebook.com/Whonix]] [[File:Iconfinder news 18421.png|50px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|50px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|50px|link=https://matrix.to/#/#whonix:tchncs.de]] [[File:1024px-Telegram_2019_Logo.svg.png|50px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|50px|link=https://forums.whonix.org]] [[File:Reddit.jpg|50px|link=https://www.reddit.com/r/Whonix]] [[Donate]]: [[File:Donate.png|50px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|50px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|50px]] [[File:BC_Logo_.png|50px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|50px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|50px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> cbdml4v75eonjgh8ggdhbu5bewv5x4x 60583 60559 2020-10-26T18:46:30Z Patrick 2 60583 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[File:Jobble.png|link=https://jooble.org|text=Jobs in USA]]<br /> {{link|link=https://jooble.org|text=Jobs in USA}} <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_Whonix_Online_Profiles|Follow]]: [[File:twitter.png|25px|link=https://twitter.com/Whonix]] [[File:facebook.png|25px|link=https://www.facebook.com/Whonix]] [[File:Iconfinder news 18421.png|25px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|25px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#whonix:tchncs.de]] [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|25px|link=https://forums.whonix.org]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/Whonix]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> qkh5gy6k36iy79e3lhcw8c86k4ydu1t 60588 60583 2020-10-27T10:47:00Z Patrick 2 60588 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[File:Jobble.png|link=https://jooble.org|text=Jobs in USA]]<br /> {{link|link=https://jooble.org|text=Jobs in USA}} <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_Whonix_Online_Profiles|Follow]]: [[File:twitter.png|25px|link=https://twitter.com/Whonix]] [[File:facebook.png|25px|link=https://www.facebook.com/Whonix]] [[File:Iconfinder news 18421.png|25px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|25px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#whonix:tchncs.de]] [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|25px|link=https://forums.whonix.org]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/Whonix]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@whonix]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.svg|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> tdmt7arox4abyyszrsgbteifz1tjgo9 60805 60588 2020-11-23T10:38:23Z Patrick 2 60805 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[File:Jobble.png|link=https://jooble.org|text=Jobs in USA]]<br /> {{link|link=https://jooble.org|text=Jobs in USA}} <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_Whonix_Online_Profiles|Follow]]: [[File:twitter.png|25px|link=https://twitter.com/Whonix]] [[File:facebook.png|25px|link=https://www.facebook.com/Whonix]] [[File:Iconfinder news 18421.png|25px|link=https://mailman.whonix.org/postorius/lists/whonix-newsletter.mailman.whonix.org/]] [[File:rss.png|25px|link=https://forums.whonix.org/c/news.rss]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#whonix:tchncs.de]] [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/Whonix_Chat_No_Media]] [[File:Discourse_logo.svg|25px|link=https://forums.whonix.org]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/Whonix]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@whonix]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:Whonix_donate_bitcoin.png|100px]] [[File:Monero donate whonix.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_Whonix_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of Whonix Website and Whonix Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 92viwnvkauc5ylrxhziec56rj6s7xpr 60807 60805 2020-11-23T10:45:15Z Patrick 2 60807 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{project name}} is {{#widget:Advertisement}} </div> <hr> [[File:Jobble.png|link=https://jooble.org|text=Jobs in USA]]<br /> {{link|link=https://jooble.org|text=Jobs in USA}} <hr> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_{{project_name_short}}_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> rgsvwsqxeurhc30gfxhnd3x3ftdv91e 60817 60807 2020-11-23T10:56:44Z Patrick 2 60817 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_{{project_name_short}}_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> fbuglzpsw2nz8eckq7et8m2rfwcubrn 61043 60817 2020-11-29T15:31:28Z Patrick 2 61043 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/Whonix_All_News]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_{{project_name_short}}_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 1cgedmxuetpe8oz13nc6hokohyzr6oe 61044 61043 2020-11-29T15:32:19Z Patrick 2 61044 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/Whonix_All_News]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_{{project_name_short}}_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> foz8q5wq456f6tdev9iam2fe87i62da 61045 61044 2020-11-29T15:34:33Z Patrick 2 61045 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_All_News]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_{{project_name_short}}_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> ftp63tqy2fhyos94o7buttvxmfz1fgw 61048 61045 2020-11-29T15:59:06Z Patrick 2 61048 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short_lowercase}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_{{project_name_short}}_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> rxb5ty8krzzwcth7jxfuloehj1qb3us 61161 61048 2020-12-03T10:01:35Z Patrick 2 61161 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_{{project_name_short}}_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project name short}}.org{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> i9dlhvbz9zr6o68w8y5xgbiw9qdtmee 61182 61161 2020-12-05T16:30:09Z Patrick 2 61182 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_{{project_name_short}}_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 74z1shf92vkcstlagvb7127yjzoyxw8 62512 61182 2021-02-09T12:22:04Z Patrick 2 62512 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] Share: {{Share}} [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_{{project_name_short}}_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 8umy0y3axhks455szyv4fwa86wapx3r 62516 62512 2021-02-09T12:29:16Z Patrick 2 62516 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] {{Share}} [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_{{project_name_short}}_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 2ujqin6ypcfh2dfp0tjqcvliu1wrkui 62517 62516 2021-02-09T12:29:41Z Patrick 2 62517 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] [[Official_{{project_name_short}}_Online_Profiles|Share]]: {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 74z1shf92vkcstlagvb7127yjzoyxw8 62518 62517 2021-02-09T12:30:40Z Patrick 2 62518 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> tdo1zayagahl2d6opa99h1o6dggdu4w 62632 62518 2021-02-21T09:49:28Z Patrick 2 62632 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2020 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> ney4pnfk7wmt8f568hxum8rv0cazkee 63932 62632 2021-03-29T19:48:37Z Patrick 2 63932 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2021 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 5zcg7ctxb757ytriyuqbtde38ob3x61 64351 63932 2021-04-08T19:39:33Z Patrick 2 64351 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2021 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{Admins}} {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> lrjefm31o65enoxywa80q2tlur99mb5 65815 64351 2021-06-05T01:42:17Z Buffy 4651 Changed protection level for "[[Template:Footer]]" ([Move=Allow only administrators] (indefinite)) 64351 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. Copyright (C) 2012 - 2021 {{name}}. [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a [https://www.openinventionnetwork.com/licensees.php licensee] of the [https://www.openinventionnetwork.com Open Invention Network]. Unless otherwise noted, the content of this page is [[{{project name short}}:Copyrights|copyrighted]] and licensed under the same Freedom Software [[{{project name short}}:Copyrights#License|license]] as {{project name}} itself. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{Admins}} {{project name}} is a derivative of and not affiliated with [https://www.debian.org Debian]. [https://www.debian.org/trademark Debian is a registered trademark] owned by [https://www.spi-inc.org/ Software in the Public Interest, Inc]. {{project name}} is produced independently from the Tor[https://2019.www.torproject.org/docs/trademark-faq.html.en ®] anonymity software and carries no guarantee from [https://www.torproject.org The Tor Project] about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> lrjefm31o65enoxywa80q2tlur99mb5 66008 65815 2021-06-07T21:03:23Z Patrick 2 66008 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. [[{{project name short}}:Copyrights|Copyright (C) software / wiki]]. {{project name}} is Freedom Software / Open Source. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a {{link|link=https://www.openinventionnetwork.com/licensees.php|text=licensee}} of the {{link|link=https://www.openinventionnetwork.com|text=Open Invention Network}}. {{Admins}} {{project name}} is a derivative of and not affiliated with {{link|link=https://www.debian.org|text=Debian}}. {{link|link=https://www.debian.org/trademark|text=Debian is a registered trademark}} owned by {{link|link=https://www.spi-inc.org/|text=Software in the Public Interest, Inc}}. {{project name}} is produced independently from the Tor{{link|link=https://2019.www.torproject.org/docs/trademark-faq.html.en|text=®}} anonymity software and carries no guarantee from {{link|link=https://www.torproject.org|text=The Tor Project}} about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 3ftn05uqnqgswq5xd1rlxdmoyrf3wqv 66009 66008 2021-06-07T21:14:31Z Patrick 2 66009 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to [[{{project name short}}:Copyrights#Conditions_for_Contributions_to_{{project name}}|Conditions for Contributions to {{project name}}]], then {{Edit_it}}! Edits are held for moderation. [[Policy of {{project_name_short}} Website and {{project_name_short}} Chat]] and [[Policy On Nonfreedom Software]] applies. [[{{project name short}}:Copyrights|Copyright (C) software]] / [[{{project name short}}:Copyrights#Wiki|wiki]]. {{project name}} is Freedom Software / Open Source. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a {{link|link=https://www.openinventionnetwork.com/licensees.php|text=licensee}} of the {{link|link=https://www.openinventionnetwork.com|text=Open Invention Network}}. {{Admins}} {{project name}} is a derivative of and not affiliated with {{link|link=https://www.debian.org|text=Debian}}. {{link|link=https://www.debian.org/trademark|text=Debian is a registered trademark}} owned by {{link|link=https://www.spi-inc.org/|text=Software in the Public Interest, Inc}}. {{project name}} is produced independently from the Tor{{link|link=https://2019.www.torproject.org/docs/trademark-faq.html.en|text=®}} anonymity software and carries no guarantee from {{link|link=https://www.torproject.org|text=The Tor Project}} about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> huvsz9mokfrs0f1lrtvu2mt8job3g16 66120 66009 2021-06-17T21:29:03Z Patrick 2 https://forums.whonix.org/t/long-wiki-edits-thread/3477/2043 66120 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> [[{{project name short}}:Copyrights|Copyright (C) software]] / [[{{project name short}}:Copyrights#Wiki|wiki]]. {{project name}} is Freedom Software / Open Source. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a {{link|link=https://www.openinventionnetwork.com/licensees.php|text=licensee}} of the {{link|link=https://www.openinventionnetwork.com|text=Open Invention Network}}. {{Admins}} {{project name}} is a derivative of and not affiliated with {{link|link=https://www.debian.org|text=Debian}}. {{link|link=https://www.debian.org/trademark|text=Debian is a registered trademark}} owned by {{link|link=https://www.spi-inc.org/|text=Software in the Public Interest, Inc}}. {{project name}} is produced independently from the Tor{{link|link=https://2019.www.torproject.org/docs/trademark-faq.html.en|text=®}} anonymity software and carries no guarantee from {{link|link=https://www.torproject.org|text=The Tor Project}} about quality, suitability or anything else. By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> 909zdjam54phtnmq6hhknplrcudw0nc 66121 66120 2021-06-17T21:39:53Z Patrick 2 https://forums.whonix.org/t/long-wiki-edits-thread/3477/2044 66121 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> [[{{project name short}}:Copyrights|Copyright (C) software]] / [[{{project name short}}:Copyrights#Wiki|wiki]]. {{project name}} is Freedom Software / Open Source. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{project name}} is a {{link|link=https://www.openinventionnetwork.com/licensees.php|text=licensee}} of the {{link|link=https://www.openinventionnetwork.com|text=Open Invention Network}}. {{Admins}} By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> gtgkh7nnd7q0c5bjzdnv975onb7px0x 66124 66121 2021-06-17T21:44:21Z Patrick 2 moved to https://www.whonix.org/wiki/Whonix:Copyrights#Patents 66124 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> [[{{project name short}}:Copyrights|Copyright (C) software]] / [[{{project name short}}:Copyrights#Wiki|wiki]]. {{project name}} is Freedom Software / Open Source. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) [[{{project name short}} Trademark Policy|{{project name}} is a trademark.]] {{Admins}} By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> dwksqffqy43icl2dy7o40zsury334u3 66126 66124 2021-06-17T21:49:00Z Patrick 2 moved to https://www.whonix.org/wiki/Whonix:Copyrights#Trademark 66126 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] <font size="-1"> {{project name short}} [[{{project name short}} Trademark Policy|™]] Copyright [[{{project name short}}:Copyrights|(C) software]] / [[{{project name short}}:Copyrights#Wiki|wiki]]. {{project name}} is Freedom Software / Open Source. ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{Admins}} By using our website, you acknowledge that you have read, understood and agreed to our [[Privacy Policy]], [[Cookie Policy]], [[Terms of Service]], and [[E-Sign Consent]]. {{project name}} is provided by {{name}}. See [[Impressum|Imprint]], [[Contact|Contact]]. </font> ggrlj4v5sjf4pfnjg5xqdiu8vg7uhio 66189 66126 2021-06-23T13:55:43Z Patrick 2 66189 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project name short}} [[{{project name short}} Trademark Policy|™]] | [[{{project name short}}:Copyrights|©]] {{name}} | Freedom Software / Open Source ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{Admins}}</font> i0dfggywfkg9t5iyips20ebgfodr5vx 66219 66189 2021-06-24T22:47:13Z Patrick 2 66219 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/{{project_name_short}}_Chat_No_Media]] [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[File:Matrix_logo.svg.png|25px|link=https://matrix.to/#/#{{project_name_short}}:{{project_matrix_server}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project name short}} [[{{project name short}} Trademark Policy|™]] | [[{{project name short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{Admins}}</font> lfiyzgfw3q997d9i2ed0p2930zdhn2j 68276 66219 2021-09-29T17:16:48Z Patrick 2 68276 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contriute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project name short}} [[{{project name short}} Trademark Policy|™]] | [[{{project name short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{Admins}}</font> iox651ag7wnrls8o54y2yvaryzdhf10 70418 68276 2021-11-17T17:14:55Z Patrick 2 70418 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official_{{project_name_short}}_Online_Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project name short}} [[{{project name short}} Trademark Policy|™]] | [[{{project name short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{Admins}}</font> opcizdxg1a6cb908a2n9ec5t61rqefg 70810 70418 2021-11-22T15:36:41Z Einsiedler90 4962 Text replacement - "(?i)\[\[Official.{1,30}Online.Profiles" to "[[Official Project Online Profiles" 70810 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official Project Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project name short}} [[{{project name short}} Trademark Policy|™]] | [[{{project name short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{Admins}}</font> b8xhc8n6dqq5mbsvckkssxen4x5816x 70905 70810 2021-11-22T18:07:25Z Einsiedler90 4962 Text replacement - "(?i)\[\[.{1,30}Trademark.Policy" to "[[Trademark Policy" 70905 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official Project Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project name short}} [[Trademark Policy|™]] | [[{{project name short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{Admins}}</font> 1k7jeeswbmy2cc6476uezxc2ctx1ant 71085 70905 2021-11-23T07:07:03Z Patrick 2 Text replacement - "Official Project Online Profiles" to "Official Online Profiles" 71085 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project name short}} [[Trademark Policy|™]] | [[{{project name short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Why_{{project name short}}_is_Freedom_Software|Why?]]) {{Admins}}</font> hese9jgkksd9p9nla77w10wxh5690l2 71136 71085 2021-11-24T07:12:03Z Einsiedler90 4962 Text replacement - "(?i)\[\[Why.{1,30}is.Freedom.Software" to "[[Why Project is Freedom Software" 71136 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project name short}} [[Trademark Policy|™]] | [[{{project name short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Why Project is Freedom Software|Why?]]) {{Admins}}</font> c6aw5tt9qeiw5pua1l93b3ftloq1xkt 71185 71136 2021-11-24T12:01:02Z Patrick 2 Text replacement - "Why Project is Freedom Software" to "Reasons for Freedom Software" 71185 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project name short}} [[Trademark Policy|™]] | [[{{project name short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> 28yulcx2c7skvvu5lnlkf447ndd7h0q 71757 71185 2021-12-01T09:57:22Z Patrick 2 Text replacement - "(?i)\{\{project.name.short\}\}" to "{{project_name_short}}" 71757 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project name}} Wiki]] <hr> [[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> ms05o1iyz8up622llepwaqtt6h5mfza 72358 71757 2021-12-01T22:42:27Z Patrick 2 Text replacement - "\{\{(\w+)\s(\w+)\}\}" to "{{$1_$2}}" 72358 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name}} Wiki]] <hr> [[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> edzm3fwtiz2wsl4et3hw9s9fm32tfyf 73973 72358 2021-12-02T01:08:08Z Patrick 2 Text replacement - "{{project_name}}" to "{{project_name_long}}" 73973 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] <hr> [[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> c0n3afdynjrcfkddp39zbyx0p5hd7zb 74232 73973 2021-12-09T15:05:36Z 127.0.0.1 Blanked the page 74232 wikitext text/x-wiki phoiac9h4m842xq45sp7s6u21eteeq1 74246 74232 2021-12-09T16:26:08Z Patrick 2 74246 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] <hr> [[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> c0n3afdynjrcfkddp39zbyx0p5hd7zb 74256 74246 2021-12-09T20:02:25Z Buffy 4651 Changed protection level for "[[Template:Footer]]": Footer shouldn't be editable by non-administrators ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite)) 74246 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> {{Advertisement2}} Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] <hr> [[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> c0n3afdynjrcfkddp39zbyx0p5hd7zb 74296 74256 2021-12-11T11:39:51Z Admintemp 5029 74296 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div> <div style="display: flex;justify-content: space-between;"> <div> [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div> <div> [[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] </div> {{Advertisement2}} </div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> dy5he8i0aiizrsos6qx2j3pzyjx4f76 74297 74296 2021-12-11T11:48:08Z Admintemp 5029 74297 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div> <div style="display: flex;justify-content: space-between;"> <div> [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div> <div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] </div>{{Advertisement2}} </div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> 5hbm9ol7kam585i0bdiim5yvryhmqpr 74298 74297 2021-12-11T11:49:56Z Admintemp 5029 74298 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div> <div style="display: flex;justify-content: space-between;"> <div> [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div> <div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] </div>{{Advertisement2}} </div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> gkjtt8s6iiuls974ym316ur6a55j7ri 74300 74298 2021-12-11T11:56:03Z Admintemp 5029 74300 wikitext text/x-wiki <style> div#mw-content-text pre { display: block; background: inherit; font-family: inherit; line-height: inherit; white-space: inherit; margin-bottom: inherit; margin: inherit; padding: inherit; font-size: inherit; overflow: inherit; box-sizing: inherit; } </style> <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div> <div style="display: flex;justify-content: space-between;"> <div> [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div> <div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] </div>{{Advertisement2}} </div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> jkdi2g56xeg3gp5goly9xjblgbr55q7 74301 74300 2021-12-11T11:56:16Z Admintemp 5029 74301 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div> <div style="display: flex;justify-content: space-between;"> <div> [[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div> <div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]] </div>{{Advertisement2}} </div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> icl38y0qwxbgfzipg0xku8yoyzf9iqz 74304 74301 2021-12-11T12:07:55Z Admintemp 5029 74304 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div><div style="display: flex;justify-content: space-between;"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]] [[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]] [[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]] [[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]] [[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]] [[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]] [[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> 7y2ngps3skbl4z2q3gobrs9o9o1gr91 74305 74304 2021-12-11T12:09:26Z Admintemp 5029 74305 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div><div style="display: flex;justify-content: space-between;"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> 5dapfuboph0lnahoutqzysi7z1qylgm 74306 74305 2021-12-11T12:09:56Z Admintemp 5029 74306 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div><div style="display: flex;justify-content: space-between;"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> sultq0236gnpnl0shpmzxbpc80smuco 74307 74306 2021-12-11T12:10:12Z Admintemp 5029 74307 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div><div style="display: flex;justify-content: space-between;"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> qz5csgcm4kvh13dpthakbhi3t0gr0ij 74308 74307 2021-12-11T12:12:27Z Admintemp 5029 74308 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div><div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> 1j0920c1nwd54atoz86wu8dkchzn27t 74310 74308 2021-12-11T12:15:28Z Admintemp 5029 74310 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div><div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> 5pexjkmpcq4hs4z43anqt0xcwtdqgs4 74311 74310 2021-12-11T12:15:46Z Admintemp 5029 74311 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div> <div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> 513lf0i83qh6gomi5qmonxzkvbz9nwv 74312 74311 2021-12-11T12:15:57Z Admintemp 5029 74312 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div> <div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> gwxtalqcd6exnz1kdcssmv0spkwuuxd 74313 74312 2021-12-11T12:19:09Z Admintemp 5029 74313 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div> <div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> qu3hqj0btl35femztl98ukerg18qasl 74314 74313 2021-12-11T12:21:43Z Admintemp 5029 74314 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div> <div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> 4dwswy6vwxeqlbnzs352tglq278ka0i 74315 74314 2021-12-11T12:22:44Z Admintemp 5029 74315 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div> <div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> kjcad6ch72j4g7hnh0be1ysnhht3jah 74338 74315 2021-12-13T14:12:39Z Admintemp 5029 74338 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div class="footer-main"> <div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> Search engines: {{link|link=https://search.yacy.net|text=YaCy}} | {{link|link=https://www.qwant.com|text=Qwant}} | {{link|link=https://www.ecosia.org|text=ecosia}} | {{link|link=https://metager.org|text=MetaGer}} | {{link|link=https://peekier.com|text=peekier}} | [[Special:Search|{{project_name_long}} Wiki]] {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> fzsckbjherew8k6d7jqsui5cek5wi39 74996 74338 2021-12-18T23:02:29Z Patrick 2 74996 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div class="footer-main"> <div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> 4fugvo7pxfzlo52nikoea1wwkcjosw9 75137 74996 2021-12-21T13:07:13Z Patrick 2 75137 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div class="footer-main"> <div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> rkwhe6k49urq3arjj96mf51n9s519cs 75138 75137 2021-12-21T13:07:39Z Patrick 2 75138 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div class="footer-main"> <div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder tor 386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> 7dmpg5h039whhdhcb6f323gf487at15 75253 75138 2021-12-22T11:22:36Z Patrick 2 75253 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div class="footer-main"> <div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_name_short}}.org]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder_tor_386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> q94ak5njapbtl7pb4z5qrkysvpqyqn8 75931 75253 2021-12-29T14:30:55Z Patrick 2 75931 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div class="footer-main"> <div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_clearnet}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder_tor_386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> mj8hbl7ixcfl0ba1y7r1v4a43261o8m 75953 75931 2021-12-29T15:53:10Z Patrick 2 Text replacement - "Monero_donate_{{project_name_short}}.png" to "{{project_name_short}}_donate_monero.png" 75953 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div class="footer-main"> <div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:{{project_name_short}}_donate_monero.png|100px]] [[File:United Federation of Planets 1000px.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_clearnet}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder_tor_386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> o8io57s1c8xteyj0lzsqdxcp5tp7byp 75960 75953 2021-12-29T16:00:18Z Patrick 2 75960 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div class="footer-main"> <div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:{{project_name_short}}_donate_ethereum.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_clearnet}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Bitcoin_Pay}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder_tor_386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> c1px4h299n2un0v51powuc7lovrfo6e 76231 75960 2022-01-01T08:10:35Z Patrick 2 Text replacement - "Bitcoin_Pay" to "Pay_Bitcoin" 76231 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div class="footer-main"> <div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:Monero_donate_{{project_name_short}}.png|100px]] [[File:{{project_name_short}}_donate_ethereum.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_clearnet}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Pay_Bitcoin}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder_tor_386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> h2x7lxggwnkhbpj3wthgqhpw7n40hc9 76528 76231 2022-01-06T11:16:08Z Patrick 2 Text replacement - "Monero_donate_{{project_name_short}}" to "{{project_name_short}}_donate_monero" 76528 wikitext text/x-wiki <hr> <div style="padding-bottom:1px; padding-top:6px; border:thin solid black; background:#EEEEEE; text-align:center;"> {{Advertisement}} </div> <div class="footer-main"> <div style="display: flex;justify-content: space-between;" class="footer-row-multi"><div>[[File:{{project_name_short}}_donate_bitcoin.png|100px]] [[File:{{project_name_short}}_donate_monero.png|100px]] [[File:{{project_name_short}}_donate_ethereum.png|100px]] {{Share}} </div><div>[[Official Online Profiles|Follow]]: [[File:1024px-Telegram_2019_Logo.svg.png|25px|link=https://t.me/s/{{project_name_short}}_All_News]][[File:Iconfinder Apple Mail 2697658.png|25px|link=https://mailman.{{project_name_short_lowercase}}.org/postorius/lists/{{project_name_short_lowercase}}-newsletter.mailman.{{project_clearnet}}/]][[File:twitter.png|25px|link=https://twitter.com/{{project_name_short}}]][[File:facebook.png|25px|link=https://www.facebook.com/{{project_name_short}}]][[File:rss.png|25px|link=https://forums.{{project_clearnet}}/c/news.rss]][[File:Reddit.jpg|25px|link=https://www.reddit.com/r/{{project_name_short}}]][[File:200px-Mastodon Logotype (Simple).svg.png|25px|link=https://mastodon.technology/@{{project_name_short}}]] [[Support|Support]]: [[File:Discourse_logo.png|25px|link=https://forums.{{project_clearnet}}]] [[Donate]]: [[File:Donate.png|25px|alt=Donate|link=Donate|Donate]] [[File:bank-gray-md.png|25px|alt=Bank Wire|link=Bank Wire]] [[File:de-pp-logo-200px.png|alt=Paypal|link=Pay_by_PayPal_Subscription|25px]] [[File:BC_Logo_.png|25px|alt=Bitcoin accepted here|link=bitcoin:{{Pay_Bitcoin}}]] [[File:Monero-symbol-1280.png|25px|alt=Monero accepted here|link=Donate]] [[File:Circle-question.png|25px|alt=Contribute|link=Contribute|Contribute]]</div>{{Advertisement2}}</div> {{RandomNews}} [[File:https_long.png|50px|alt=https link|link=https://www.{{project_clearnet}}{{localurl:{{FULLPAGENAME}}}}]] [[File:Iconfinder_tor_386502.png|25px|alt=onion link|link=http://www.{{project_onion}}{{localurl:{{FULLPAGENAME}}}}]] [[Priority Support]] | [[Investors]] | [[Professional Support]] <font size="-1">{{project_name_short}} [[Trademark Policy|™]] | [[{{project_name_short}}:Copyrights|©]] {{name}} | [[File:Heckert gnu.big.png|25px]] Freedom Software / [[File:Osi standard logo 0.png|25px]] Open Source ([[Reasons for Freedom Software|Why?]]) {{Admins}}</font> ez86qcq3iclva6dkzt00mxob6191l4k 76596 76528 2022-01-06T18:31:02Z Hans 5031 76596 wikitext text/x-wiki {{#css:Mediawiki:Footer2.css}} <div class="main-footer"> {{#widget:Footer2 |context={{SERVER}} |bitcoin={{Pay_Bitcoin}} |bitcoinImgUrl={{Pay_bitcoin_qr_imgurl}} |monero={{Pay_Monero}} |moneroImgUrl={{Pay_monero_qr_imgurl}} |ether={{Pay_Ethereum}} |etherImgUrl={{Pay_ethereum_qr_imgurl}} |projectName={{Project name short}} |projectDomainClearnet={{Project clearnet}} |projectDomainOnion={{Project onion}} }} {{RandomNews}} </div> 5ib7mz913srighm07xgeqx6wn5c70s6 77122 76596 2022-01-10T11:20:46Z Hans 5031 77122 wikitext text/x-wiki {{#css:Mediawiki:Footer2.css}} <div class="main-footer"> {{#widget:Footer2 |context={{SERVER}} |bitcoin={{Pay_Bitcoin}} |bitcoinImgUrl={{Pay_bitcoin_qr_imgurl}} |monero={{Pay_Monero}} |moneroImgUrl={{Pay_monero_qr_imgurl}} |ether={{Pay_Ethereum}} |etherImgUrl={{Pay_ethereum_qr_imgurl}} |projectName={{Project name short}} |projectDomainClearnet={{Project clearnet}} |projectDomainOnion={{Project onion}} }} {{RandomNews}} </div> {{FULLPAGENAME}} 5zsh9ncm1jpumvp1keariz15o8dj3q7 77123 77122 2022-01-10T11:21:17Z Hans 5031 77123 wikitext text/x-wiki {{#css:Mediawiki:Footer2.css}} <div class="main-footer"> {{#widget:Footer2 |context={{SERVER}} |bitcoin={{Pay_Bitcoin}} |bitcoinImgUrl={{Pay_bitcoin_qr_imgurl}} |monero={{Pay_Monero}} |moneroImgUrl={{Pay_monero_qr_imgurl}} |ether={{Pay_Ethereum}} |etherImgUrl={{Pay_ethereum_qr_imgurl}} |projectName={{Project name short}} |projectDomainClearnet={{Project clearnet}} |projectDomainOnion={{Project onion}} }} {{RandomNews}} </div> 5ib7mz913srighm07xgeqx6wn5c70s6 77632 77123 2022-01-17T10:25:16Z Hans 5031 77632 wikitext text/x-wiki {{#css:Mediawiki:Footer2.css}} <div id="custom-footer"> {{#widget:Footer2 |context={{SERVER}} |bitcoin={{Pay_Bitcoin}} |bitcoinImgUrl={{Pay_bitcoin_qr_imgurl}} |monero={{Pay_Monero}} |moneroImgUrl={{Pay_monero_qr_imgurl}} |ether={{Pay_Ethereum}} |etherImgUrl={{Pay_ethereum_qr_imgurl}} |projectName={{Project name short}} |projectDomainClearnet={{Project clearnet}} |projectDomainOnion={{Project onion}} }} {{RandomNews}} </div> hwobal8xpzelz47e619xe8mnxe9ycsl 77739 77632 2022-01-17T16:16:07Z Hans 5031 77739 wikitext text/x-wiki {{#css:Mediawiki:Footer.css}} <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |bitcoin={{Pay_Bitcoin}} |bitcoinImgUrl={{Pay_bitcoin_qr_imgurl}} |monero={{Pay_Monero}} |moneroImgUrl={{Pay_monero_qr_imgurl}} |ether={{Pay_Ethereum}} |etherImgUrl={{Pay_ethereum_qr_imgurl}} |projectName={{Project name short}} |projectDomainClearnet={{Project clearnet}} |projectDomainOnion={{Project onion}} }} {{RandomNews}} </div> ccvqqv848iznqmkxblqnb4tjhtr9w87 77776 77739 2022-01-17T19:44:05Z Patrick 2 77776 wikitext text/x-wiki {{#css:Mediawiki:Footer.css}} <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |bitcoin={{Pay_Bitcoin}} |bitcoinImgUrl={{Pay_bitcoin_qr_imgurl}} |monero={{Pay_Monero}} |moneroImgUrl={{Pay_monero_qr_imgurl}} |ether={{Pay_Ethereum}} |etherImgUrl={{Pay_ethereum_qr_imgurl}} |projectName={{project_name_short}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} }} {{RandomNews}} </div> 5o95mjy9c6g442ikbb1x57xfbdnfo0l 82986 77776 2022-03-23T14:22:48Z Patrick 2 82986 wikitext text/x-wiki {{#css:Mediawiki:Footer.css}} <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |bitcoin={{Pay_Bitcoin}} |bitcoinImgUrl={{Pay_bitcoin_qr_imgurl}} |monero={{Pay_Monero}} |moneroImgUrl={{Pay_monero_qr_imgurl}} |ether={{Pay_Ethereum}} |etherImgUrl={{Pay_ethereum_qr_imgurl}} |projectName={{project_name_short}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} }} {{RandomNews}} </div> 2in33eshbyv6hrbg6evf0cbqko4lt0s 83004 82986 2022-03-24T13:34:38Z Patrick 2 83004 wikitext text/x-wiki {{#css:Mediawiki:Footer.css}} <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |Pay_Bitcoin={{Pay_Bitcoin}} |bitcoinImgUrl={{Pay_bitcoin_qr_imgurl}} |Pay_Monero={{Pay_Monero}} |moneroImgUrl={{Pay_monero_qr_imgurl}} |Pay_Ethereum={{Pay_Ethereum}} |etherImgUrl={{Pay_ethereum_qr_imgurl}} |projectName={{project_name_short}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} }} {{RandomNews}} </div> n4bwbb3ckhvviq5vstyzzqoiwaoew8r 84026 83004 2022-07-11T19:03:36Z Patrick 2 84026 wikitext text/x-wiki {{#css:Mediawiki:Footer.css}} <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |Pay_Bitcoin={{Pay_Bitcoin}} |bitcoinImgUrl={{Pay_bitcoin_qr_imgurl}} |Pay_Monero={{Pay_Monero}} |moneroImgUrl={{Pay_monero_qr_imgurl}} |Pay_Ethereum={{Pay_Ethereum}} |etherImgUrl={{Pay_ethereum_qr_imgurl}} |projectName={{project_name_short}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} |projectSloganLong={{project_slogan_long}} }} {{RandomNews}} </div> lo6rbw15rpkdin0uoxz8qbxwanh4z8s 87930 84026 2022-09-21T09:39:57Z Hans 5031 87930 wikitext text/x-wiki {{#css:Mediawiki:Footer.css}} <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |Pay_Bitcoin={{Pay_Bitcoin}} |bitcoinImgUrl={{Pay_bitcoin_qr_imgurl}} |Pay_Monero={{Pay_Monero}} |moneroImgUrl={{Pay_monero_qr_imgurl}} |Pay_Ethereum={{Pay_Ethereum}} |etherImgUrl={{Pay_ethereum_qr_imgurl}} |projectName={{project_name_short}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} |projectSloganLong={{project_slogan_long}} |page={{FULLPAGENAME}} |shareUrl={{canonicalurl:{{FULLPAGENAME}}}} }} {{RandomNews}} </div> g97nvfgecbj9j64b6q4ab6k4w1tk23z 88804 87930 2022-10-20T15:46:21Z Patrick 2 88804 wikitext text/x-wiki {{#css:Mediawiki:Footer.css}} <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |Pay_Bitcoin={{Pay_Bitcoin}} |bitcoinImgUrl={{Pay_bitcoin_qr_imgurl}} |Pay_Monero={{Pay_Monero}} |moneroImgUrl={{Pay_monero_qr_imgurl}} |Pay_Ethereum={{Pay_Ethereum}} |etherImgUrl={{Pay_ethereum_qr_imgurl}} |projectName={{project_name_short}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} |projectSloganLong={{project_slogan_long}} |page={{FULLPAGENAME}} |shareUrl={{canonicalurl:{{FULLPAGENAME}}}} }} </div> a4x7aiy2vdicsr33b01h1p7j4iwb1aw 89959 88804 2022-11-23T22:33:01Z Patrick 2 89959 wikitext text/x-wiki {{#css:Mediawiki:Footer.css}} <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |Pay_Bitcoin={{Pay_Bitcoin}} |bitcoinImgUrl={{Pay_bitcoin_qr_imgurl}} |Pay_Monero={{Pay_Monero}} |moneroImgUrl={{Pay_monero_qr_imgurl}} |Pay_Ethereum={{Pay_Ethereum}} |etherImgUrl={{Pay_ethereum_qr_imgurl}} |projectName={{project_name_short}} |projectNameShortLowerCase={{project_name_short_lower_case}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} |projectSloganLong={{project_slogan_long}} |page={{FULLPAGENAME}} |shareUrl={{canonicalurl:{{FULLPAGENAME}}}} }} </div> l427akb5w0ipz6otgy3snbkzsydt68o 89961 89959 2022-11-23T22:34:42Z Patrick 2 89961 wikitext text/x-wiki {{#css:Mediawiki:Footer.css}} <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |Pay_Bitcoin={{Pay_Bitcoin}} |bitcoinImgUrl={{Pay_bitcoin_qr_imgurl}} |Pay_Monero={{Pay_Monero}} |moneroImgUrl={{Pay_monero_qr_imgurl}} |Pay_Ethereum={{Pay_Ethereum}} |etherImgUrl={{Pay_ethereum_qr_imgurl}} |projectName={{project_name_short}} |projectNameShortLowerCase={{project_name_short_lowercase}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} |projectSloganLong={{project_slogan_long}} |page={{FULLPAGENAME}} |shareUrl={{canonicalurl:{{FULLPAGENAME}}}} }} </div> l2wntlhjvncc934jebkcf18df5s2d77 90049 89961 2022-11-25T10:05:31Z Hans 5031 90049 wikitext text/x-wiki <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |Pay_Bitcoin={{Pay_Bitcoin}} |bitcoinImgUrl={{Pay_bitcoin_qr_imgurl}} |Pay_Monero={{Pay_Monero}} |moneroImgUrl={{Pay_monero_qr_imgurl}} |Pay_Ethereum={{Pay_Ethereum}} |etherImgUrl={{Pay_ethereum_qr_imgurl}} |projectName={{project_name_short}} |projectNameShortLowerCase={{project_name_short_lowercase}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} |projectSloganLong={{project_slogan_long}} |page={{FULLPAGENAME}} |shareUrl={{canonicalurl:{{FULLPAGENAME}}}} }} </div> q4c59cbktwctee7u2yue1lltwyva2w6 93785 90049 2023-05-06T10:54:53Z Hans 5031 93785 wikitext text/x-wiki <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |Pay_Bitcoin={{Pay_Bitcoin}} |bitcoinImgUrl={{Pay_bitcoin_qr_imgurl}} |Pay_Monero={{Pay_Monero}} |moneroImgUrl={{Pay_monero_qr_imgurl}} |Pay_Ethereum={{Pay_Ethereum}} |etherImgUrl={{Pay_ethereum_qr_imgurl}} |projectName={{project_name_short}} |projectNameShortLowerCase={{project_name_short_lowercase}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} |projectSloganLong={{project_slogan_long}} |page={{FULLPAGENAME}} |shareUrl={{canonicalurl:{{FULLPAGENAME}}}} }} </div> {{FlyInNotification |imgSrc=/w/images/thumb/e/e8/Flyin-donate-promo.jpg/300px-Flyin-donate-promo.jpg |imgWidth=300 |imgHeight=215 |imgLink=/wiki/Donate |headline=Your support makes<br>all the difference! |html=We believe security software like {{project_name_short}} needs to remain open source and independent. <b>Would you help</b> sustain and grow the project? Learn more about our <a href="/wiki/Donate" target="_blank">10 year success story and maybe DONATE!</a> }} mh315ywdk4jsqwfayw6c5csoiwj9a45 95778 93785 2023-08-24T13:39:34Z Hans 5031 95778 wikitext text/x-wiki {{GoogleOff | content= <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |projectName={{project_name_short}} |projectNameShortLowerCase={{project_name_short_lowercase}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} }} </div> {{FlyInNotification |imgSrc=/w/images/thumb/e/e8/Flyin-donate-promo.jpg/300px-Flyin-donate-promo.jpg |imgWidth=300 |imgHeight=215 |imgLink=/wiki/Donate |headline=Your support makes<br>all the difference! |html=We believe security software like {{project_name_short}} needs to remain open source and independent. <b>Would you help</b> sustain and grow the project? Learn more about our <a href="/wiki/Donate" target="_blank">10 year success story and maybe DONATE!</a> }} }} qz17t61xetfccccccfso144kbg5dft9 95889 95778 2023-09-01T10:47:54Z Hans 5031 95889 wikitext text/x-wiki {{GoogleOff | content= <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |projectName={{project_name_short}} |projectNameLong={{project_name_long}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} }} </div> {{FlyInNotification |imgSrc=/w/images/thumb/e/e8/Flyin-donate-promo.jpg/300px-Flyin-donate-promo.jpg |imgWidth=300 |imgHeight=215 |imgLink=/wiki/Donate |headline=Your support makes<br>all the difference! |html=We believe security software like {{project_name_short}} needs to remain open source and independent. <b>Would you help</b> sustain and grow the project? Learn more about our <a href="/wiki/Donate" target="_blank">10 year success story and maybe DONATE!</a> }} }} qyoqleggbv2d59hsf0v1gvju1hoyaxn 95930 95889 2023-09-01T13:56:42Z Hans 5031 95930 wikitext text/x-wiki {{GoogleOff | content= <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |projectName={{project_name_short}} |projectNameLong={{project_name_long}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} |tm=tm }} </div> {{FlyInNotification |imgSrc=/w/images/thumb/e/e8/Flyin-donate-promo.jpg/300px-Flyin-donate-promo.jpg |imgWidth=300 |imgHeight=215 |imgLink=/wiki/Donate |headline=Your support makes<br>all the difference! |html=We believe security software like {{project_name_short}} needs to remain open source and independent. <b>Would you help</b> sustain and grow the project? Learn more about our <a href="/wiki/Donate" target="_blank">10 year success story and maybe DONATE!</a> }} }} d8tprky64dq1txd7za61bk4yd7yvze6 96130 95930 2023-09-19T15:13:15Z Patrick 2 96130 wikitext text/x-wiki {{GoogleOff | content= <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |projectName={{project_name_short}} |projectNameLong={{project_name_long}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} |tm=r }} </div> {{FlyInNotification |imgSrc=/w/images/thumb/e/e8/Flyin-donate-promo.jpg/300px-Flyin-donate-promo.jpg |imgWidth=300 |imgHeight=215 |imgLink=/wiki/Donate |headline=Your support makes<br>all the difference! |html=We believe security software like {{project_name_short}} needs to remain open source and independent. <b>Would you help</b> sustain and grow the project? Learn more about our <a href="/wiki/Donate" target="_blank">10 year success story and maybe DONATE!</a> }} }} eeqhedu3eef0luqpwtrn2tjiaizg1ww 96809 96130 2023-09-19T19:46:16Z Patrick 2 96809 wikitext text/x-wiki {{GoogleOff | content= <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |projectName={{project_name_short}} |projectNameLong={{project_name_long}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} |tm=tm }} </div> {{FlyInNotification |imgSrc=/w/images/thumb/e/e8/Flyin-donate-promo.jpg/300px-Flyin-donate-promo.jpg |imgWidth=300 |imgHeight=215 |imgLink=/wiki/Donate |headline=Your support makes<br>all the difference! |html=We believe security software like {{project_name_short}} needs to remain open source and independent. <b>Would you help</b> sustain and grow the project? Learn more about our <a href="/wiki/Donate" target="_blank">10 year success story and maybe DONATE!</a> }} }} d8tprky64dq1txd7za61bk4yd7yvze6 97396 96809 2023-10-01T19:43:44Z Patrick 2 97396 wikitext text/x-wiki {{GoogleOff | content= <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |projectName={{project_name_short}} |projectNameShort={{project_name_short}} |projectNameLong={{project_name_long}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} |tm=tm }} </div> {{FlyInNotification |imgSrc=/w/images/thumb/e/e8/Flyin-donate-promo.jpg/300px-Flyin-donate-promo.jpg |imgWidth=300 |imgHeight=215 |imgLink=/wiki/Donate |headline=Your support makes<br>all the difference! |html=We believe security software like {{project_name_short}} needs to remain open source and independent. <b>Would you help</b> sustain and grow the project? Learn more about our <a href="/wiki/Donate" target="_blank">10 year success story and maybe DONATE!</a> }} }} o9orkheng2o3f0zjig1yfwztgwyejsy 97576 97396 2023-10-04T08:55:18Z Patrick 2 97576 wikitext text/x-wiki {{GoogleOff | content= <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |projectName={{project_name_short}} |projectNameShort={{project_name_short}} |projectNameLong={{project_name_long}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} |tm=tm }} </div> {{FlyInNotification |imgSrc=/w/images/thumb/e/e8/Flyin-donate-promo.jpg/300px-Flyin-donate-promo.jpg |imgWidth=300 |imgHeight=215 |imgLink=/wiki/Donate |headline=Your support makes<br>all the difference! |html=We believe security software like {{project_name_short}} needs to remain open source and independent. <b>Would you help</b> sustain and grow the project? Learn more about our <a href="/wiki/Donate" target="_blank">11 year success story and maybe DONATE!</a> }} }} kc54ac4lh4bth0uvmk7rr8dm54vz99f 98171 97576 2023-12-07T10:15:22Z Patrick 2 98171 wikitext text/x-wiki {{GoogleOff | content= <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |projectName={{project_name_short}} |projectNameShort={{project_name_short}} |projectNameLong={{project_name_long}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} |tm=r }} </div> {{FlyInNotification |imgSrc=/w/images/thumb/e/e8/Flyin-donate-promo.jpg/300px-Flyin-donate-promo.jpg |imgWidth=300 |imgHeight=215 |imgLink=/wiki/Donate |headline=Your support makes<br>all the difference! |html=We believe security software like {{project_name_short}} needs to remain open source and independent. <b>Would you help</b> sustain and grow the project? Learn more about our <a href="/wiki/Donate" target="_blank">11 year success story and maybe DONATE!</a> }} }} k1bw0ecxnju3deqm34w5dg6yt09bre3 98489 98171 2024-01-16T10:13:34Z Patrick 2 Text replacement - "11 year" to "{{project_age_years}} year" 98489 wikitext text/x-wiki {{GoogleOff | content= <div id="custom-footer"> {{#widget:Footer |context={{SERVER}} |projectName={{project_name_short}} |projectNameShort={{project_name_short}} |projectNameLong={{project_name_long}} |projectDomainClearnet={{project_clearnet}} |projectDomainOnion={{project_onion}} |projectTelegramAllNewsChannelName={{project_telegram_all_news_channel_name}} |projectSloganShort={{project_slogan_short}} |tm=r }} </div> {{FlyInNotification |imgSrc=/w/images/thumb/e/e8/Flyin-donate-promo.jpg/300px-Flyin-donate-promo.jpg |imgWidth=300 |imgHeight=215 |imgLink=/wiki/Donate |headline=Your support makes<br>all the difference! |html=We believe security software like {{project_name_short}} needs to remain open source and independent. <b>Would you help</b> sustain and grow the project? Learn more about our <a href="/wiki/Donate" target="_blank">{{project_age_years}} year success story and maybe DONATE!</a> }} }} htv7otn748aw7o7f17an28dhsjtjts9 0 16 34 2013-06-27T15:19:05Z Fortasse 1 Created page with "{{Header}} <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelano..." 34 wikitext text/x-wiki {{Header}} <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> = Introduction = Whonix is an operating system that aims at preserving your privacy and anonymity. It helps you to use all kinds applications anonymously. It is a complete operating-system designed to be used from your host operating system or a USB hard drive independently of the computer's original operating system. It is Free Software and based on [http://www.debian.org/ Debian GNU/Linux], Virtual Box and Tor. Whonix comes with several built-in applications pre-configured with security in mind: web browser, irc client, word processing, etc. = Anonymity online through Tor = Whonix relies on the Tor anonymity network to protect your privacy online: all connections are forced through Tor, and direct (non-anonymous) connections are blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian, VirtualBox and Tor = Remember, Whonix is based on Debian, KDE, VirtualBox, Tor and Tor Browser. It is nothing very special. To oversimplify it: Whonix is just a collection of configuration files. ¹ No stripped down versions are used. For example, anything ² you can do with Debian GNU/Linux, you can do with Whonix as well. Most Debian GNU/Linux problems and questions with Whonix you may have can probable be solved the same way as for &quot;vanilla&quot; Debian. Q: &quot;How do I install xrandr on Debian GNU/Linux?&quot; A: &quot;The same way you would with regular Debian GNU/Linux. Try ''apt-get install xrandr''. Nothing special. Same goes for Tor etc. Whonix doesn't break anything, it doesn't stop you from using obfuscated [https://sourceforge.net/p/whonix/wiki/Bridges/ bridges] or any other fancy stuff etc. Tip: since Ubuntu is based on Debian, most things working on Ubuntu will also work on Debian. Most online help for Ubuntu also works for Debian. {{note}} 1 Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together. {{note}} 2 Actually only &quot;almost&quot; everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet, therefore this won't work. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [E-Mail], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random &quot;anonymous&quot; proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [Trust]] or not Trust Whonix, * our [[Security Guide]] and [Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The &quot;Summary of what Whonix is&quot; chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} h36pp53sbb7rzzjudlrbu0u58s5ycz1 330 34 2013-07-03T22:17:58Z Patrick 2 /* What's next? */ 330 wikitext text/x-wiki {{Header}} <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> = Introduction = Whonix is an operating system that aims at preserving your privacy and anonymity. It helps you to use all kinds applications anonymously. It is a complete operating-system designed to be used from your host operating system or a USB hard drive independently of the computer's original operating system. It is Free Software and based on [http://www.debian.org/ Debian GNU/Linux], Virtual Box and Tor. Whonix comes with several built-in applications pre-configured with security in mind: web browser, irc client, word processing, etc. = Anonymity online through Tor = Whonix relies on the Tor anonymity network to protect your privacy online: all connections are forced through Tor, and direct (non-anonymous) connections are blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian, VirtualBox and Tor = Remember, Whonix is based on Debian, KDE, VirtualBox, Tor and Tor Browser. It is nothing very special. To oversimplify it: Whonix is just a collection of configuration files. ¹ No stripped down versions are used. For example, anything ² you can do with Debian GNU/Linux, you can do with Whonix as well. Most Debian GNU/Linux problems and questions with Whonix you may have can probable be solved the same way as for &quot;vanilla&quot; Debian. Q: &quot;How do I install xrandr on Debian GNU/Linux?&quot; A: &quot;The same way you would with regular Debian GNU/Linux. Try ''apt-get install xrandr''. Nothing special. Same goes for Tor etc. Whonix doesn't break anything, it doesn't stop you from using obfuscated [https://sourceforge.net/p/whonix/wiki/Bridges/ bridges] or any other fancy stuff etc. Tip: since Ubuntu is based on Debian, most things working on Ubuntu will also work on Debian. Most online help for Ubuntu also works for Debian. {{note}} 1 Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together. {{note}} 2 Actually only &quot;almost&quot; everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet, therefore this won't work. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [E-Mail], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random &quot;anonymous&quot; proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The &quot;Summary of what Whonix is&quot; chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} ixh5xqkegppa6xryo3gyww6j0oligcg 810 330 2013-07-10T17:50:07Z Patrick 2 /* Acknowledgements, Credits, Related projects, Authorship */ 810 wikitext text/x-wiki {{Header}} <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> = Introduction = Whonix is an operating system that aims at preserving your privacy and anonymity. It helps you to use all kinds applications anonymously. It is a complete operating-system designed to be used from your host operating system or a USB hard drive independently of the computer's original operating system. It is Free Software and based on [http://www.debian.org/ Debian GNU/Linux], Virtual Box and Tor. Whonix comes with several built-in applications pre-configured with security in mind: web browser, irc client, word processing, etc. = Anonymity online through Tor = Whonix relies on the Tor anonymity network to protect your privacy online: all connections are forced through Tor, and direct (non-anonymous) connections are blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian, VirtualBox and Tor = Remember, Whonix is based on Debian, KDE, VirtualBox, Tor and Tor Browser. It is nothing very special. To oversimplify it: Whonix is just a collection of configuration files. ¹ No stripped down versions are used. For example, anything ² you can do with Debian GNU/Linux, you can do with Whonix as well. Most Debian GNU/Linux problems and questions with Whonix you may have can probable be solved the same way as for &quot;vanilla&quot; Debian. Q: &quot;How do I install xrandr on Debian GNU/Linux?&quot; A: &quot;The same way you would with regular Debian GNU/Linux. Try ''apt-get install xrandr''. Nothing special. Same goes for Tor etc. Whonix doesn't break anything, it doesn't stop you from using obfuscated [https://sourceforge.net/p/whonix/wiki/Bridges/ bridges] or any other fancy stuff etc. Tip: since Ubuntu is based on Debian, most things working on Ubuntu will also work on Debian. Most online help for Ubuntu also works for Debian. {{note}} 1 Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together. {{note}} 2 Actually only &quot;almost&quot; everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet, therefore this won't work. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [E-Mail], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random &quot;anonymous&quot; proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. ''Italic text''= Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The &quot;Summary of what Whonix is&quot; chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} 8rn8jco1cppera5xwe9a218g8jppo5q 811 810 2013-07-10T17:50:41Z Patrick 2 /* What's next? */ 811 wikitext text/x-wiki {{Header}} <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> = Introduction = Whonix is an operating system that aims at preserving your privacy and anonymity. It helps you to use all kinds applications anonymously. It is a complete operating-system designed to be used from your host operating system or a USB hard drive independently of the computer's original operating system. It is Free Software and based on [http://www.debian.org/ Debian GNU/Linux], Virtual Box and Tor. Whonix comes with several built-in applications pre-configured with security in mind: web browser, irc client, word processing, etc. = Anonymity online through Tor = Whonix relies on the Tor anonymity network to protect your privacy online: all connections are forced through Tor, and direct (non-anonymous) connections are blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian, VirtualBox and Tor = Remember, Whonix is based on Debian, KDE, VirtualBox, Tor and Tor Browser. It is nothing very special. To oversimplify it: Whonix is just a collection of configuration files. ¹ No stripped down versions are used. For example, anything ² you can do with Debian GNU/Linux, you can do with Whonix as well. Most Debian GNU/Linux problems and questions with Whonix you may have can probable be solved the same way as for &quot;vanilla&quot; Debian. Q: &quot;How do I install xrandr on Debian GNU/Linux?&quot; A: &quot;The same way you would with regular Debian GNU/Linux. Try ''apt-get install xrandr''. Nothing special. Same goes for Tor etc. Whonix doesn't break anything, it doesn't stop you from using obfuscated [https://sourceforge.net/p/whonix/wiki/Bridges/ bridges] or any other fancy stuff etc. Tip: since Ubuntu is based on Debian, most things working on Ubuntu will also work on Debian. Most online help for Ubuntu also works for Debian. {{note}} 1 Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together. {{note}} 2 Actually only &quot;almost&quot; everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet, therefore this won't work. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [E-Mail], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random &quot;anonymous&quot; proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The &quot;Summary of what Whonix is&quot; chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} fmbh0uim2s5c0ubyjz1fei3i8qfl5q0 993 811 2013-07-11T23:11:48Z 127.0.0.1 /* Whonix is based on Debian, VirtualBox and Tor */ 993 wikitext text/x-wiki {{Header}} <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> = Introduction = Whonix is an operating system that aims at preserving your privacy and anonymity. It helps you to use all kinds applications anonymously. It is a complete operating-system designed to be used from your host operating system or a USB hard drive independently of the computer's original operating system. It is Free Software and based on [http://www.debian.org/ Debian GNU/Linux], Virtual Box and Tor. Whonix comes with several built-in applications pre-configured with security in mind: web browser, irc client, word processing, etc. = Anonymity online through Tor = Whonix relies on the Tor anonymity network to protect your privacy online: all connections are forced through Tor, and direct (non-anonymous) connections are blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian, VirtualBox and Tor = Remember, Whonix is based on Debian, KDE, VirtualBox, Tor and Tor Browser. It is nothing very special. To oversimplify it: Whonix is just a collection of configuration files. ¹ No stripped down versions are used. For example, anything ² you can do with Debian GNU/Linux, you can do with Whonix as well. Most Debian GNU/Linux problems and questions with Whonix you may have can probable be solved the same way as for &quot;vanilla&quot; Debian. Q: &quot;How do I install xrandr on Debian GNU/Linux?&quot; A: &quot;The same way you would with regular Debian GNU/Linux. Try ''apt-get install xrandr''. Nothing special. Same goes for Tor etc. Whonix doesn't break anything, it doesn't stop you from using obfuscated [[Bridges]] or any other fancy stuff etc. Tip: since Ubuntu is based on Debian, most things working on Ubuntu will also work on Debian. Most online help for Ubuntu also works for Debian. {{note}} 1 Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together. {{note}} 2 Actually only &quot;almost&quot; everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet, therefore this won't work. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [E-Mail], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random &quot;anonymous&quot; proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The &quot;Summary of what Whonix is&quot; chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} 0s5c5ni336cfer6gnzoxdt6ob8q616z 994 993 2013-07-11T23:12:29Z 127.0.0.1 994 wikitext text/x-wiki {{Header}} <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> = Introduction = Whonix is an operating system that aims at preserving your privacy and anonymity. It helps you to use all kinds applications anonymously. It is a complete operating-system designed to be used from your host operating system or a USB hard drive independently of the computer's original operating system. It is Free Software and based on [http://www.debian.org/ Debian GNU/Linux], Virtual Box and Tor. Whonix comes with several built-in applications pre-configured with security in mind: web browser, irc client, word processing, etc. = Anonymity online through Tor = Whonix relies on the Tor anonymity network to protect your privacy online: all connections are forced through Tor, and direct (non-anonymous) connections are blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian, VirtualBox and Tor = Remember, Whonix is based on Debian, KDE, VirtualBox, Tor and Tor Browser. It is nothing very special. To oversimplify it: Whonix is just a collection of configuration files. ¹ No stripped down versions are used. For example, anything ² you can do with Debian GNU/Linux, you can do with Whonix as well. Most Debian GNU/Linux problems and questions with Whonix you may have can probable be solved the same way as for "vanilla" Debian. Q: "How do I install xrandr on Debian GNU/Linux?" A: "The same way you would with regular Debian GNU/Linux. Try ''apt-get install xrandr''. Nothing special. Same goes for Tor etc. Whonix doesn't break anything, it doesn't stop you from using obfuscated [[Bridges]] or any other fancy stuff etc. Tip: since Ubuntu is based on Debian, most things working on Ubuntu will also work on Debian. Most online help for Ubuntu also works for Debian. {{note}} 1 Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together. {{note}} 2 Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet, therefore this won't work. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [E-Mail], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} ptymv9g43wolvz9n3yj907e6butdqna 996 994 2013-07-11T23:19:20Z Patrick 2 996 wikitext text/x-wiki {{Header}} <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> = Introduction = Whonix is an operating system that aims at preserving your privacy and anonymity. It helps you to use all kinds applications anonymously. It is a complete operating-system designed to be used from your host operating system or a USB hard drive independently of the computer's original operating system. It is Free Software and based on [http://www.debian.org/ Debian GNU/Linux], Virtual Box and Tor. Whonix comes with several built-in applications pre-configured with security in mind: web browser, irc client, word processing, etc. = Anonymity online through Tor = Whonix relies on the Tor anonymity network to protect your privacy online: all connections are forced through Tor, and direct (non-anonymous) connections are blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian, VirtualBox and Tor = Remember, Whonix is based on Debian, KDE, VirtualBox, Tor and Tor Browser. It is nothing very special. To oversimplify it: Whonix is just a collection of configuration files. ¹ No stripped down versions are used. For example, anything ² you can do with Debian GNU/Linux, you can do with Whonix as well. Most Debian GNU/Linux problems and questions with Whonix you may have can probable be solved the same way as for "vanilla" Debian. Q: "How do I install xrandr on Debian GNU/Linux?" A: "The same way you would with regular Debian GNU/Linux. Try ''apt-get install xrandr''. Nothing special. Same goes for Tor etc. Whonix doesn't break anything, it doesn't stop you from using obfuscated [[Bridges]] or any other fancy stuff etc. Tip: since Ubuntu is based on Debian, most things working on Ubuntu will also work on Debian. Most online help for Ubuntu also works for Debian. {{note}} 1 Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together. {{note}} 2 Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet, therefore this won't work. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [E-Mail], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. [[Category:Documentation]] {{Footer}} sj89sl73lrv6l2xf4inw01f63tz1shr 1139 996 2013-07-12T15:58:34Z 127.0.0.1 /* Introduction */ Restructured; edited for style; added ref links 1139 wikitext text/x-wiki {{Header}} <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and Virtual Box<ref>https://en.wikipedia.org/wiki/VirtualBox</ref>. = Anonymity online through Tor = Whonix relies on the Tor anonymity network to protect your privacy online: all connections are forced through Tor, and direct (non-anonymous) connections are blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian, VirtualBox and Tor = Remember, Whonix is based on Debian, KDE, VirtualBox, Tor and Tor Browser. It is nothing very special. To oversimplify it: Whonix is just a collection of configuration files. ¹ No stripped down versions are used. For example, anything ² you can do with Debian GNU/Linux, you can do with Whonix as well. Most Debian GNU/Linux problems and questions with Whonix you may have can probable be solved the same way as for "vanilla" Debian. Q: "How do I install xrandr on Debian GNU/Linux?" A: "The same way you would with regular Debian GNU/Linux. Try ''apt-get install xrandr''. Nothing special. Same goes for Tor etc. Whonix doesn't break anything, it doesn't stop you from using obfuscated [[Bridges]] or any other fancy stuff etc. Tip: since Ubuntu is based on Debian, most things working on Ubuntu will also work on Debian. Most online help for Ubuntu also works for Debian. {{note}} 1 Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together. {{note}} 2 Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet, therefore this won't work. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [E-Mail], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. [[Category:Documentation]] {{Footer}} i2u9cgnmuzdj4ofqyidb4cja4bzn92h 1236 1139 2013-07-12T17:56:26Z Patrick 2 1236 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and Virtual Box<ref>https://en.wikipedia.org/wiki/VirtualBox</ref>. = Anonymity online through Tor = Whonix relies on the Tor anonymity network to protect your privacy online: all connections are forced through Tor, and direct (non-anonymous) connections are blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian, VirtualBox and Tor = Remember, Whonix is based on Debian, KDE, VirtualBox, Tor and Tor Browser. It is nothing very special. To oversimplify it: Whonix is just a collection of configuration files. ¹ No stripped down versions are used. For example, anything ² you can do with Debian GNU/Linux, you can do with Whonix as well. Most Debian GNU/Linux problems and questions with Whonix you may have can probable be solved the same way as for "vanilla" Debian. Q: "How do I install xrandr on Debian GNU/Linux?" A: "The same way you would with regular Debian GNU/Linux. Try ''apt-get install xrandr''. Nothing special. Same goes for Tor etc. Whonix doesn't break anything, it doesn't stop you from using obfuscated [[Bridges]] or any other fancy stuff etc. Tip: since Ubuntu is based on Debian, most things working on Ubuntu will also work on Debian. Most online help for Ubuntu also works for Debian. {{note}} 1 Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together. {{note}} 2 Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet, therefore this won't work. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [E-Mail], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ad8gdxahdf7x1ladowbzyhujd78er7u 1237 1236 2013-07-12T17:58:40Z Patrick 2 1237 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and Virtual Box<ref>https://en.wikipedia.org/wiki/VirtualBox</ref>. = Anonymity online through Tor = Whonix relies on the Tor anonymity network to protect your privacy online: all connections are forced through Tor, and direct (non-anonymous) connections are blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian, VirtualBox and Tor = Remember, Whonix is based on Debian, KDE, VirtualBox, Tor and Tor Browser. It is nothing very special. To oversimplify it: Whonix is just a collection of configuration files. <ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> No stripped down versions are used. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet, therefore this won't work.</ref> you can do with Debian GNU/Linux, you can do with Whonix as well. Most Debian GNU/Linux problems and questions with Whonix you may have can probable be solved the same way as for "vanilla" Debian. Q: "How do I install xrandr on Debian GNU/Linux?" A: "The same way you would with regular Debian GNU/Linux. Try ''apt-get install xrandr''. Nothing special. Same goes for Tor etc. Whonix doesn't break anything, it doesn't stop you from using obfuscated [[Bridges]] or any other fancy stuff etc. Tip: since Ubuntu is based on Debian, most things working on Ubuntu will also work on Debian. Most online help for Ubuntu also works for Debian. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [E-Mail], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] dtazsr4fegwwfmb485ovnqgl08zax9l 1238 1237 2013-07-12T17:59:34Z Patrick 2 /* What is Whonix? */ 1238 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and Virtual Box<ref>https://en.wikipedia.org/wiki/VirtualBox</ref>. = Anonymity online through Tor = Whonix relies on the Tor anonymity network to protect your privacy online: all connections are forced through Tor, and direct (non-anonymous) connections are blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian, VirtualBox and Tor = Remember, Whonix is based on Debian, KDE, VirtualBox, Tor and Tor Browser. It is nothing very special. To oversimplify it: Whonix is just a collection of configuration files. <ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> No stripped down versions are used. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet, therefore this won't work.</ref> you can do with Debian GNU/Linux, you can do with Whonix as well. Most Debian GNU/Linux problems and questions with Whonix you may have can probable be solved the same way as for "vanilla" Debian. Q: "How do I install xrandr on Debian GNU/Linux?" A: "The same way you would with regular Debian GNU/Linux. Try ''apt-get install xrandr''. Nothing special. Same goes for Tor etc. Whonix doesn't break anything, it doesn't stop you from using obfuscated [[Bridges]] or any other fancy stuff etc. Tip: since Ubuntu is based on Debian, most things working on Ubuntu will also work on Debian. Most online help for Ubuntu also works for Debian. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [[E-Mail]], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] j1fi5kstrkdp3mpo73k41zouol818vt 1261 1238 2013-07-12T22:02:59Z JasonJAyalaP 9 /* Anonymity online through Tor */ Rephrased for clarity (direct vs routed vs non-anonymous); replaced "privacy" with more technically accurate (in the case of Tor) term "anonymity" 1261 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and Virtual Box<ref>https://en.wikipedia.org/wiki/VirtualBox</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through Tor or blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian, VirtualBox and Tor = Remember, Whonix is based on Debian, KDE, VirtualBox, Tor and Tor Browser. It is nothing very special. To oversimplify it: Whonix is just a collection of configuration files. <ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> No stripped down versions are used. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet, therefore this won't work.</ref> you can do with Debian GNU/Linux, you can do with Whonix as well. Most Debian GNU/Linux problems and questions with Whonix you may have can probable be solved the same way as for "vanilla" Debian. Q: "How do I install xrandr on Debian GNU/Linux?" A: "The same way you would with regular Debian GNU/Linux. Try ''apt-get install xrandr''. Nothing special. Same goes for Tor etc. Whonix doesn't break anything, it doesn't stop you from using obfuscated [[Bridges]] or any other fancy stuff etc. Tip: since Ubuntu is based on Debian, most things working on Ubuntu will also work on Debian. Most online help for Ubuntu also works for Debian. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [[E-Mail]], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] f7p0wicy06626jtwxzt3w88wtrukknu 1275 1261 2013-07-13T23:34:23Z 127.0.0.1 /* Whonix is based on Debian... ; Continuing the theme of "tor + debian + virtual box", i'm making this section about debian. 1275 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and Virtual Box<ref>https://en.wikipedia.org/wiki/VirtualBox</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through Tor or blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is Debian = To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [[E-Mail]], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 93foexhjtgcumts1mo3elxkyb6g3x3s 1276 1275 2013-07-14T03:48:42Z Patrick 2 added anchor so old links don't break 1276 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and Virtual Box<ref>https://en.wikipedia.org/wiki/VirtualBox</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through Tor or blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is Debian = <span id="anchor_name">Whonix is based on Debian, VirtualBox and Tor</span> To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [[E-Mail]], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 6apdur911loxb3smzz0i2yg2d161uho 1277 1276 2013-07-14T03:56:11Z Patrick 2 try #3 1277 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and Virtual Box<ref>https://en.wikipedia.org/wiki/VirtualBox</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through Tor or blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is Debian = <span id="anchor_name">Whonix is based on Debian, VirtualBox and Tor</span> <span id="About#Whonix_is_based_on_Debian.2C_VirtualBox_and_Tor"></span> To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [[E-Mail]], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] qrajts1faozsfc0o6hcwaxl6e0yai03 1278 1277 2013-07-14T03:58:38Z Patrick 2 We're not legally allowed to say "Whonix is Debian", phrases such as "based on Debian", "Debian Derivative", "Debian based" or "a derivative of Debian" however are ok. We may not claim to be Debian. 1278 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and Virtual Box<ref>https://en.wikipedia.org/wiki/VirtualBox</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through Tor or blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian = <span id="anchor_name">Whonix is based on Debian, VirtualBox and Tor</span> <span id="About#Whonix_is_based_on_Debian.2C_VirtualBox_and_Tor"></span> To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [[E-Mail]], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] rkbty8tivpzveiwl7qdacmo9r5opvz7 1284 1278 2013-07-14T12:37:48Z Patrick 2 try #4 1284 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and Virtual Box<ref>https://en.wikipedia.org/wiki/VirtualBox</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through Tor or blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian = {{anchor|Whonix_is_based_on_Debian.2C_VirtualBox_and_Tor}} To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [[E-Mail]], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] hs46a9lmvbnno4xrj00ixirlx08i9hh 1285 1284 2013-07-14T12:38:58Z Patrick 2 anchor worked, just moved it above the title 1285 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and Virtual Box<ref>https://en.wikipedia.org/wiki/VirtualBox</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through Tor or blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] {{anchor|Whonix_is_based_on_Debian.2C_VirtualBox_and_Tor}} = Whonix is based on Debian = To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. = Cryptography = Whonix contains some State-of-the-art cryptographic tools, a selection of tools to protect your data using strong encryption: * Automatically encrypt with HTTPS all your communications to a number of major websites using [https://www.eff.org/https-everywhere HTTPS Everywhere], a Firefox extension developed by the [https://www.eff.org Electronic Frontier Foundation]. * [https://en.wikipedia.org/wiki/GNU_Privacy_Guard GNU Privacy Guard] = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [[E-Mail]], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 4hbwenpbxm37dclpi747jqadil5guw2 1309 1285 2013-07-14T22:56:22Z JasonJAyalaP 9 Deleted "cryptography" section. This suggested that Whonix provides special cryptography tools. Https everywhere shouldn't be presented on the same level as Debian/Tor/Virtual box. 1309 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and Virtual Box<ref>https://en.wikipedia.org/wiki/VirtualBox</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through Tor or blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] {{anchor|Whonix_is_based_on_Debian.2C_VirtualBox_and_Tor}} = Whonix is based on Debian = To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [[E-Mail]], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Dev/Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] h8oxrku1dj6yiwx3kdp6rimxuz9znrc 1324 1309 2013-07-15T16:10:21Z Patrick 2 Text replace - "Dev/Authorship" to "Authorship" 1324 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and Virtual Box<ref>https://en.wikipedia.org/wiki/VirtualBox</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through Tor or blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] {{anchor|Whonix_is_based_on_Debian.2C_VirtualBox_and_Tor}} = Whonix is based on Debian = To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [[E-Mail]], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] fo21y9b2rnggoy3dla8mavxoiguvyf9 1419 1324 2013-07-16T01:02:10Z JasonJAyalaP 9 /* Introduction */ Got rid of virtual box reference. Not very important here, and we don't want to put it on the same level as tor and Debian. 1419 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref> and Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through Tor or blocked. Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] {{anchor|Whonix_is_based_on_Debian.2C_VirtualBox_and_Tor}} = Whonix is based on Debian = To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [[E-Mail]], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] d2neg4wrdq5ozh6c4ci007umz1xwaaw 1420 1419 2013-07-16T01:17:15Z JasonJAyalaP 9 /* Anonymity online through Tor */ Made tor description more concise and straightforward for the novice. 1420 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref> and Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian = To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. = Summary of what Whonix is = == What is Whonix? == * Whonix is an Anonymous Operating System, that spoofs your own IP/location. * Tor multiply encrypts the data sent over the Tor network. Neither your access provider nor Tor operators (except for the exit node) can see your plaintext data. * Tor does regularly change the outgoing IP address. * Whonix is an Anti-Censorship-Application that allows access to otherwise blocked Internet sites. Advanced users may configure their Whonix as a forwarding server in order to allow others access to the Tor network. * Whonix is open source and free. * Tor Browser in Whonix filters and anonymizes HTTP headers. * For anonymous e-mails please see [[E-Mail]], i.e. use Mozilla Thunderbird with TorBirdy, because it provides special, additional data filtering in the email client itself. * Whonix is available on all major systems (Windows, Mac OS X, Linux). == What is Whonix not? == * Whonix does NOT make your PC's or router's IP address invisible. Your IP address is assigned to you by your ISP, and it is inalterable by third parties. You need the IP so that the Tor client may successfully connect to the Tor network on the Internet. When using Whonix, you are surfing through Tor servers on the Internet that all have their own separate IP address. The websites accessed by you will only see this respective outgoing address and not yours. * Whonix does NOT accelerate Internet access. In fact by routing everything through the Tor network it becomes slower. * Whonix is NOT The Tor Project. Tor is developed by The Tor Project. * Whonix does not NOT use random "anonymous" proxies (e.g. those on lists of open proxies) to create an anonymous connection. This would be a totally unsafe method that does not lead to anonymization. * Whonix is NO One-Click-Anonymization-Tool - something like that can and will not really ever exist! Prudence and knowledge remain maxim for Internet security. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 1kcrpbvaw1uhdkzuxl49ir9mr9svd30 1421 1420 2013-07-16T01:44:29Z JasonJAyalaP 9 /* Summary of what Whonix is */ The summary should be the shortest and most concise section. I cut a lot, but I think it's better this way. The best way to prevent wild misunderstandings is by simple statements of what whonix is 1421 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref> and Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian = To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in keeping your identity safe online == Whonix Helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is Not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 0apqgvsjc520oj0143yzqvgtm6yc9iq 1422 1421 2013-07-16T01:45:19Z JasonJAyalaP 9 /* Summary */ 1422 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref> and Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian = To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in keeping your identity safe online == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] b6iac5ojsbvin417gtjvzwb24bhh30l 1482 1422 2013-07-17T19:57:53Z Patrick 2 /* Whonix is based on Debian */ 1482 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref> and Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian = To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in keeping your identity safe online == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] hhs70ao30q84w4rej8h1v5dh130d3qy 1500 1482 2013-07-18T02:21:45Z JasonJAyalaP 9 Added section on Security by Isolation 1500 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref> and Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Whonix is based on Debian = To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Security by Isolation = Whonix is divided into two parts: One for your work and one for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in keeping your identity safe online == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] bbg5fkbl9mtp5w0o947cjiv3897cjfe 1501 1500 2013-07-18T02:22:22Z JasonJAyalaP 9 /* Whonix is based on Debian */ Extra "whonix" is extra. 1501 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref> and Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Security by Isolation = Whonix is divided into two parts: One for your work and one for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in keeping your identity safe online == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 0v294zpvp0mwj7vdmjuj5xlyt4jr6h6 1502 1501 2013-07-18T02:23:38Z JasonJAyalaP 9 /* Introduction */ added sec by iso 1502 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and security by isolation. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files.<ref>{{note}} Plus some shell extra shell scripts, a perl script (tails_htp) and a package selection. Whonix just puts everything together.</ref> This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Security by Isolation = Whonix is divided into two parts: One for your work and one for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in keeping your identity safe online == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] cybfj1948ncy0ivckbt8e9ur5d5fhtn 1503 1502 2013-07-18T02:25:42Z JasonJAyalaP 9 /* Based on Debian */ Removed footnote (Footnotes carry a cost. This footnote wasn't worth its weight). 1503 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and security by isolation. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything <ref>{{note}} Actually only "almost" everything. Any limitations (beside bugs) will be Tor's responsibility. For example, UDP is not supported by Tor yet. Therefore, this won't work.</ref> you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Security by Isolation = Whonix is divided into two parts: One for your work and one for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in keeping your identity safe online == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 51zu44w8bkerucwig161k1hcgwvc8rz 1504 1503 2013-07-18T02:27:49Z JasonJAyalaP 9 /* Based on Debian */ Removed footnote. More confusing than helpful (at this point). 1504 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and security by isolation. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Security by Isolation = Whonix is divided into two parts: One for your work and one for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in keeping your identity safe online == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 3qkn46vgsjwuur6629q48i9n4svbt3b 1505 1504 2013-07-18T02:28:47Z JasonJAyalaP 9 /* Based on Debian */ 1505 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processer, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and security by isolation. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Security by Isolation = Whonix is divided into two parts: One for your work and one for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in keeping your identity safe online == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] lc2kdumaqpljjtdeifxmeesmxno8y7j 1659 1505 2013-07-25T00:11:13Z 127.0.0.1 1659 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processor, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and security by isolation. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using any you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Security by Isolation = Whonix is divided into two parts: One for your work and one for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in keeping your identity safe online == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 92y3e4ajffeko4iwzmmir2pdroz9j9x 1794 1659 2013-07-25T23:47:55Z 127.0.0.1 This page needs better explanation, graphics and a focus on Whonix's key features like Isolation. 1794 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processor, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and security by isolation. = Security by Isolation = Whonix is divided into two parts: One for your work and one for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using anything you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in keeping your identity safe online == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] to26sowqhwfqg44gk56ocq5g3yqn9io 1867 1794 2013-07-28T02:04:02Z JasonJAyalaP 9 /* Whonix is */ 1867 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processor, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and security by isolation. = Security by Isolation = Whonix is divided into two parts: One for your work and one for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using anything you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] or not Trust Whonix, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] fiuizjkxkbebr9xw6q5bc12yn1wz1sq 2133 1867 2013-08-09T07:00:24Z Anon 10 /* What's next? */ 2133 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A web browser, IRC client, word processor, and more come pre-configured with security in mind. It is a complete operating system designed to be used inside a host operating system, such as your computer's currently installed OS or an OS installed independently on an external drive. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and security by isolation. = Security by Isolation = Whonix is divided into two parts: One for your work and one for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using anything you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] rfgcvt90ryn3o1gvce6rhqcx3564ggw 2253 2133 2013-08-10T13:04:40Z Anon 10 /* Introduction */ 2253 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and more come pre-configured with security in mind. It is a complete operating system <ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system <ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref> It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref>, and security by isolation. = Security by Isolation = Whonix is divided into two parts: One for your work and one for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using anything you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ialr33x1vdmq86o70kpw26z7b2be22w 2254 2253 2013-08-10T13:09:02Z Anon 10 2254 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and more come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian ''apt-get install xrandr''". Whonix doesn't break anything and doesn't stop you from using anything you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] hjj6j3o5x8jb22nph0ekfhdd2eswvlv 2459 2254 2013-08-27T16:43:46Z 127.0.0.1 /* Based on Debian */ 2459 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and more come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian {{Code|apt-get install xrandr}}". Whonix doesn't break anything and doesn't stop you from using anything you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia &lt;amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos &lt;adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 21lixioey7votoquhbpze74irtqgkuh 2593 2459 2013-09-04T03:40:24Z Anon 10 Text replace - "&lt;" to "<" 2593 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and more come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian {{Code|apt-get install xrandr}}". Whonix doesn't break anything and doesn't stop you from using anything you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org&gt; Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net&gt; This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] je6mmk8v3v0ypwrw9bmntbtg88vtjqr 2616 2593 2013-09-04T03:43:50Z Anon 10 Text replace - "&gt;" to ">" 2616 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and more come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian {{Code|apt-get install xrandr}}". Whonix doesn't break anything and doesn't stop you from using anything you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220&sid=ac8a6ca16eb768b3322be30b20375c97#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 9nprizmotdvwaep8gqza9i58gc6wbur 2655 2616 2013-09-04T04:09:23Z Anon 10 Text replace - "&sid=ac8a6ca16eb768b3322be30b20375c97" to "" 2655 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and more come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian {{Code|apt-get install xrandr}}". Whonix doesn't break anything and doesn't stop you from using anything you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] qxqsfgnq2e1qbhcvyh0fbz601hf1c9m 2682 2655 2013-09-05T04:56:43Z Anon 10 Text replace - "in Whonix wiki on <https://sourceforge.net/p/whonix/wiki/GPLv3/>" to "on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>" 2682 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and more come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian {{Code|apt-get install xrandr}}". Whonix doesn't break anything and doesn't stop you from using anything you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 2n24ebkwag0bq1yl421svihdt3rabnf 4740 2682 2014-01-14T17:38:39Z Patrick 2 Text replace - "Portions Copyright (C) 2012 adrelanos <adrelanos at riseup dot net>" to "Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net>" 4740 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and more come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian {{Code|apt-get install xrandr}}". Whonix doesn't break anything and doesn't stop you from using anything you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] cm3wavorr6j51wg77knmokghh3u27x7 5551 4740 2014-02-22T02:13:34Z Patrick 2 5551 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and more come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian {{Code|apt-get install xrandr}}". Whonix doesn't break anything and doesn't stop you from using anything you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 98r12gem75wdsrrjlnn3io93bbf08dt 7892 5551 2014-05-18T06:58:37Z 127.0.0.1 7892 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian {{Code|apt-get install xrandr}}". Whonix doesn't break anything and doesn't stop you from using anything you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] b8jjx3adiw7mtcdj7cn709t4sl7d6o6 16702 7892 2015-08-08T06:49:18Z 127.0.0.1 add table of debian versions that whonix versions are based on 16702 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian {{Code|apt-get install xrandr}}". Whonix doesn't break anything and doesn't stop you from using anything you want. Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! Whonix version !! Debian version |- | Whonix 10 || [https://www.debian.org/releases/wheezy/ Wheezy] |- | Whonix 11 (not released yet) || [https://www.debian.org/releases/jessie/ Jessie] |} {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 300cpj3rlimmlspxg3zebrgkp3hm0r5 16931 16702 2015-08-22T19:28:21Z Patrick 2 /* Based on Debian */ 16931 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian {{Code|apt-get install xrandr}}". Whonix doesn't break anything and doesn't stop you from using anything you want. Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! Whonix version !! Debian version |- | <s>Whonix 10 (deprecated)</s> || <s>[https://www.debian.org/releases/wheezy/ wheezy]</s> |- | Whonix 11 || [https://www.debian.org/releases/jessie/ jessie] |} {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 1lfmnjld17j44wzkh6iojt886bu32pk 16932 16931 2015-08-22T19:30:38Z Patrick 2 /* Based on Debian */ 16932 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian {{Code|apt-get install xrandr}}". Whonix doesn't break anything and doesn't stop you from using anything you want. Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | <s>Whonix <u>10</u> (deprecated)</s> || ''<s>7</s>'' || <s>[https://www.debian.org/releases/wheezy/ wheezy]</s> |- | Whonix <u>11</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> Thanks to [https://anonymous-proxy-servers.net/ JonDos] ([https://anonymous-proxy-servers.net/forum/viewtopic.php?p=31220#p31220 Permission]). The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 41jfz0zc29wbunr9myi3da2bbqyo7k8 17878 16932 2015-09-26T00:04:32Z Patrick 2 /* License */ 17878 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian {{Code|apt-get install xrandr}}". Whonix doesn't break anything and doesn't stop you from using anything you want. Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | <s>Whonix <u>10</u> (deprecated)</s> || ''<s>7</s>'' || <s>[https://www.debian.org/releases/wheezy/ wheezy]</s> |- | Whonix <u>11</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 1blgxhu8t8quktdvhyf148dzbky7wzw 18180 17878 2015-10-05T07:44:21Z Patrick 2 /* Based on Debian */ 18180 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian {{Code|apt-get install xrandr}}". Whonix doesn't break anything and doesn't stop you from using anything you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | <s>Whonix <u>10</u> (deprecated)</s> || ''<s>7</s>'' || <s>[https://www.debian.org/releases/wheezy/ wheezy]</s> |- | Whonix <u>11</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Acknowledgements, Credits, Related projects, Authorship = See [[Authorship]]. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] on5k522mm7xn78ji9wlf3u7xrsus5nh 18794 18180 2015-10-19T12:55:52Z Patrick 2 /* Acknowledgements, Credits, Related projects, Authorship */ 18794 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = To oversimplify it: Whonix is just a collection of configuration files and scripts. This isn't a stripped down version of Debian. For example, anything you can do with "vanilla" Debian GNU/Linux, you can do with Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install xrandr on Whonix?" -- "The same way you would with Debian {{Code|apt-get install xrandr}}". Whonix doesn't break anything and doesn't stop you from using anything you want. {{mbox | type = notice | image = [[File:Ambox_notice.png|40px|alt=Info]] | text = Tip: Since Ubuntu is also based on Debian, most online help for Ubuntu also works for Whonix. }} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | <s>Whonix <u>10</u> (deprecated)</s> || ''<s>7</s>'' || <s>[https://www.debian.org/releases/wheezy/ wheezy]</s> |- | Whonix <u>11</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] fekxjjjxzi8glwfeztlopziklxfg516 19127 18794 2015-11-14T21:59:02Z Patrick 2 /* Based on Debian */ 19127 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | <s>Whonix <u>10</u> (deprecated)</s> || ''<s>7</s>'' || <s>[https://www.debian.org/releases/wheezy/ wheezy]</s> |- | Whonix <u>11</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] mcdgzmrfv7660aej2arn3vmedli750x 21447 19127 2016-01-11T01:20:13Z Nurmagoz 4391 21447 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |og:image=https://www.whonix.org/w/images/c/c5/Information-275708_640.png }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | <s>Whonix <u>10</u> (deprecated)</s> || ''<s>7</s>'' || <s>[https://www.debian.org/releases/wheezy/ wheezy]</s> |- | Whonix <u>11</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] h7lf8xqpriuhuo1mbt27ismt87lc467 21683 21447 2016-01-14T01:18:18Z Nurmagoz 4391 21683 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |og:image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | <s>Whonix <u>10</u> (deprecated)</s> || ''<s>7</s>'' || <s>[https://www.debian.org/releases/wheezy/ wheezy]</s> |- | Whonix <u>11,12</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 8cdyuf3vgiaf2vjz43q0dzioga5idfc 23229 21683 2016-04-21T00:49:56Z Patrick 2 /* Security by Isolation */ 23229 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |og:image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | <s>Whonix <u>10</u> (deprecated)</s> || ''<s>7</s>'' || <s>[https://www.debian.org/releases/wheezy/ wheezy]</s> |- | Whonix <u>11,12</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 59qdgwpz4ilbonl9o9ivk0b7gb26dz6 23231 23229 2016-04-21T00:54:44Z Patrick 2 /* Based on Debian */ 23231 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |og:image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | Whonix <u>12</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 1rk6cf1zk5fewy0h6rd581ezw8oizwg 23686 23231 2016-05-18T11:56:04Z Arousal 4444 23686 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> 这是个自由软件; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |og:image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | Whonix <u>12</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] h1s99es2gf5qf4kuk2yl7h3s7ofjyfp 23687 23686 2016-05-18T11:57:48Z Arousal 4444 23687 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This is free software, you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |og:image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | Whonix <u>12</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] icwd1wnk89x0y81d15kx8sgd7u7s9hr 23688 23687 2016-05-18T12:50:24Z Patrick 2 23688 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |og:image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[XChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | Whonix <u>12</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 1rk6cf1zk5fewy0h6rd581ezw8oizwg 23838 23688 2016-06-01T14:57:04Z Patrick 2 Text replacement - "XChat" to "HexChat" 23838 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |og:image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | Whonix <u>12</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 5wl7wquizjhh7ov09i7z9rl3t0zovxh 25498 23838 2016-08-21T19:49:27Z Patrick 2 /* Based on Debian */ 25498 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |og:image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | Whonix <u>13</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] kpgm4bejkqb3hm3s47t6z81mxp1bdh7 25499 25498 2016-08-21T19:50:08Z Patrick 2 /* Based on Debian */ 25499 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |og:image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] mydqyhjkkk72f2qjbmrynnnd3wnt8qy 27178 25499 2017-01-03T22:16:30Z Patrick 2 Text replacement - "|og:image=" to "|image=" 27178 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = <pre>Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code. This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.</pre> {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] sp3hlvxlcmnbpex12xujrh2na5hq531 28985 27178 2017-04-16T13:52:53Z Patrick 2 /* License */ 28985 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 8x558b4i8um2yxdlwmaderrqntdbfm7 29010 28985 2017-04-16T13:57:19Z Patrick 2 Text replacement - "Copyright (C) 2012 -2014 Patrick Schleizer <adrelanos@riseup.net>" to "Copyright (C) 2012 - 2017 Patrick Schleizer <adrelanos@riseup.net>" 29010 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2017 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] msi88dxy4vckwl9csyzpovmjxm7z8a3 29822 29010 2017-05-02T16:52:08Z Ego 4405 29822 wikitext text/x-wiki <translate> <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2017 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims at preserving your privacy and anonymity by helping you use your applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], word processor, and [[Software|more]] come pre-configured with security in mind. It is a complete operating system<ref>Which consists of two virtual machines: Whonix-Gateway and Whonix-Workstation</ref> designed to be used inside a host operating system<ref>Such as your currently installed OS on your computer or an OS installed on an external drive.</ref>. It is Free Software and based on Tor<ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux<ref>https://en.wikipedia.org/wiki/Debian</ref> and security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] </translate> 77hd3y1r291q3fcot8ax10z6neogkx9 30092 29822 2017-05-17T07:17:16Z 127.0.0.1 /* Introduction */ 30092 wikitext text/x-wiki <translate> <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2017 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is Free Software and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <u>Whonix-Workstation</u> for your work and <u>Whonix-Gateway</u> for automatically routing all internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] </translate> 9387glrb2lg34t9lyram6y1o8alfxva 30093 30092 2017-05-17T07:20:26Z 127.0.0.1 /* Security by Isolation */ 30093 wikitext text/x-wiki <translate> <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2017 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is Free Software and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] </translate> 2e74y1odtiildag7dmun1ql556mgjrm 30094 30093 2017-05-17T07:22:05Z 127.0.0.1 /* Introduction */ 30094 wikitext text/x-wiki <translate> <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2017 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Anonymity online through Tor = Whonix relies on the Tor network to protect your anonymity online: all connections are either forced through it or blocked. Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world. Anybody watching your Internet connection can't see what sites you visit, and the sites you visit can't learn your physical location. To learn more about Tor, see the official [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How does Tor work] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] </translate> 9l2hehko02xoah9zy26y8vfy70l77oo 30095 30094 2017-05-17T07:32:46Z 127.0.0.1 /* Anonymity online through Tor */ 30095 wikitext text/x-wiki <translate> <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2017 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protects users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian version'' !! Debian codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] </translate> 4gdhfelssp4tv25itrpmg54h0zyynyx 30097 30095 2017-05-17T07:38:37Z 127.0.0.1 /* Based on Debian */ 30097 wikitext text/x-wiki <translate> <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2017 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protects users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} <br /> Each version of Whonix is based on a particular version of Debian: <br /> {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system * An anti-censorship tool * The first step among many in hiding your identity == Whonix helps to == * Hide your IP address * Prevent your ISP from spying on you * Prevent websites from identifying you * Prevent malware from identifying you * Circumvent censorship == Whonix is not == * A One-Click-Anonymization-Solution = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] </translate> 10en7iidz2muhsciatvlo9rpsse9j90 30098 30097 2017-05-17T07:42:20Z 127.0.0.1 /* Summary */ 30098 wikitext text/x-wiki <translate> <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2017 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protects users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} <br /> Each version of Whonix is based on a particular version of Debian: <br /> {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = What's next? = To continue discovering Whonix, you can now read: * the [[Warning]] page to understand better the security limitations of Whonix and Tor, * more details about the [[Features]] of Whonix, * our [[Documentation]] explaining in details how to use Whonix, * some hints on why should you [[Trust]] Whonix or not, * our [[Security Guide]] and [[Design]] document about Whonix specification, threat model and implementation. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] </translate> qusnykozij7wyfraq1jfojawbbhdibf 30099 30098 2017-05-17T07:56:11Z 127.0.0.1 /* What's next? */ 30099 wikitext text/x-wiki <translate> <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2017 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protects users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} <br /> Each version of Whonix is based on a particular version of Debian: <br /> {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = To learn more about Whonix and to determine whether it is a suitable solution in your circumstances, the user is recommended to read: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation]] entries explaining in detail how to use Whonix safely. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] </translate> ckaufrl0bz3kty8nl33h3wa51vejj3q 30100 30099 2017-05-17T07:56:50Z 127.0.0.1 /* Whonix helps to */ 30100 wikitext text/x-wiki <translate> <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2017 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protects users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} <br /> Each version of Whonix is based on a particular version of Debian: <br /> {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = To learn more about Whonix and to determine whether it is a suitable solution in your circumstances, the user is recommended to read: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation]] entries explaining in detail how to use Whonix safely. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] </translate> 192i4p6rl8cmbef9tbw6uhuc0pwj0pt 30449 30100 2017-05-28T21:38:39Z Patrick 2 /* Based on Debian */ 30449 wikitext text/x-wiki <translate> <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2017 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protects users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix version = <br /> Each version of Whonix is based on a particular version of Debian: <br /> {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = To learn more about Whonix and to determine whether it is a suitable solution in your circumstances, the user is recommended to read: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation]] entries explaining in detail how to use Whonix safely. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] </translate> by75wzdz942h4mnqymr0449wcogzge5 30450 30449 2017-05-28T21:39:07Z Patrick 2 /* Whonix version */ 30450 wikitext text/x-wiki <translate> <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2017 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protects users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix version = Each version of Whonix is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = To learn more about Whonix and to determine whether it is a suitable solution in your circumstances, the user is recommended to read: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation]] entries explaining in detail how to use Whonix safely. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] </translate> gqrzr9c7rwficw6ee7jjzcvnlokf0ff 30451 30450 2017-05-29T04:11:45Z 127.0.0.1 /* Whonix version */ 30451 wikitext text/x-wiki <translate> <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2017 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protects users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = To learn more about Whonix and to determine whether it is a suitable solution in your circumstances, the user is recommended to read: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation]] entries explaining in detail how to use Whonix safely. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] </translate> 10sqfk90dtc8chl7uag4exnkxwooa3u 30512 30451 2017-06-01T08:05:26Z 127.0.0.1 /* Whonix Version */ 30512 wikitext text/x-wiki <translate> <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2017 Patrick Schleizer <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protects users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} Note that there is not a specific, fixed Whonix release schedule. A new stable release only become available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = To learn more about Whonix and to determine whether it is a suitable solution in your circumstances, the user is recommended to read: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation]] entries explaining in detail how to use Whonix safely. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] </translate> 80ye57d35xqi039yprrn7asyhhkc4to 32199 30512 2018-01-29T15:47:58Z Patrick 2 Text replacement - "2017 Patrick Schleizer <adrelanos@riseup.net>" to "2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>" 32199 wikitext text/x-wiki <translate> <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protects users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} Note that there is not a specific, fixed Whonix release schedule. A new stable release only become available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = To learn more about Whonix and to determine whether it is a suitable solution in your circumstances, the user is recommended to read: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation]] entries explaining in detail how to use Whonix safely. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] </translate> gf7ih6svld4w63z8nx89yrfxv47flfe 32352 32199 2018-02-03T14:01:48Z Patrick 2 Text replacement - "<translate>" to "" 32352 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protects users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} Note that there is not a specific, fixed Whonix release schedule. A new stable release only become available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = To learn more about Whonix and to determine whether it is a suitable solution in your circumstances, the user is recommended to read: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation]] entries explaining in detail how to use Whonix safely. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] </translate> izduj1202x86e9qlzi31pv1qhym5u4k 32419 32352 2018-02-03T14:02:59Z Patrick 2 Text replacement - "</translate>" to "" 32419 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protects users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} Note that there is not a specific, fixed Whonix release schedule. A new stable release only become available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = To learn more about Whonix and to determine whether it is a suitable solution in your circumstances, the user is recommended to read: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation]] entries explaining in detail how to use Whonix safely. = Footnotes / References = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ctq3ow548hmjogay0dxbvxgz9u79eyn 33174 32419 2018-02-22T10:03:36Z 127.0.0.1 Standardize to "Footnotes" everywhere in wiki 33174 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protects users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} Note that there is not a specific, fixed Whonix release schedule. A new stable release only become available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = To learn more about Whonix and to determine whether it is a suitable solution in your circumstances, the user is recommended to read: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation]] entries explaining in detail how to use Whonix safely. = Footnotes = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 37rdek2w3yzc5cr2wst797ql5fcadt1 33767 33174 2018-05-06T14:41:06Z 127.0.0.1 /* Online Anonymity via Tor */ 33767 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OS's installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} Note that there is not a specific, fixed Whonix release schedule. A new stable release only become available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = To learn more about Whonix and to determine whether it is a suitable solution in your circumstances, the user is recommended to read: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation]] entries explaining in detail how to use Whonix safely. = Footnotes = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 8ek79rnigvjv12dpmudeyiqgmhz0kpr 33868 33767 2018-05-23T11:14:19Z 127.0.0.1 /* Introduction */ 33868 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} Note that there is not a specific, fixed Whonix release schedule. A new stable release only become available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = To learn more about Whonix and to determine whether it is a suitable solution in your circumstances, the user is recommended to read: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation]] entries explaining in detail how to use Whonix safely. = Footnotes = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 36cdl63en13fd9jngdx77lg3x558pnc 33869 33868 2018-05-23T11:16:07Z 127.0.0.1 /* Whonix Version */ 33869 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} Note that there is not a specific, fixed Whonix release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = To learn more about Whonix and to determine whether it is a suitable solution in your circumstances, the user is recommended to read: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation]] entries explaining in detail how to use Whonix safely. = Footnotes = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] fm8aq55nldp5hh3p9jq4uba1h9g7k35 33870 33869 2018-05-23T11:20:14Z 127.0.0.1 /* Next Steps */ 33870 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} Note that there is not a specific, fixed Whonix release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|entries]] explaining how to use Whonix safely. = Footnotes = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 65iqo86qtsz9pfxlfqcuxxrh8myqcto 33871 33870 2018-05-23T11:22:16Z 127.0.0.1 /* Whonix Version */ 33871 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two parts: <i>Whonix-Workstation</i> for work activities and <i>Whonix-Gateway</i> to enforce all Internet traffic routing via the Tor network. This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|entries]] explaining how to use Whonix safely. = Footnotes = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 4f1kb8eq8i9icngkgysc089qg280x7w 34156 33871 2018-06-23T01:38:54Z 127.0.0.1 /* Security by Isolation */ 34156 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|entries]] explaining how to use Whonix safely. = Footnotes = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ki86baoffq3cos79bebowy8e010a0x2 34157 34156 2018-06-23T01:40:30Z 127.0.0.1 Figure title 34157 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] documents detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|entries]] explaining how to use Whonix safely. = Footnotes = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ldln66gp0oxfr2m0cf6jhz0zfftx91r 34158 34157 2018-06-23T01:43:02Z 127.0.0.1 /* Next Steps */ 34158 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines - Whonix-Gateway and Whonix-Workstation - which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|entries]] explaining how to use Whonix safely. = Footnotes = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 9trzi9zwpl2xyibyoyu2cqk94r3794k 34159 34158 2018-06-23T01:43:34Z 127.0.0.1 /* Introduction */ 34159 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |} Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|entries]] explaining how to use Whonix safely. = Footnotes = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] kc72s9de5c2lw4sa6sxop5jgt4ekd7y 34638 34159 2018-07-15T07:01:31Z Patrick 2 /* Whonix Version */ 34638 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|word processor]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |- | Whonix <u>14</u> || ''9'' || [https://www.debian.org/releases/jessie/ stretch] |} Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|entries]] explaining how to use Whonix safely. = Footnotes = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 38cdqrz6avaqb083codvvs2d5929lae 34859 34638 2018-07-28T07:42:44Z 127.0.0.1 /* Introduction */ 34859 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |- | Whonix <u>14</u> || ''9'' || [https://www.debian.org/releases/jessie/ stretch] |} Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] to track developer progress. <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|entries]] explaining how to use Whonix safely. = Footnotes = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 1h8k667qta4gqldejee7eyf0eixva8x 34864 34859 2018-07-28T08:10:26Z 127.0.0.1 /* Whonix Version */ 34864 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |- | Whonix <u>14</u> || ''9'' || [https://www.debian.org/releases/jessie/ stretch] |} Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The [[Security_Guide|Security Guide]], [[Advanced_Security_Guide|Advanced Security Guide]] and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|entries]] explaining how to use Whonix safely. = Footnotes = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ie6c9yztvts11sn4nksjo5e23cl52a4 34868 34864 2018-07-28T08:31:16Z 127.0.0.1 Fix links 34868 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |- | Whonix <u>14</u> || ''9'' || [https://www.debian.org/releases/jessie/ stretch] |} Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = <references /> = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] gobdv45x83rtymk5ghoyjv7xdsm5tkf 35122 34868 2018-08-01T05:08:04Z Patrick 2 Text replacement - "<references />" to "{{reflist|close=1}}" 35122 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''8'' || [https://www.debian.org/releases/jessie/ jessie] |- | Whonix <u>14</u> || ''9'' || [https://www.debian.org/releases/jessie/ stretch] |} Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 14" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 5dmdlbgnembqb5nb6z2u5o5gzfvmhou 35591 35122 2018-08-09T21:34:45Z 127.0.0.1 Fix 35591 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] mui27ca2q7kumcqkseirm3tyi99hmab 36420 35591 2018-09-01T10:31:36Z 127.0.0.1 Add Support and notification timeline information 36420 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version, Release and Support Schedule= Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/c/news Whonix News forum]. This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] bgyymbcz6r9b9fatxcu8yvcu1ul3pp3 36431 36420 2018-09-01T14:37:47Z 127.0.0.1 /* Whonix Version, Release and Support Schedule */ 36431 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} == Release and Support Schedule == Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/c/news Whonix News forum]. This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] mbytpr4nxrycfn3hzah5qh2zbz1gu8z 36809 36431 2018-09-14T11:54:31Z Patrick 2 /* Release and Support Schedule */ 36809 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} == Release and Support Schedule == Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/c/news Whonix News forum]. This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] aaqwvaqvr7yzqnc58e429vyliga3ab6 36810 36809 2018-09-14T11:56:01Z Patrick 2 /* Release and Support Schedule */ 36810 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} == Release and Support Schedule == === Introduction === Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/c/news Whonix News forum]. This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] l23i3tiit1t3yc2b2e0p2g71itrnp1w 36811 36810 2018-09-14T11:58:47Z Patrick 2 /* Release and Support Schedule */ 36811 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} == Release and Support Schedule == === Introduction === Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/c/news Whonix News forum]. This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. === Debian Hosts === * One month after a new stable version of Debian is released, Whonix VMs will no longer be supported on any older version of Debian. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Debian version within one month of its release. * One month after new stable versions of Whonix has been released, older versions of Whonix will no longer be supported. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Whonix version within one month of their release. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] f7vgv7g8mdovt2ptggbb5o22172ndne 36812 36811 2018-09-14T12:02:42Z Patrick 2 /* Release and Support Schedule */ 36812 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} {{Anchor|Release and Support Schedule}} == Release Schedule == Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. == Support Schedule == === Debian Hosts === * After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. * One month after a new stable version of Debian is released, Whonix VMs will no longer be supported on any older version of Debian. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Debian version within one month of its release. * One month after new stable versions of Whonix has been released, older versions of Whonix will no longer be supported. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Whonix version within one month of their release. === Debian based and other Hosts === Similar to [[#Debian Hosts]]. === Windows Hosts === Mostly undefined. Similar to [[#Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] bgf0lvglx2542ygmcu2smbcv93sug4r 36813 36812 2018-09-14T12:03:14Z Patrick 2 /* Release Schedule */ 36813 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. == Support Schedule == === Debian Hosts === * After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. * One month after a new stable version of Debian is released, Whonix VMs will no longer be supported on any older version of Debian. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Debian version within one month of its release. * One month after new stable versions of Whonix has been released, older versions of Whonix will no longer be supported. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Whonix version within one month of their release. === Debian based and other Hosts === Similar to [[#Debian Hosts]]. === Windows Hosts === Mostly undefined. Similar to [[#Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] rh50tvf5c5yc42i7de2i3usfqs6f9cd 36814 36813 2018-09-14T12:03:24Z Patrick 2 /* Support Schedule */ 36814 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. = Support Schedule = === Debian Hosts === * After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. * One month after a new stable version of Debian is released, Whonix VMs will no longer be supported on any older version of Debian. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Debian version within one month of its release. * One month after new stable versions of Whonix has been released, older versions of Whonix will no longer be supported. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Whonix version within one month of their release. === Debian based and other Hosts === Similar to [[#Debian Hosts]]. === Windows Hosts === Mostly undefined. Similar to [[#Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 58l8skju96opdtyb1pmpnva7vfiiote 36815 36814 2018-09-14T12:05:25Z Patrick 2 /* Release Schedule */ 36815 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === * After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. * One month after a new stable version of Debian is released, Whonix VMs will no longer be supported on any older version of Debian. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Debian version within one month of its release. * One month after new stable versions of Whonix has been released, older versions of Whonix will no longer be supported. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Whonix version within one month of their release. === Debian based and other Hosts === Similar to [[#Debian Hosts]]. === Windows Hosts === Mostly undefined. Similar to [[#Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] mymetj338a96vsh9nnpnrbm9k1g6j4u 36816 36815 2018-09-14T12:06:57Z Patrick 2 /* Support Schedule */ 36816 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === * After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. * One month after a new stable version of Debian is released, Whonix VMs will no longer be supported on any older version of Debian. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Debian version within one month of its release. * One month after new stable versions of Whonix has been released, older versions of Whonix will no longer be supported. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Whonix version within one month of their release. === Debian based and other Hosts === Similar to [[#Debian Hosts]]. === Windows Hosts === Mostly undefined. Similar to [[#Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] otyr3v4o6wi941xxyacfhckav95tiz1 37256 36816 2018-09-30T06:24:58Z 127.0.0.1 Add link to manual version check, since this issue has come up recently 37256 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|these steps]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === * After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. * One month after a new stable version of Debian is released, Whonix VMs will no longer be supported on any older version of Debian. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Debian version within one month of its release. * One month after new stable versions of Whonix has been released, older versions of Whonix will no longer be supported. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Whonix version within one month of their release. === Debian based and other Hosts === Similar to [[#Debian Hosts]]. === Windows Hosts === Mostly undefined. Similar to [[#Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ciud456k1v997auci2lzwl0owjxhqs8 37257 37256 2018-09-30T06:26:31Z 127.0.0.1 /* Whonix Version */ 37257 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === * After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. * One month after a new stable version of Debian is released, Whonix VMs will no longer be supported on any older version of Debian. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Debian version within one month of its release. * One month after new stable versions of Whonix has been released, older versions of Whonix will no longer be supported. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Whonix version within one month of their release. === Debian based and other Hosts === Similar to [[#Debian Hosts]]. === Windows Hosts === Mostly undefined. Similar to [[#Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] pt7lq366ial08lzvsgip90kdv7qmnez 37258 37257 2018-09-30T06:29:07Z 127.0.0.1 Nits 37258 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === * After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. * One month after a new stable version of Debian is released, Whonix VMs will no longer be supported on any older version of Debian. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Debian version within one month of its release. * One month after new stable versions of Whonix are released, older versions will no longer be supported. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Whonix version within one month of its release. === Debian based and other Hosts === Similar to [[#Debian Hosts]]. === Windows Hosts === Mostly undefined. Similar to [[#Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 2pawppr9o6llfgxto9bdwpu8ycug26q 37259 37258 2018-09-30T06:30:04Z 127.0.0.1 Nit 37259 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === * After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. * One month after a new stable version of Debian is released, Whonix VMs will no longer be supported on any older version of Debian. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Debian version within one month of its release. * One month after new stable versions of Whonix are released, older versions will no longer be supported. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Whonix version within one month of its release. === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === Mostly undefined. Similar to [[#Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] nw6fcol2ofgdv3ksi4c6w85epalykar 37260 37259 2018-09-30T06:32:22Z 127.0.0.1 Nit 37260 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === * After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. * One month after a new stable version of Debian is released, Whonix VMs will no longer be supported on any older version of Debian. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Debian version within one month of its release. * One month after new stable versions of Whonix are released, older versions will no longer be supported. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Whonix version within one month of its release. === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ix88kvu4k56mja5rw5h2vkinjdn2dtf 37261 37260 2018-09-30T06:32:41Z 127.0.0.1 /* Windows Hosts */ 37261 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === * After a new stable release of Whonix, Debian, Qubes or Qubes-Whonix is officially released and announced, the older release is only supported for one month due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! This means users will need to upgrade the respective platform promptly if they wish to continue using it safely. * One month after a new stable version of Debian is released, Whonix VMs will no longer be supported on any older version of Debian. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Debian version within one month of its release. * One month after new stable versions of Whonix are released, older versions will no longer be supported. This means that users who wish to continue using Whonix on Debian must always upgrade to the latest stable Whonix version within one month of its release. === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 2bc7aosshwlsr5yzz4levu1as7ltpkh 37754 37261 2018-10-03T09:29:15Z 127.0.0.1 Nits. Re-organize instead of bullet points. Rephrase/simplify. Why do we repeat Debian and Whonix info twice? You can delete bottom 2 sections? 37754 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Whonix, Debian, Qubes or Qubes-Whonix Release''' After a new stable release is officially released and announced, the older release is only supported for <u>one month</u> due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. '''New Debian Release''' <u>One month</u> after a new stable version of Debian is released, Whonix VMs will no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly in order to use Whonix safely. '''New Whonix Release''' <u>One month</u> after a new stable version of Whonix is released, older versions will no longer be supported. All users need to upgrade the Whonix platform promptly in order to remain safe. === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] d6z44n2ntchn3raqcspwtpljmqjnu3p 37981 37754 2018-10-06T10:05:37Z Patrick 2 /* Debian Hosts */ 37981 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Whonix, Debian, Qubes or Qubes-Whonix Release''' After a new stable release is officially released and announced, the older release is only supported for <u>one month</u> due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, Whonix VMs will no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly in order to use Whonix safely. '''New Whonix Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the Whonix platform promptly in order to remain safe. === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] nt6en0x6ubp67etumg49ahsjg4liksd 37982 37981 2018-10-06T10:06:26Z Patrick 2 /* Debian Hosts */ 37982 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Whonix, Debian, Qubes or Qubes-Whonix Release''' After a new stable release is officially released and announced, the older release is only supported for <u>one month</u> due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, Whonix VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after deprecation notice order to use Whonix safely. '''New Whonix Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the Whonix platform promptly in order to remain safe. === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] k11rytbxokjwxuqrg8ih0rjj7mq3oj8 37983 37982 2018-10-06T10:10:15Z 127.0.0.1 Nit 37983 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Whonix, Debian, Qubes or Qubes-Whonix Release''' After a new stable release is officially released and announced, the older release is only supported for <u>one month</u> due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, Whonix VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use Whonix safely. '''New Whonix Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the Whonix platform promptly in order to remain safe. === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] fklhk8mxapir12olj7zc5h547rdrh2c 37984 37983 2018-10-06T10:11:22Z 127.0.0.1 /* Next Steps */ 37984 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Whonix, Debian, Qubes or Qubes-Whonix Release''' After a new stable release is officially released and announced, the older release is only supported for <u>one month</u> due to limited human resources. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, Whonix VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use Whonix safely. '''New Whonix Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the Whonix platform promptly in order to remain safe. === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] nq64ydd03yx8p581awkgr95h0ympvbu 37985 37984 2018-10-06T10:11:50Z Patrick 2 /* Debian Hosts */ 37985 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, Whonix VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use Whonix safely. '''New Whonix Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the Whonix platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] g2v6f2y0q9a7wz3az4ii8er87gfj74z 38199 37985 2018-10-13T01:40:54Z 127.0.0.1 Fix title to match ToC 38199 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, Whonix VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use Whonix safely. '''New Whonix Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the Whonix platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] na6sdg40j582vqv0kadd5ykoshxkogn 38784 38199 2018-10-27T09:02:00Z 127.0.0.1 whitespace 38784 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whoniy Summary, what who is, Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic routing via the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, Whonix VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use Whonix safely. '''New Whonix Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the Whonix platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] maf27i6dmrn1x2us2ok4dikfs0o6k5s 39456 38784 2018-11-16T02:22:21Z 127.0.0.1 Fix typos. Simplify phasing. 39456 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whoniy Summary: Whonix is; Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic through the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, Whonix VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use Whonix safely. '''New Whonix Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the Whonix platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 0s7nmzfgqhgkcugcd9jhjo0f9zab7y3 39457 39456 2018-11-16T06:09:39Z Patrick 2 39457 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Summary: Whonix is; Anonymity online through Tor, Security by Isolation, Based on Debian |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic through the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, Whonix VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use Whonix safely. '''New Whonix Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the Whonix platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] l004od5rdw0rtszca20mntcmv29ca5i 39674 39457 2018-11-20T11:48:46Z Patrick 2 39674 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Free_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic through the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, Whonix VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use Whonix safely. '''New Whonix Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the Whonix platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] cqnjxvj6wt7sxkla7hfzw2j9ms3acag 41642 39674 2019-03-16T06:43:04Z Patrick 2 Text replacement - "Why_Whonix_is_Free_Software" to "Why_Whonix_is_Freedom_Software" 41642 wikitext text/x-wiki <!-- Copyright: Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org> Whonix About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in Whonix virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred Whonix configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic through the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each Whonix release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | Whonix <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the Whonix version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ Whonix phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, Whonix VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use Whonix safely. '''New Whonix Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the Whonix platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news Whonix News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves Whonix developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and Whonix TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of Whonix TemplateVMs are released, older versions of Whonix TemplateVMs will no longer be supported. This means that users who wish to continue using Whonix TemplateVMs on Qubes must always upgrade to the latest stable Whonix TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of Whonix and Tor. * Further information about Whonix [[Features]]. * The implied [[Trust]] placed in Whonix when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the Whonix specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use Whonix safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what Whonix is" chapter of the Whonix About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 097398e4k2t92s2kb2b92qvbtke6l4j 43035 41642 2019-04-22T11:21:14Z Patrick 2 Text replacement - " Whonix " to "{{project name}}" 43035 wikitext text/x-wiki <!-- Copyright: {{project name}}About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}}About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in{{project name}}virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting{{project name}}is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred{{project name}}configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic through the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} ={{project name}}Version = Each{{project name}}release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- |{{project name}}<u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the{{project name}}version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that{{project name}}does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/{{project name}}phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released,{{project name}}VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use{{project name}}safely. '''New{{project name}}Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the{{project name}}platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news{{project name}}News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves{{project name}}developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and{{project name}}TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released,{{project name}}TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using{{project name}}TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of{{project name}}TemplateVMs are released, older versions of{{project name}}TemplateVMs will no longer be supported. This means that users who wish to continue using{{project name}}TemplateVMs on Qubes must always upgrade to the latest stable{{project name}}TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = =={{project name}}is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. =={{project name}}Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. =={{project name}}is not == * A one-click anonymization solution. = Next Steps = Learning more about{{project name}}is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of{{project name}}and Tor. * Further information about{{project name}}[[Features]]. * The implied [[Trust]] placed in{{project name}}when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the{{project name}}specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use{{project name}}safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what{{project name}}is" chapter of the{{project name}}About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] g0bs8wvvji1x1ryw8sr4s3n1d5qe7n7 43227 43035 2019-04-22T11:23:08Z Patrick 2 Text replacement - "{{project name}}" to " {{project name}} " 43227 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic through the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = {{project name}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[Whonix_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] f9pkoio7f8hqyjs9rigj06cikz50qrg 43465 43227 2019-04-22T11:36:36Z Patrick 2 Text replacement - "[[Whonix" to "[[{{project name short}}" 43465 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[Qubes-Whonix]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic through the Tor network. <ref>In [[Qubes-Whonix]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = {{project name}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 1em7dkfx605xrn7bp91khb02thpupmf 43575 43465 2019-04-22T11:48:30Z Patrick 2 Text replacement - "[[Qubes-Whonix]]" to "[[{{q project name short}}|{{q project name}}]]" 43575 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = {{project name}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/Whonix, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] kyxam1yq1ayl50m5tkczgspwzs49433 43758 43575 2019-04-22T12:06:40Z Patrick 2 Text replacement - "Whonix," to "{{project_name}}," 43758 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = {{project name}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix Qubes-Whonix version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 98xdfcj2p2roru0wez627pt60pi63ma 43980 43758 2019-04-22T12:43:05Z Patrick 2 Text replacement - "Qubes-Whonix " to "[[{{q_project_name_short}}|{{q_project_name}}]] " 43980 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = {{project name}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] qmbqog1repqyn1s3lo5sxw2y9b4tpwq 44187 43980 2019-04-22T13:13:34Z Patrick 2 Text replacement - "Whonix-Gateway and Whonix-Workstation" to "{{gateway_product_name}} and {{workstation_product_name}}" 44187 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: Whonix-Workstation for work activities and Whonix-Gateway to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = {{project name}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] rrjicktgide39stcapexpz04km0s3hj 44305 44187 2019-04-22T13:26:53Z Patrick 2 Text replacement - "Whonix-Workstation " to "{{workstation_product_name}} " 44305 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: {{workstation_product_name}} for work activities and Whonix-Gateway to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = {{project name}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] gqx44y0p95m5fqw0efv0zaqu2ydzwbp 44613 44305 2019-04-22T13:38:16Z Patrick 2 Text replacement - " Whonix-Gateway " to " {{gateway_product_name}} " 44613 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = {{project name}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] od0zblnmvqry7bpjm4l864hpkcibfsz 45345 44613 2019-04-25T01:02:14Z 127.0.0.1 lose "TM" in titles (looks like shit) 45345 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] asp8sscize6o60dcq3j1qofyvp9t52o 45346 45345 2019-04-25T01:03:14Z 127.0.0.1 ditto 45346 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = Whonix Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == Whonix is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == Whonix Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == Whonix is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] mxkyndz0i6nkny81b5jh6u0epkmwi3q 45364 45346 2019-04-25T10:38:54Z Patrick 2 Rejected the last 2 text changes (by [[Special:Contributions/127.0.0.1|127.0.0.1]]) and restored revision 44613 by Patrick 45364 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/Whonix/Whonix/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = {{project name}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] od0zblnmvqry7bpjm4l864hpkcibfsz 45371 45364 2019-04-25T11:31:15Z Patrick 2 Text replacement - "/Whonix" to "/{{project_name_short}}" 45371 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description=Whonix Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = Whonix aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Whonix is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. Whonix is [[Why_Whonix_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = Whonix is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''Whonix Operating System Design'' [[File:Whonix concept refined.jpg]] = Online Anonymity via Tor = Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = {{project name}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>Whonix version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "Whonix 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> Whonix is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] pjxmsljn05rtyp7sv79t8af3e7py927 45714 45371 2019-04-25T12:07:30Z Patrick 2 Text replacement - "Whonix " to "{{project_name}} " 45714 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_Whonix_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' [[File:{{project_name}} concept refined.jpg]] = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = {{project name}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_Whonix_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] agzoaqgmj0v235tnzw24stdut0ept8k 45992 45714 2019-04-25T12:48:13Z Patrick 2 Text replacement - "_Whonix_" to "_{{project_name_short}}_" 45992 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' [[File:{{project_name}} concept refined.jpg]] = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} = {{project name}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] pt9lbwyepju9yxi3o4rrcuv97e7v4pd 46380 45992 2019-04-25T13:54:56Z Patrick 2 /* {{project name}} Version */ 46380 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{DISPLAYTITLE:Design and Goals}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' [[File:{{project_name}} concept refined.jpg]] = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] stw9ouglckjqtfku7o4gpealmpq5xd6 46721 46380 2019-04-30T13:10:45Z Patrick 2 Text replacement - "{{DISPLAYTITLE:" to "{{Title|title=" 46721 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' [[File:{{project_name}} concept refined.jpg]] = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 08q4cfzfg8r8ftr7zl92tb1tn2rx2p3 46881 46721 2019-05-01T19:17:10Z Patrick 2 /* Security by Isolation */ 46881 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' [[File:{{project_name_short}} concept refined.jpg]] = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 8wkgq8prno99kfr09dpc4heovxpnyr5 47241 46881 2019-05-12T06:48:33Z 127.0.0.1 ditto 47241 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = == {{project name}} is == * A free and open operating system. * An anti-censorship tool. * The first step among many in hiding a user's identity. == {{project name}} Helps to == * Disguise a user's IP address. * Prevent ISP spying. * Prevent websites from identifying the user. * Prevent malware from identifying the user. * Circumvent censorship. == {{project name}} is not == * A one-click anonymization solution. = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] aiu39kno3ei7cqlbwuqqwqmcib5ut14 47243 47241 2019-05-12T07:03:14Z 127.0.0.1 3 small sections -> 1 table 47243 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 7pnoe9ld5yxi6rm7jps0jdy8kg2l5pm 47568 47243 2019-05-27T09:55:33Z Patrick 2 47568 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. {{comment_end}} <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 5x7pezfbo65wu3mvyxrs0xcizaxp9z2 47570 47568 2019-05-27T09:55:57Z Patrick 2 47570 wikitext text/x-wiki {{comment_start}} Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. {{comment_end}} <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] c3l606p82rke1l0y1r6ogo17h6qr8nv 47573 47570 2019-05-27T09:57:45Z Patrick 2 47573 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. {{comment_end}} <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. {{comment_end}} {{Title|title=Design and Goals}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] r0uztv6dws9efo8928kxfvt396rhv2k 47574 47573 2019-05-27T09:58:42Z Patrick 2 47574 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 7pnoe9ld5yxi6rm7jps0jdy8kg2l5pm 47887 47574 2019-06-08T13:40:11Z 127.0.0.1 fix 47887 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''9'' || [https://www.debian.org/releases/stretch/ stretch] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] eokr7xar21c325nl5efpngdea8tpkcz 48999 47887 2019-07-01T10:34:08Z Patrick 2 /* {{project_name_short}} Version */ 48999 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} {{Header}} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 3yqz4etmagnwgcg80o8dpri886512cu 51823 48999 2019-10-31T14:41:19Z Patrick 2 51823 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 4zku1s718p6607s5hxi1kzhtcxplr3l 52299 51823 2019-11-07T13:02:29Z Patrick 2 Text replacement - "2012 - 2018 ENCRYPTED SUPPORT LP" to "2012 - 2019 ENCRYPTED SUPPORT LP" 52299 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Free Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] nwmzrt78drx5zs3cds1uwx53b0faxbo 54945 52299 2020-03-03T17:31:25Z Patrick 2 /* Introduction */ 54945 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- {{gateway_product_name}} and {{workstation_product_name}} -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ongjesaq4j795vzshyn07yukeqhlmsr 55408 54945 2020-03-21T09:10:03Z Patrick 2 /* Introduction */ 55408 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 4hzlrio2uwhrsxfo64imbha66x67bwu 55413 55408 2020-03-21T09:36:15Z Patrick 2 55413 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] npgwgooshht1xrqlu1048cmr16yjet7 55418 55413 2020-03-21T09:42:01Z Patrick 2 /* Introduction */ 55418 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] czl9v5f5b0pbwpflafgjbvesw4mjiqb 55419 55418 2020-03-21T09:45:28Z Patrick 2 /* Introduction */ 55419 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] trmkq88p3q5c6l4nh24se3apranxvta 56596 55419 2020-05-03T17:27:13Z Patrick 2 Text replacement - "2012 - 2019 ENCRYPTED SUPPORT LP" to "2012 - 2020 ENCRYPTED SUPPORT LP" 56596 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} is an advanced feature in Qubes OS. Those who wish to use it must stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project name}} TemplateVMs are released, older versions of {{project name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] o2e06xrkxxg37ap16jrm52oudk4ehev 57815 56596 2020-06-07T07:27:26Z 127.0.0.1 Qubes website quote changed slightly -> update 57815 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] hl6kliuye81makvqlg5exy3owr88kdz 58007 57815 2020-06-19T09:33:53Z 127.0.0.1 58007 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [https://phabricator.whonix.org/maniphest/ {{project name}} phabricator manifest] <ref>For example, for the next release use the tag "{{project_name}} 15" and status "Open".</ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] h982ytsh5sir6tdz5jeqx0j08sjqu2s 58763 58007 2020-07-21T10:33:23Z Patrick 2 /* Release Schedule */ 58763 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 15" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 8uw2h4exd1e5i8tz9dj031koqcoizxj 58810 58763 2020-07-22T16:33:14Z Patrick 2 Text replacement - "adrelanos@riseup.net" to "adrelanos@whonix.org" 58810 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 15" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[{{q_project_name_short}}|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 93w1uvesrmd5ltb35eutkvux4oezjt4 60937 58810 2020-11-26T22:30:28Z Patrick 2 Text replacement - "[[{{q_project_name_short}}|{{q_project_name}}]]" to "[[Qubes|{{q_project_name}}]]" 60937 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.whonix.org/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 15" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[Qubes|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 8laqwj74417a2a966w8l3ufg0lak700 61610 60937 2020-12-26T10:01:10Z Patrick 2 Text replacement - "|image=https://www.whonix.org/w/images/" to "|image=https://www.{{project_clearnet}}/w/images/" 61610 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 15" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[Qubes|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] hi4pkdjaxsmb5bxkj5mkxl57e09qati 63907 61610 2021-03-29T19:47:08Z Patrick 2 Text replacement - "2020 ENCRYPTED SUPPORT LP" to "2021 ENCRYPTED SUPPORT LP" 63907 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''10'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 15" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[Qubes|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] sg2v4wcc84thddbykve8xmsy6kxkkvs 64821 63907 2021-04-24T11:16:32Z Patrick 2 /* {{project_name_short}} Version */ 64821 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''{{Debian Stable Version Number Short}}'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 15" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[Qubes|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] mhn9f5c8ykdmeuj1nft7bp4tak4voyp 64829 64821 2021-04-24T11:25:46Z Patrick 2 Text replacement - "{{Debian Stable Version Number Short}}" to "{{Stable_project_version_based_on_Debian_version_short}}" 64829 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <u>{{VersionNew}}</u> || ''{{Stable_project_version_based_on_Debian_version_short}}'' || [https://www.debian.org/releases/buster/ buster] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 15" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[Qubes|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 13n6usdbpnop6zm7hbje765tp84omec 64832 64829 2021-04-24T11:27:51Z Patrick 2 /* {{project_name_short}} Version */ 64832 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/buster/ <code>buster</code>] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 15" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[Qubes|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ja2hobxu4z9khk1m12koswlkcsf4p2k 64833 64832 2021-04-24T11:28:31Z Patrick 2 /* {{project_name_short}} Version */ 64833 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website]: * [https://www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] * [https://www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] * [https://www.torproject.org/about/torusers.html.en Who uses Tor?] = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 15" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[Qubes|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] cujrjwpec0uwdik74zr2ac810fri65o 65221 64833 2021-05-05T01:19:52Z 127.0.0.1 update links, add v3 onions 65221 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[FAQ#How_do_I_Check_the_Current_{{project_name_short}}_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 15" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[Qubes|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 8s53788ig9vk0fob084roy8v01h7b2a 65222 65221 2021-05-05T01:23:39Z 127.0.0.1 fix link (info was moved from FAQ) 65222 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 15" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[Qubes|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * A free and open operating system. <br /> * An anti-censorship tool. <br /> * The first step among many in hiding a user's identity. |- ! scope="row"| {{project name}} Helps to | * Disguise a user's IP address.<br /> * Prevent ISP spying.<br /> * Prevent websites from identifying the user.<br /> * Prevent malware from identifying the user.<br /> * Circumvent censorship. |- ! scope="row"| {{project name}} is not | * A one-click anonymization solution. |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ol5d0kdzqqa1upxr7wbxyc3gopnfah6 65223 65222 2021-05-05T01:28:19Z 127.0.0.1 nits, no capitalization or full stop for incomplete sentences 65223 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 15" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[Qubes|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] lqnseguy765f3fsc4gq2v7y9zi4ttl5 65224 65223 2021-05-05T01:29:29Z 127.0.0.1 next release will be Whonix 16 65224 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[Qubes|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary of what {{project name}} is" chapter of the {{project name}} About wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 2bo9uuw5uqngyy8fuea5wcz9g2gkuwl 65225 65224 2021-05-05T01:32:39Z 127.0.0.1 update to reflect change titles etc. 65225 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>sys-whonix</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[Qubes|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] kgqisyn3hhupcbq4ihcj2k3wya0ke9n 67607 65225 2021-09-16T15:56:40Z Einsiedler90 4962 Text replacement - "(?i)\<code\>sys.whonix\<\/code\>" to "<code>{{gateway_product_name_vm}}</code>" 67607 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [http://forums.whonix.org/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[Qubes|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] bw1brt1b1qohsyhfff5ul4us97dxvq4 68261 67607 2021-09-29T11:14:40Z Patrick 2 /* Support Schedule */ 68261 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-versions/#whonix [[Qubes|{{q_project_name}}]] version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 4ob8jppv64lbyqd0zth08vuuizkmj0a 68262 68261 2021-09-29T11:18:05Z Patrick 2 /* Qubes Hosts */ 68262 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote> {{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade. </blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] fa6t1w0pk5xyvxgtdqlmjdixk4jx1ea 68263 68262 2021-09-29T11:18:15Z Patrick 2 /* Qubes Hosts */ 68263 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} TemplateVMs are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} TemplateVMs in Qubes. This policy requires {{project_name}} TemplateVM users to stay reasonably close to the cutting edge by upgrading to new stable versions of Qubes OS and {{project_name}} TemplateVMs within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} TemplateVMs will no longer be supported on any older version of Qubes OS. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable Qubes OS version within one month of its release. * One month after new stable versions of {{project_name}} TemplateVMs are released, older versions of {{project_name}} TemplateVMs will no longer be supported. This means that users who wish to continue using {{project_name}} TemplateVMs on Qubes must always upgrade to the latest stable {{project_name}} TemplateVM versions within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] sijou2i8uxb21h6tlaq57bbij4fv9gy 68264 68263 2021-09-29T11:20:43Z Patrick 2 /* Qubes Hosts */ 68264 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>Whonix templates are supported by our partner, the Whonix Project. The Whonix Project has set its own support policy for Whonix templates in Qubes. This policy requires Whonix template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and Whonix templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, Whonix templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using Whonix templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of Whonix templates are released, older releases of Whonix templates will no longer be supported. This means that users who wish to continue using Whonix templates on Qubes must always upgrade to the latest stable Whonix template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] jkioncgqt2zaqnv24x7dhlta1ecvq22 68343 68264 2021-09-29T22:11:02Z Einsiedler90 4962 Text replacement - "(?i)Whonix\stemplate" to "{{project_name}} template" 68343 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the Whonix Project. The Whonix Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] r93lfvek97410y5512oe6gukl0e4foa 68355 68343 2021-09-29T22:19:00Z Einsiedler90 4962 Text replacement - "Whonix.Project" to "{{project_name}} Project" 68355 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[{{project name short}}_Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] tcayi5hlgku1tj1nf780bsdf2ql4ah7 70882 68355 2021-11-22T17:55:33Z Einsiedler90 4962 70882 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why_{{project_name_short}}_is_Freedom_Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ks0xywy5zqcbcf1dicongpn1gotwras 71134 70882 2021-11-24T07:12:01Z Einsiedler90 4962 Text replacement - "(?i)\[\[Why.{1,30}is.Freedom.Software" to "[[Why Project is Freedom Software" 71134 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Why Project is Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 1zbym0tg86263s0vx75303s10pc4yoq 71203 71134 2021-11-24T12:01:10Z Patrick 2 Text replacement - "Why Project is Freedom Software" to "Reasons for Freedom Software" 71203 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>anon-whonix</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] j61lhu7s1v39it2l5jezf8b8caplu22 71265 71203 2021-11-24T12:11:07Z Patrick 2 Text replacement - "anon-whonix" to "{{workstation_product_name_vm}}" 71265 wikitext text/x-wiki <!-- Copyright: {{project name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project name}} safely. '''New {{project name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project name}} and Tor. * Further information about {{project name}} [[Features]]. * The implied [[Trust]] placed in {{project name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 4dem1sywhgtrvnj6nb0flsmmfsr7mgs 71615 71265 2021-12-01T09:46:35Z Patrick 2 Text replacement - "(?i)\{\{project.name\}\}" to "{{project_name}}" 71615 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] m4p02wby57t3yk716x3arhuwheney4k 71803 71615 2021-12-01T17:37:16Z Einsiedler90 4962 Text replacement - "(?i)\{\{(\w{1,10})\s(\w{1,10})\}\}" to "{{{$1}_{$2}}}" 71803 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{{project}_{clearnet}}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ix0rgh2uhvsi8swhmsl00m6bvktdcvl 71804 71803 2021-12-01T17:45:57Z Einsiedler90 4962 Text replacement - "(?i)\{\{(\w+)\s(\w+)\s(\w+)\s(\w+)\}\}" to "{{{$1}_{$2}_{$3}_{$4}}}" 71804 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{{q}_{project}_{name}_{short}}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{{q}_{project}_{name}_{short}}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{{project}_{clearnet}}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] kiq5qf3prjonyp76zoqtz0fow7wh68h 71807 71804 2021-12-01T18:11:57Z Einsiedler90 4962 Reverted edits by [[Special:Contributions/Einsiedler90|Einsiedler90]] ([[User talk:Einsiedler90|talk]]) to last revision by [[User:Patrick|Patrick]] 71615 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] m4p02wby57t3yk716x3arhuwheney4k 71808 71807 2021-12-01T18:16:16Z Einsiedler90 4962 Text replacement - "\{\{(\w+)\s(\w+)\s(\w+)\s(\w+)\}\}" to "\{\{{$1}_{$2}_{$3}_{$4}\}\}" 71808 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[\{\{{q}_{project}_{name}_{short}\}\}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[\{\{{q}_{project}_{name}_{short}\}\}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] bknp2fcggto44y01rsoow0ytqypvfxb 71809 71808 2021-12-01T18:17:37Z Einsiedler90 4962 Reverted edits by [[Special:Contributions/Einsiedler90|Einsiedler90]] ([[User talk:Einsiedler90|talk]]) to last revision by [[User:Patrick|Patrick]] 71615 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] m4p02wby57t3yk716x3arhuwheney4k 71810 71809 2021-12-01T18:22:02Z Einsiedler90 4962 Text replacement - "\{\{(\w{1,10})\s(\w{1,10})\s(\w{1,10})\s(\w{1,10})\}\}" to "{{{$1}_{$2}_{$3}_{$4}}}" 71810 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{{q}_{project}_{name}_{short}}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{{q}_{project}_{name}_{short}}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] otb3x4gxke6d3953gzvswzu0286m2lu 71811 71810 2021-12-01T18:23:24Z Einsiedler90 4962 Reverted edits by [[Special:Contributions/Einsiedler90|Einsiedler90]] ([[User talk:Einsiedler90|talk]]) to last revision by [[User:Patrick|Patrick]] 71615 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] m4p02wby57t3yk716x3arhuwheney4k 71812 71811 2021-12-01T18:31:38Z Einsiedler90 4962 Text replacement - "\{\{(\w+)\s(\w+)\s(\w+)\s(\w+)\}\}" to "{{$1_$2_$3_$4}}" 71812 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q_project_name_short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] pwzs5lw1gjcezc6g02hzxpcvev3b585 71813 71812 2021-12-01T18:32:30Z Einsiedler90 4962 Reverted edits by [[Special:Contributions/Einsiedler90|Einsiedler90]] ([[User talk:Einsiedler90|talk]]) to last revision by [[User:Patrick|Patrick]] 71615 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q project name short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q project name short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] m4p02wby57t3yk716x3arhuwheney4k 71816 71813 2021-12-01T20:47:18Z Patrick 2 Text replacement - "\{\{(\w+)\s(\w+)\s(\w+)\s(\w+)\}\}" to "{{$1_$2_$3_$4}}" 71816 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q project name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q_project_name_short}}|{{q project name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based on Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] pwzs5lw1gjcezc6g02hzxpcvev3b585 72232 71816 2021-12-01T22:36:48Z Patrick 2 Text replacement - "\{\{(\w+)\s(\w+)\s(\w+)\}\}" to "{{$1_$2_$3}}" 72232 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] rj2on67b4irkzqk65tyu19m9w17xma9 72474 72232 2021-12-01T22:43:16Z Patrick 2 Text replacement - "\{\{(\w+)\s(\w+)\}\}" to "{{$1_$2}}" 72474 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{gateway_product_name_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] b3cv7wquu2rk28tj63cwd9gcs448wpk 72646 72474 2021-12-02T00:12:39Z Patrick 2 Text replacement - "(?i)gateway.product.name.short" to "project_name_gateway_short" 72646 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{gateway_product_name_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] rcay4u5nkvv371ey6z6f2j0n6c95t4t 72763 72646 2021-12-02T00:18:16Z Patrick 2 Text replacement - "(?i)gateway_product_name_vm" to "project_name_gateway_vm" 72763 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{gateway_product_name}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{gateway_product_name}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 75eth44wsd2bc0m8thqjhefzzvrs3xv 72874 72763 2021-12-02T00:22:15Z Patrick 2 Text replacement - "(?i)gateway_product_name" to "project_name_gateway_long" 72874 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{project_name_gateway_long}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{workstation_product_name_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 3emk4dmsjt1hzixdvvfr8b0b0m36k4g 73095 72874 2021-12-02T00:31:24Z Patrick 2 Text replacement - "(?i)workstation_product_name_vm" to "project_name_workstation_vm" 73095 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{workstation_product_name_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{project_name_gateway_long}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] fshlsvcpkhivl54odjm81s9ds7zzyny 73139 73095 2021-12-02T00:43:02Z Patrick 2 Text replacement - "(?i)workstation_product_name_short" to "project_name_workstation_short" 73139 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{workstation_product_name}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{workstation_product_name}} for work activities and {{project_name_gateway_long}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] fn143k1qimkp655wzapg1ai0b3j3z29 73201 73139 2021-12-02T00:48:09Z Patrick 2 Text replacement - "(?i)workstation_product_name" to "project_name_workstation_long" 73201 wikitext text/x-wiki <!-- Copyright: {{project_name}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name}} Version}} = {{project_name_short}} Version = Each {{project_name}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name}} safely. '''New {{project_name}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name}} templates are supported by our partner, the {{project_name}} Project. The {{project_name}} Project has set its own support policy for {{project_name}} templates in Qubes. This policy requires {{project_name}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name}} templates are released, older releases of {{project_name}} templates will no longer be supported. This means that users who wish to continue using {{project_name}} templates on Qubes must always upgrade to the latest stable {{project_name}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name}} and Tor. * Further information about {{project_name}} [[Features]]. * The implied [[Trust]] placed in {{project_name}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] osx7725ecxffdqnq1mgs1xx4rzx5zr9 73631 73201 2021-12-02T00:56:02Z Patrick 2 Text replacement - "{{project_name}}" to "{{project_name_long}}" 73631 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Title|title=Design and Goals}} {{Header}} {{#seo: |description={{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name_long}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name_long}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] q26qnsx9x8imiq7ht2b0gfviydbyra5 77817 73631 2022-01-17T21:37:59Z Patrick 2 77817 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name_long}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name_long}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] qgiizsb45xzhi3as67c4k2855zghaw1 77818 77817 2022-01-17T21:38:14Z Patrick 2 77818 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name_long}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name_long}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] cdu8wn3vzc2d7e4n2tlxxs4en3i9tz7 77819 77818 2022-01-17T21:38:35Z Patrick 2 77819 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/7/70/Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name_long}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name_long}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] nwyn3rhycdvstvwf7k2mqn93x3aqmmz 82029 77819 2022-03-05T12:09:27Z Patrick 2 82029 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. {{project_name_long}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work. Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref>https://www.torproject.org/about/overview.html.en</ref>, Debian GNU/Linux <ref>https://en.wikipedia.org/wiki/Debian</ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce all Internet traffic through the Tor network. <ref>In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively.</ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref>Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up.</ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name_long}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] eletzf6az53a4ldqpll4vdghzabacno 82035 82029 2022-03-05T17:17:04Z Patrick 2 82035 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes all traffic through Tor, which is an anonymity network. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce routing all Internet traffic through the Tor network. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name_long}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] pe2ieirv2qazlmmuokkuozr10cqo4y0 82466 82035 2022-03-09T17:11:22Z Patrick 2 /* Introduction */ 82466 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete operating system with [https://www.whonix.org/#features advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce routing all Internet traffic through the Tor network. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name_long}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] h2d5lmbuj4baejcip1l4owd809bs9f6 82467 82466 2022-03-09T17:12:44Z Patrick 2 /* Introduction */ 82467 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete operating system with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce routing all Internet traffic through the Tor network. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name_long}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] eep49brt51v3ho2cl90xbsc6dbrrp6t 82468 82467 2022-03-09T17:14:21Z Patrick 2 /* Introduction */ 82468 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete operating system with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. (([[Host_Operating_System_Selection|Host Operating System Selection]]) {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce routing all Internet traffic through the Tor network. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name_long}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] n8w2zzf5ga98zknp2tkvtgbwi7n6yl0 82469 82468 2022-03-09T17:14:37Z Patrick 2 82469 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete operating system with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a host operating system (OS). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. ([[Host_Operating_System_Selection|Host Operating System Selection]]) {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce routing all Internet traffic through the Tor network. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name_long}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 1fvict8uxh4fclj7wdge6qyjchybukb 82470 82469 2022-03-09T17:17:39Z Patrick 2 /* Introduction */ 82470 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce routing all Internet traffic through the Tor network. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name_long}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] myhl62bsvugwj7u54l3x69m1ha9xb9a 82471 82470 2022-03-09T17:19:14Z Patrick 2 /* Support Schedule */ 82471 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce routing all Internet traffic through the Tor network. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution |} = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name_long}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ceqpx0h940hbl76wo9wzlizaycplpvi 82472 82471 2022-03-09T17:19:30Z Patrick 2 /* Summary */ 82472 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce routing all Internet traffic through the Tor network. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent ISP spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name_long}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 48eysgc1watu6pae1f8h631crdyr8fm 82473 82472 2022-03-09T17:23:01Z Patrick 2 /* Summary */ 82473 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce routing all Internet traffic through the Tor network. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name_long}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] kupgij8umkdkjt06s8z7mchnka695o9 82474 82473 2022-03-09T17:28:37Z Patrick 2 /* Footnotes */ 82474 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce routing all Internet traffic through the Tor network. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * The Security Guide, Advanced Security Guide and [[Design]] chapters detailing the {{project_name_long}} specifications, threat model and implementation. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] pfcw5lxj4zoy3w0w3zmh8jrt5mutwa2 82475 82474 2022-03-09T17:30:18Z Patrick 2 /* Next Steps */ 82475 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce routing all Internet traffic through the Tor network. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' {{Box|text= [[File:{{project_name_short}} concept refined.jpg]] }} = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] bqi5w4n3p8azfcn2zp3c45gbqynjcj3 82476 82475 2022-03-09T17:58:43Z Patrick 2 /* Security by Isolation */ 82476 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} where protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: {{project_name_workstation_long}} for work activities and {{project_name_gateway_long}} to enforce routing all Internet traffic through the Tor network. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}} concept refined.jpg]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 92kfudwyz5t1b3h7ccwhng1w7n69u4z 82477 82476 2022-03-09T18:02:11Z Patrick 2 /* Security by Isolation */ 82477 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} where protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities, and * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}} concept refined.jpg]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] np60expz15wcm9m9bxfoba690yy7k60 82478 82477 2022-03-09T18:03:13Z Patrick 2 /* Security by Isolation */ 82478 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities, and * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}} concept refined.jpg]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] e0p4p6wuy9662hyo5s0dyf620489ulv 82479 82478 2022-03-09T18:05:08Z Patrick 2 /* Security by Isolation */ 82479 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}} concept refined.jpg]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] m7z98ixjkkvehz0isq38yr9gsv2z0e7 82480 82479 2022-03-09T18:07:32Z Patrick 2 /* Security by Isolation */ 82480 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}} concept refined.jpg]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 2av3d4p1w3obeiiv72oec775ke4m4b2 82482 82480 2022-03-09T18:11:34Z Patrick 2 /* Security by Isolation */ 82482 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}} concept refined.jpg]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] n601pz6qjoctuo8dv5ko2tlogadqti2 82483 82482 2022-03-09T18:13:02Z Patrick 2 /* Security by Isolation */ 82483 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}} concept refined.jpg]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] kc08q6o0vem03wpovv56ity94xxxrrq 82484 82483 2022-03-09T18:16:01Z Patrick 2 /* Security by Isolation */ 82484 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}} concept refined.jpg]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. For technical readers this is being further substantiated in [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]]. = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] otol1ez5dzzf5mrscoxqesgi6wa6un3 82856 82484 2022-03-18T12:20:02Z Patrick 2 /* Security by Isolation */ 82856 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on [[Kicksecure]] ™ (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. For technical readers this is being further substantiated in [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]]. = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 5812jfbdn8m9lj2p2sle9ysc5c12u49 82964 82856 2022-03-23T08:57:24Z Patrick 2 /* Introduction */ 82964 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. For technical readers this is being further substantiated in [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]]. = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] aqedz59bwa44sx1s81qvyi6ixemcnaq 83530 82964 2022-06-05T13:31:50Z Patrick 2 Text replacement - "{{project_name_short}}/{{project_name_short}}/blob/master/GPLv3" to "derivative-maker/derivative-maker/blob/master/GPLv3" 83530 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <http://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. For technical readers this is being further substantiated in [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]]. = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ir2kpcz1kgx4lzs169nkrs8oyegx2zd 84119 83530 2022-07-14T09:53:40Z Wiki-import 5022 84119 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. For technical readers this is being further substantiated in [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]]. = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] j9tmc8ucijeeq9t9cyw2orangtxnl2u 84556 84119 2022-07-25T21:26:21Z Patrick 2 /* Introduction */ 84556 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Kicksecure-seal.png|thumb|100px|Kicksecure logo]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. For technical readers this is being further substantiated in [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]]. = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 9tno6tzh265tpwsheg5p1hzphlbx67e 84557 84556 2022-07-25T21:26:45Z Patrick 2 /* Introduction */ 84557 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Kicksecure-seal.png|thumb|100px|Kicksecure logo]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. For technical readers this is being further substantiated in [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]]. = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] mt8ww7os0yekm8gnwlclankeq17vfo1 84558 84557 2022-07-25T21:27:28Z Patrick 2 /* Introduction */ 84558 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. For technical readers this is being further substantiated in [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]]. = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] bg2q2s6kajrpw8ukkye4chnmd8c5cco 84569 84558 2022-07-25T21:41:35Z Patrick 2 /* Based on Debian */ 84569 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. For technical readers this is being further substantiated in [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]]. = Online Anonymity via Tor = {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] bkrfw5s23vinb51l82vo9uigatimg68 84570 84569 2022-07-25T21:42:26Z Patrick 2 /* Online Anonymity via Tor */ 84570 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. For technical readers this is being further substantiated in [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]]. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 70eu7w0r1zdnmsu4daek0ujgy3eyhn1 84571 84570 2022-07-25T21:46:23Z Patrick 2 /* {{project_name_short}} Version */ 84571 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. For technical readers this is being further substantiated in [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]]. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] oahyfsjcdfqyx81r8ob9k3o9wtrjugf 84573 84571 2022-07-25T21:48:25Z Patrick 2 /* Introduction */ 84573 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. For technical readers this is being further substantiated in [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]]. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/blog/one-cell-enough If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] q3akk61z8bqxdz8f9kk9c9ovz9qpaxz 84694 84573 2022-07-26T21:57:37Z Nurmagoz 4391 84694 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. For technical readers this is being further substantiated in [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]]. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If both flows are visible], simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the [https://www.torproject.org/ Tor website] ([http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html .onion]): * [https://2019.www.torproject.org/about/overview.html.en#whyweneedtor Tor overview: Why we need Tor] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor .onion]) * [https://2019.www.torproject.org/about/overview.html.en#thesolution Tor overview: How Tor Works] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution .onion]) * [https://2019.www.torproject.org/about/torusers.html.en Who uses Tor?] ([http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en .onion]) = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 2sulys65s7jpkqegmyy65us930f1y9f 85341 84694 2022-08-05T23:00:15Z 127.0.0.1 use template instead for cleaner look 85341 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. For technical readers this is being further substantiated in [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]]. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution. Such one-click anonymization solutions not only <u>do not exist</u> but very most likely also <u>cannot exist</u> since online anonymity is a complex challenge in a highly surveilled world as readers of [[Documentation|{{project name long}} documentation]] will learn. |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] rn4gntf5d0laig39idg934qra62ykzo 85342 85341 2022-08-05T23:09:11Z 127.0.0.1 phrasing nit 85342 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. What is a leak? In laymen's terms, a leak happens if a user expected to be using Tor but got betrayed by parts of the application traffic actually not using Tor but the normal internet (clearnet) instead. One leak just once is all that is required to de-anonymize the user. For example IP leaks, DNS leaks, UDP and other leaks. Even if Tor can provide sufficient anonymity, it is [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated to impossible] for users to configure applications to consistently and always make use of Tor for all traffic originating the application. That is because networking is very complex and most applications are not designed with anonymity or privacy in mind. With {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible, and even malware with root privileges cannot discover the user's real IP address. That is because {{project_name_long}} makes sure that all internet traffic is routed through Tor thanks to its split-VM design. Some applications such as most notably for example the Tor Browser Bundle are specifically designed for anonymity, privacy and to avoid leaks but despite all efforts due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]], leaks have occurred in the past. In such cases, users of {{project name long}} were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address. That is why the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This has been audited through the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. No leaks have ever been found in {{project name long}} during its [[History|10 years history]]. For technical readers this is being further substantiated in [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]]. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref>Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed.</ref> |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 99tdwwfygw8a3hb8csgo88zyz57w6j4 85343 85342 2022-08-05T23:39:39Z 127.0.0.1 phrasing, grammar nits 85343 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]], and no leaks were ever discovered during the last [[History|ten years]]. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref>Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed.</ref> |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] e4xmgihq86olyg82c9vrhi9cqs8cxy4 85344 85343 2022-08-05T23:43:29Z 127.0.0.1 nit 85344 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref>Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed.</ref> |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] qcqcz9npeyee5soz5dk9jm1mbbwm3xy 85409 85344 2022-08-07T22:05:10Z Patrick 2 mediawiki-shell-bot-default-edit-message 85409 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref>Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed.</ref> |} = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] azwwqp68dioymq1qh59ha2nur5ygckf 87286 85409 2022-09-01T15:48:31Z Patrick 2 /* Summary */ 87286 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ecydxvqxbzj7pqjojx92fqjagw1gpoa 87495 87286 2022-09-08T10:26:53Z Patrick 2 /* {{project_name_short}} Version */ 87495 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 3jxuemer6v1dji4lbqldiq60tyzymy5 87496 87495 2022-09-08T10:27:19Z Patrick 2 /* {{project_name_short}} Version */ 87496 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/derivative-maker/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 9yvtwlp2444vxj8u029qf5dlaieu0st 88605 87496 2022-10-15T10:29:16Z Patrick 2 Text replacement - "github.com/derivative-maker" to "github.com/{{project_name_short}}" 88605 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping users run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] nrank4zikvefg31q23c0zmyzbmby4cj 88987 88605 2022-10-22T19:31:18Z Patrick 2 /* Introduction */ 88987 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= Design and Goals }} {{#seo: |description={{project name long}} routes all traffic through Tor. {{project_name_long}} Overview. Online Anonymity via Tor and Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=https://www.{{project_clearnet}}/w/images/thumb/7/70/Information-275708-640.png/470px-Information-275708-640.png }} [[image:Information-275708-640.png|thumb]] = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] enbdb1httrv05rq1jlcipdd0mw1ypuc 89117 88987 2022-10-28T09:45:55Z Hans 5031 89117 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> __NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |text= {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. Based on the Tor anonymity network, {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Debian GNU/Linux and the principle of security by isolation, {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network, meaning all connections are forced through Tor or blocked. The Tor network helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |imageright=1 |text= {{project_name_long}} uses an extensively reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] {{Footer}} = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 20drtvoajriorgguqd1b6qke95m7zrs 89118 89117 2022-10-28T09:46:23Z Hans 5031 89118 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |text= {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. Based on the Tor anonymity network, {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Debian GNU/Linux and the principle of security by isolation, {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network, meaning all connections are forced through Tor or blocked. The Tor network helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |imageright=1 |text= {{project_name_long}} uses an extensively reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] {{Footer}} = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] hhs0ks6jebdyz20zlb5phfts68se15c 89119 89118 2022-10-28T09:47:42Z Hans 5031 89119 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |text= {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. Based on the Tor anonymity network, {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Debian GNU/Linux and the principle of security by isolation, {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network, meaning all connections are forced through Tor or blocked. The Tor network helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |imageright=1 |text= {{project_name_long}} uses an extensively reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] k3ir9s2stqiapurutik5arl8dzdixg7 89128 89119 2022-10-28T10:11:33Z Hans 5031 89128 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} <div class="promo-style"> {{LeftRightImageText |image=Whonix-homepage-main.png |text= <h3>Superior Internet privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. Based on the Tor anonymity network, {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Debian GNU/Linux and the principle of security by isolation, {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network, meaning all connections are forced through Tor or blocked. The Tor network helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |imageright=1 |text= {{project_name_long}} uses an extensively reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> </div> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] hhuq4q8akmgij4cyoe5s963g104lns6 89129 89128 2022-10-28T10:12:19Z Hans 5031 89129 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} <div class="promo-style"> {{LeftRightImageText |image=Whonix-homepage-main.png |text= <h3>Superior Internet privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. Based on the Tor anonymity network, {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Debian GNU/Linux and the principle of security by isolation, {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network, meaning all connections are forced through Tor or blocked. The Tor network helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |imageright=1 |text= {{project_name_long}} uses an extensively reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] q1ra09iuywzgvtk45plbtw47xdns9tp 89130 89129 2022-10-28T10:12:49Z Hans 5031 89130 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} <div class="promo-style"> {{LeftRightImageText |image=Whonix-homepage-main.png |text= <h3>Superior Internet privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. Based on the Tor anonymity network, {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Debian GNU/Linux and the principle of security by isolation, {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network, meaning all connections are forced through Tor or blocked. The Tor network helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |imageright=1 |text= <p> {{project_name_long}} uses an extensively reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> </div> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] aizimqh8t075uko6y6mc9xgylqwmab4 89131 89130 2022-10-28T10:17:26Z Hans 5031 89131 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} <div class="promo-style"> {{LeftRightImageText |image=Whonix-homepage-main.png |text= <h3>Superior Internet privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. Based on the Tor anonymity network and {{Kicksecure_link | |{{Kicksecure}} }} - security-focused Linux Distribution) - also Debian GNU/Linux and the principle of security by isolation, {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers.<ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |imageright=1 |text= <p> {{project_name_long}} uses an extensively reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> </div> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ehejwxdaglif9q4vs2562wap10fsbgh 89132 89131 2022-10-28T10:18:58Z Hans 5031 89132 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} <div class="promo-style"> {{LeftRightImageText |image=Whonix-homepage-main.png |text= <h3>Superior Internet privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. Based on the Tor anonymity network and {{Kicksecure_link | |{{Kicksecure}} }} - security-focused Linux Distribution) - also Debian GNU/Linux and the principle of security by isolation, {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |imageright=1 |text= <p> {{project_name_long}} uses an extensively reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> </div> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] prcmfhzz5k3hg8wcxb75p6d5iwf2rdo 89133 89132 2022-10-28T10:22:37Z Hans 5031 89133 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} <div class="promo-style"> {{LeftRightImageText |image=Whonix-homepage-main.png |text= <h3>Superior Internet privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, Debian, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[Learn More|#overview]] </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |imageright=1 |text= <p> {{project_name_long}} uses an extensively reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> </div> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] fx5j4qrhokcg37vwl0ozatd3xfpk28a 89134 89133 2022-10-28T10:23:33Z Hans 5031 89134 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} <div class="promo-style"> {{LeftRightImageText |image=Whonix-homepage-main.png |text= <h3>Superior Internet privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, Debian, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[Learn More #overview]] </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |imageright=1 |text= <p> {{project_name_long}} uses an extensively reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> </div> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] jm4f3b8dl03706qz426vqn1srsbq9cn 89135 89134 2022-10-28T10:24:34Z Hans 5031 89135 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} <div class="promo-style"> {{LeftRightImageText |image=Whonix-homepage-main.png |text= <h3>Superior Internet privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, Debian, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#general-info|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |imageright=1 |text= <p> {{project_name_long}} uses an extensively reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> </div> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 390vxfce7h3rdzgs9znbyxml2ntju08 89136 89135 2022-10-28T10:25:35Z Hans 5031 89136 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} <div class="promo-style"> {{LeftRightImageText |image=Whonix-homepage-main.png |text= <h3>Superior Internet privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, Debian, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |imageright=1 |text= <p> {{project_name_long}} uses an extensively reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> </div> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project name long}} routes <u>all</u> traffic through Tor, which is is currently the [[Why_does_Whonix_use_Tor|best available anonymity network]]. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] czuvecere4azubciq4u3ryso3wo3529 89137 89136 2022-10-28T10:35:58Z Hans 5031 89137 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} <div class="promo-style"> {{LeftRightImageText |image=Whonix-homepage-main.png |text= <h3>Superior Internet privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |imageright=1 |text= <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> </div> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] mqk4dzwit7cv5wj42aljbli3op6o256 89144 89137 2022-10-28T10:45:17Z Hans 5031 89144 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} <div class="promo-style"> {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> </div> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] lhc5db9jphrdosdux39ifinl7sj1nbo 89145 89144 2022-10-28T10:47:19Z Hans 5031 89145 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] lqnuc4weid58j69r0oknikrls4ah9d0 89147 89145 2022-10-28T11:10:02Z Hans 5031 89147 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. </p> }} <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Without precautions, the Internet service provider (ISP) and global surveillance systems can record everything done online, as IP addresses associated with network activity are easily linked with the physical location of a user's computer(s). {{project_name_long}} is one solution to this problem. Anyone who values privacy or does sensitive work on their desktop or online can benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] osl3cbyfx24c5tat3xkvrbse3jngxnx 89148 89147 2022-10-28T11:11:43Z Hans 5031 89148 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. </p> }} <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] h1ipbvzjhzns4f9buny4j98r009lwtl 89149 89148 2022-10-28T11:12:44Z Hans 5031 89149 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] qb7dh054qzaolvn07vw4k9avscy3uhj 89150 89149 2022-10-28T11:19:51Z Hans 5031 89150 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] nt0m8br6n4z7zxms1jyca55u77dx87q 89151 89150 2022-10-28T11:23:46Z Hans 5031 89151 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-10"></div> == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] putbyyla306baz0f2j0tw0uphloejny 89153 89151 2022-10-28T11:41:10Z Hans 5031 89153 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> = Details = == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 43ukwc81t3zrfczoldxhcmq41h24v6k 89154 89153 2022-10-28T11:41:32Z Hans 5031 89154 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> = Details = == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete <u>o</u>perating <u>s</u>ystem (OS) with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 2xpm2iwcozcg0ehhqi3g1ijc1t3sddi 89155 89154 2022-10-28T11:45:17Z Hans 5031 89155 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> = Details = Now we're diving deep into what makes {{project_name_long}} great. We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. = Introduction = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete {{os}} with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> <div class="vspacer-20"></div> == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. = Security by Isolation = {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. = Online Anonymity via Tor = [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Based on Debian = [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 92bgiq8gqifia88tno1wozc5sui8bwo 89156 89155 2022-10-28T11:49:13Z Hans 5031 89156 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> = Details = Now we're diving deep into what makes {{project_name_long}} great. We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. == Introduction == [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|100px]] [[File:Debian.png|thumb|100px|Debian logo]] [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete {{os}} with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. == {{project_name_long}} User Groups == {{LeftRightImageText |image=Spy.jpg |imageright=1 |text= The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes, but is not limited to: }} * Investigators and whistleblowers whose work threatens the powerful. ** Within an isolated environment, research and evidence can be gathered without accidental exposure. * Researchers, government officials or business-people who may be targets of espionage. ** Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. * Journalists who endanger themselves and their families by reporting on organized crime. ** Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. * Political activists under targeted surveillance and attack. ** The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. * Average computer users in a repressive or censored environment. ** Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. * Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed. ** {{project_name_long}} does not silently upload identifying information in the background. See also [[Users_of_Whonix|Users of {{project name long}}]]. == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == {{project_name_short}} Version == [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} == Release Schedule == Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. == Summary == '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> == Support Schedule == === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> == Next Steps == Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. == See Also == * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] == License == {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] m0slapablavdib7m8j2c814li2ph270 89157 89156 2022-10-28T12:07:58Z Hans 5031 89157 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> = Details = '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. == Introduction == [[File:Whonix-logo-rectangle.png|thumb|150px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|150px]] [[File:Debian.png|thumb|150px|Debian logo]] [[File:Tor-logo.png|thumb|150px|Tor logo]] {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete {{os}} with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. == {{project_name_long}} User Groups == [[File:Preview-user-groups.jpg|thumb|300px]] The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == {{project_name_short}} Version == [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} == Release Schedule == Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. == Summary == '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> == Support Schedule == === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> == Next Steps == Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. == See Also == * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] == License == {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] a9oopiqd81338wmn8gyvkdc3mwlgt11 89158 89157 2022-10-28T12:09:22Z Hans 5031 89158 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> = Details = '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. == Introduction == [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete {{os}} with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. == {{project_name_long}} User Groups == [[File:Preview-user-groups.jpg|thumb|400px]] The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == {{project_name_short}} Version == [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} == Release Schedule == Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. == Summary == '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> == Support Schedule == === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> == Next Steps == Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. == See Also == * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] == License == {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 4if1x5nr08b7s1lel5hqk8h2vubekk6 89159 89158 2022-10-28T12:09:59Z Hans 5031 89159 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> <div class="info-box"> = Details = '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. </div> == Introduction == [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. {{project_name_long}} aims to preserve privacy and anonymity by helping [[Users_of_Whonix|users]] run applications anonymously. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is a complete {{os}} with [https://www.whonix.org/#features additional, advanced security and anonymity features]. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS. ([[Host_Operating_System_Selection|Host Operating System Selection]]) The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. == {{project_name_long}} User Groups == [[File:Preview-user-groups.jpg|thumb|400px]] The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == {{project_name_short}} Version == [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} == Release Schedule == Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. == Summary == '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> == Support Schedule == === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> == Next Steps == Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. == See Also == * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] == License == {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 7nea57vq6e87u5ln0qotn2v2965sk20 89160 89159 2022-10-28T12:15:50Z Hans 5031 89160 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> <div class="info-box"> = Details = '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. </div> == Introduction == [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. == {{project_name_long}} User Groups == [[File:Preview-user-groups.jpg|thumb|400px]] The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == {{project_name_short}} Version == [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} == Release Schedule == Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. == Summary == '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> == Support Schedule == === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> == Next Steps == Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. == See Also == * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] == License == {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] ftkfwz6fp6a0uh2p51t0jec0ofspoau 89161 89160 2022-10-28T12:17:33Z Hans 5031 89161 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> ---- = Details = '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. == Introduction == [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. == {{project_name_long}} User Groups == [[File:Preview-user-groups.jpg|thumb|400px]] The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == {{project_name_short}} Version == [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} == Release Schedule == Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. == Summary == '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> == Support Schedule == === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> == Next Steps == Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. == See Also == * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] == License == {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 3jjvftawqg12i470fgyltpsdcdj78gh 89162 89161 2022-10-28T12:18:12Z Hans 5031 89162 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> <hr class="margin-bottom-30 margin-top-30" /> = Details = '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. == Introduction == [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. == {{project_name_long}} User Groups == [[File:Preview-user-groups.jpg|thumb|400px]] The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == {{project_name_short}} Version == [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} == Release Schedule == Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. == Summary == '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> == Support Schedule == === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> == Next Steps == Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. == See Also == * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] == License == {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] l0yjnaf9s46bj0uv9lnlgtk5k8bdaty 89163 89162 2022-10-28T12:19:09Z Hans 5031 89163 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. -->__NOTOC__ {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> <hr class="margin-bottom-30 margin-top-30" /> <div class="vspacer-20 margin-top-20"></div> = Details = '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. == Introduction == [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. == {{project_name_long}} User Groups == [[File:Preview-user-groups.jpg|thumb|400px]] The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. == {{project_name_long}} Architecture == {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == {{project_name_short}} Version == [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} == Release Schedule == Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. == Summary == '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> == Support Schedule == === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> == Next Steps == Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. == See Also == * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] == Footnotes == {{reflist|close=1}} [[About|About]] [[Category:Documentation]] == License == {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] nqq3dwdt0c8sk7f1fv2aasks6r38xrv 89164 89163 2022-10-28T12:21:51Z Hans 5031 89164 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> <hr class="margin-bottom-30 margin-top-30" /> <div class="vspacer-20 margin-top-20"></div> = Details = '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px]] The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 5rx946tsantblpvlfa02hbzlccagq32 89165 89164 2022-10-28T12:23:33Z Hans 5031 89165 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> ---- <div class="vspacer-20 margin-top-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px]] The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] odfrdw7fcod9ts44ac3n5t3vi2srfxz 89166 89165 2022-10-28T12:24:08Z Hans 5031 89166 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> ---- <div class="vspacer-20 margin-top-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px]] The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] tpl9okuhev64xbpdboxuohff888wq5n 89167 89166 2022-10-28T12:25:00Z Hans 5031 89167 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px]] The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |text= '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. }} = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] cgkdwe4z1xt8jk9e3vijrpi932e7rlb 89168 89167 2022-10-28T12:26:29Z Hans 5031 89168 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == {{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address. {{project_name_long}} protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. {{project_name_long}} is divided into two VMs: * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error. '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] nmjv4xgmzuvrkwisl4bd2ptxfwy6mfu 89184 89168 2022-10-28T12:31:34Z Hans 5031 89184 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] g10t373g9yf1c541ym0bcseahv3rv1o 89185 89184 2022-10-28T12:33:03Z Patrick 2 89185 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] c5aeotkdwmw8wpw591e14526ainnbnc 89189 89185 2022-10-28T12:35:08Z Patrick 2 /* {{project_name_long}} User Groups */ 89189 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|[[Users of Whonix]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] o3zm8p2pma83eoztf1gfxm7j6jt4y3l 89190 89189 2022-10-28T12:35:49Z Patrick 2 Undo revision 89189 by [[Special:Contributions/Patrick|Patrick]] ([[User talk:Patrick|talk]]) 89190 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|100px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] c5aeotkdwmw8wpw591e14526ainnbnc 89191 89190 2022-10-28T12:49:13Z Hans 5031 /* {{project_name_short}} Version */ 89191 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|100px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] crt8rq461m3fc0avj59qot3188bwa33 89192 89191 2022-10-28T12:49:36Z Hans 5031 /* Based on Debian */ 89192 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] m5hrt76teyhlhxb5u0vohe3lkcstv2w 89193 89192 2022-10-28T12:50:05Z Hans 5031 /* Based on Debian */ 89193 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] d5x3a7f859p6vzc9zeicumhrym8cwir 89194 89193 2022-10-28T12:50:37Z Hans 5031 /* Security by Isolation */ 89194 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] jl8i0tgaywf1xi9hodkcwjes93v31o3 89195 89194 2022-10-28T12:50:47Z Hans 5031 /* Based on Debian */ 89195 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|100px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] f3zx2z2m4fb0bv8oxu3yxufo1cbtzh3 89196 89195 2022-10-28T12:51:56Z Hans 5031 /* Online Anonymity via Tor */ 89196 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 5v6ja7du9hgetflqkdm6k911y35pvo7 89199 89196 2022-10-28T13:19:21Z Patrick 2 89199 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. To learn more about {{project_name_long}} see [[About]] and [[Features]]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 80urlxki742b6a7zrpp41j66v4vdyoh 89200 89199 2022-10-28T13:22:49Z Patrick 2 /* {{project_name_long}} Architecture */ 89200 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 40dccxg25xtay8gc94h9gwvis65ezow 89213 89200 2022-10-29T13:46:41Z Patrick 2 /* {{project_name_long}} User Groups */ 89213 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 9g46z2isbegf22srabfattjg4rdygyw 89226 89213 2022-10-31T13:10:20Z Patrick 2 89226 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=wiki/Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] fqv1cirkl2euish27y990f40eoh7xuh 89227 89226 2022-10-31T13:10:54Z Patrick 2 89227 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=wiki/Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] pm2v4413b4y728382wh5g6roam36a65 89228 89227 2022-10-31T13:11:12Z Patrick 2 89228 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] onwvmsdnjq6dnw1bh6hajbs27wtxkc6 89229 89228 2022-10-31T13:11:46Z Patrick 2 89229 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |imagelink=/Users_of_Whonix |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 49olh3tevn1r6puzuzddu1iq72ybc5u 89230 89229 2022-10-31T13:12:45Z Patrick 2 /* {{project_name_long}} Architecture */ 89230 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |imagelink=/Users_of_Whonix |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px|{{project name long}} Architecture]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] smsmnj0sfj5dnb9mgop4yt25uhjrzer 89231 89230 2022-10-31T13:13:43Z Patrick 2 /* See Also */ 89231 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |imagelink=/Users_of_Whonix |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px|{{project name long}} Architecture]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] rdtuv8eaa6ghdj70py4va8nbhlbvm4q 89248 89231 2022-11-01T08:39:09Z Hans 5031 89248 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |imagelink=Users_of_Whonix |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#features advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px|{{project name long}} Architecture]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 8hcl0klfbd51xljgikclkjqn4rl3fkt 89491 89248 2022-11-15T18:57:44Z Wiki-import 5022 Text replacement - "https://www.whonix.org/#features" to "https://www.whonix.org/#security" 89491 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |imagelink=Users_of_Whonix |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px|{{project name long}} Architecture]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] e8y1ojrugg7q838b62j9b5dwn6c833w 90670 89491 2022-12-04T09:56:01Z 127.0.0.1 /* Introduction */ 90670 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the Tor anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |imagelink=Users_of_Whonix |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px|{{project name long}} Architecture]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 7f1wzfqfgfqd6noogr71p1q5zhd3lvn 90671 90670 2022-12-04T10:50:21Z MintM 5232 Added ext. link to Tor anonymity network twice (to keep the # of links relevant and limited), as per introduction for people not yet familiar with the term. 90671 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |imagelink=Users_of_Whonix |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Security_in_Real_World|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px|{{project name long}} Architecture]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Security_in_Real_World#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] tmrovuuumtytr5ylixw52aqgxews9no 90741 90671 2022-12-06T14:33:34Z Patrick 2 Text replacement - "Security_in_Real_World" to "Whonix_against_Real_Attacks" 90741 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Whonix_against_Real_Attacks|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |imagelink=Users_of_Whonix |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Whonix_against_Real_Attacks|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px|{{project name long}} Architecture]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Whonix_against_Real_Attacks#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Security in Real World|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] bh37f8547fryonwh8mlsntd5nde0cw0 90750 90741 2022-12-06T14:37:54Z Patrick 2 Text replacement - "[[Security in Real World|" to "[[Whonix against Real Attacks|" 90750 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Whonix_against_Real_Attacks|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |imagelink=Users_of_Whonix |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Whonix_against_Real_Attacks|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px|{{project name long}} Architecture]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Whonix_against_Real_Attacks#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Whonix against Real Attacks|Protection against Real World Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 5cbsyd9g9mx6f6u6q9ef9n5xc9fe8m2 90756 90750 2022-12-06T14:39:03Z Patrick 2 Text replacement - "|Protection against Real World Attacks]]" to "|Whonix Track Record against Real Cyber Attacks]]" 90756 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Whonix_against_Real_Attacks|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |imagelink=Users_of_Whonix |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Whonix_against_Real_Attacks|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px|{{project name long}} Architecture]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Whonix_against_Real_Attacks#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. '''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Whonix against Real Attacks|Whonix Track Record against Real Cyber Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] qdw1aykw1bzo42drm7edrw109uko8t9 91849 90756 2023-01-02T15:49:01Z Patrick 2 /* Security by Isolation */ 91849 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Whonix_against_Real_Attacks|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |imagelink=Users_of_Whonix |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Whonix_against_Real_Attacks|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px|{{project name long}} Architecture]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Whonix_against_Real_Attacks#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. ''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Whonix against Real Attacks|Whonix Track Record against Real Cyber Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] 0ta07hygo145yxqzw94wfcrbb3gb46m 91850 91849 2023-01-02T15:49:12Z Patrick 2 /* Security by Isolation */ 91850 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Whonix_against_Real_Attacks|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |imagelink=Users_of_Whonix |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Whonix_against_Real_Attacks|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px|{{project name long}} Architecture]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Whonix_against_Real_Attacks#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. ''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Whonix against Real Attacks|Whonix Track Record against Real Cyber Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] qsvtbfytg97o7uyh1gmh6dlw2wqzvyp 92064 91850 2023-01-12T18:03:47Z 127.0.0.1 92064 wikitext text/x-wiki Christmas is usually a time of overindulgence but this year some are shunning the usual extravagances in favour of more frugal and laid-back festivities.<br>One fifth of us are expected to opt for trendy air fryers rather than ovens to cook Christmas dinner in a bid to cut energy bills as the cost-of-living crisis bites.<br>Air fryers use less than half the energy that an oven requires, so over time they can reduce gas and electricity bills.<br>Those cooking for Christmas will be relieved to hear the appliances can roast green vegetables, potatoes and custom poultry - including turkey.<br> Christmas is usually a time of overindulgence but this year some are shunning the usual extravagances in favour of more frugal and laid-back festivities<br> One fifth of us are expected to opt for trendy air fryers rather than ovens to cook Christmas dinner in a bid to cut energy bills as the cost-of-living crisis bites<br> RELATED ARTICLES Previous 1 Next Gifts 'were stolen by delivery driver and sold at car boot... Just William - The Christmas Truce: A new rollicking tale... <br><br><br><br>Share this article<br>Share<br><br><br>However, air fryers with capacities of less than 5.7l litres may not be large enough to cook a bird whole.<br>The counter-top machine can also be used as a healthier option because air fryers require significantly less oil.<br>A survey for John Lewis found many of us also plan to dress down this year, with only 9 per cent puting on their festive 'glad rags'.<br><br>Instead of sequins, velvet, black tie and high heels, this year will see almost half of us - 45 per cent - in relaxed apparel such as pyjamas or jeans on the day.<br>Meanwhile rocketing prices are forcing millions to scale back on lavish details and luxury presents.<br><br>Four in ten of those cutting back admitted to buying cheaper presents for friends, while one in five are spending less on an office 'Secret Santa'. And many started Christmas shopping earlier than ever this year to spread costs.<br>The study found donations to charity, gifts for pets and treats left for Santa were among the most likely outlays to be axed.<br>However, presents for children were given top priority, closely followed by alcoholic drinks.<br><br>With the average Christmas dinner costing a third more than in 2021, according to Good Housekeeping, many plan to make further savings by cooking more from scratch.<br>Stuffing, gravy and mince pies are among the most popular elements to prepare at home.<br><div class="art-ins mol-factbox news" data-version="2" id="mol-829ade30-7f42-11ed-b5d1-2770e98db79c" website an air fryer save on your power bills? mybq0a32k6zdfo3750r7t69ddqy8dnm 92097 92064 2023-01-13T10:22:40Z Patrick 2 92097 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=Download |text= <h3>Superior Internet Privacy</h3> <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Whonix_against_Real_Attacks|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |imagelink=Users_of_Whonix |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Whonix_against_Real_Attacks|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px|{{project name long}} Architecture]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Whonix_against_Real_Attacks#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. ''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_link |url=https://2019.www.torproject.org/about/torusers.html.en |text=Who uses Tor? |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/torusers.html.en }} = Summary = '''Table:''' ''{{project_name_long}} Goals, Design and Limitations'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Category''' ! scope="col"| '''Description''' |- ! scope="row"| {{project_name_long}} is | * a free and open operating system * an anti-censorship tool * the first step among many in hiding a user's identity |- ! scope="row"| {{project_name_long}} helps to | * disguise a user's IP address * prevent <u>i</u>nternet <u>s</u>ervice <u>p</u>rovider (ISP) spying * prevent websites from identifying the user * prevent malware from identifying the user * circumvent censorship |- ! scope="row"| {{project_name_long}} is not | * a one-click anonymization solution, since anonymity is a complex behavioral and technical problem in a highly surveilled world <ref> Readers of the [[Documentation|{{project name long}} documentation]] will quickly learn that one-click anonymization solutions simply <u>do not exist</u> and will likely never be developed. </ref> |- |} </div> = {{project_name_short}} Version = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] Each {{project_name_long}} release is based on a particular version of Debian: <div class="scroll-table"> {| class="wikitable" |- ! <u>{{project_name_long}} version</u> !! ''Debian Version'' !! Debian Codename |- | {{project_name_long}} <code><u>{{VersionNew}}</u></code> || ''<code>{{Stable_project_version_based_on_Debian_version_short}}</code>'' || [https://www.debian.org/releases/{{Stable project version based on Debian codename}}/ <code>{{Stable project version based on Debian codename}}</code>] |- |} </div> Users can manually check the {{project_name_long}} version at any time by following [[Post_Install_Advice#How_do_I_Check_the_Current_Whonix_.E2.84.A2_Version.3F|this step]]. {{Anchor|Release and Support Schedule}} = Release Schedule = Note that {{project_name_long}} does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the [[Reporting_Bugs#Issue_Tracker|issue tracker]] <ref> For example, for the next release use the tag "{{project_name_long}} 16" and status "Open". </ref> and [[Release_Notes|release notes]] to track developer progress. [[Stay Tuned]]. = Support Schedule = === Debian Hosts === '''New Debian Release''' <u>One month</u> after a new stable version of <u>Debian</u> is released, {{project_name_long}} VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use {{project_name_long}} safely. '''New {{project_name_long}} Release''' <u>One month</u> after a new stable version of <u>Whonix</u> is released, older versions will no longer be supported. All users need to upgrade the {{project_name_long}} platform promptly in order to remain safe. '''Deprecation Notices''' The deprecation notice is provided at least one month in advance and posted in the [https://forums.{{project_clearnet}}/c/news {{project_name_long}} News forum]. [[Stay Tuned]]! All users need to upgrade the respective platform promptly in order to remain safe. <ref>This also relieves {{project_name_long}} developers from needing to diagnose and support old-stable versions of Qubes/Debian/{{project_name_long}}, which duplicates the maintenance burden.</ref> === Debian-based and Other Hosts === As per [[#Debian Hosts|Debian Hosts]]. === Windows Hosts === The support schedule is mostly undefined at present, but likely to mirror [[#Debian Hosts|Debian Hosts]]. === Qubes Hosts === Quote [https://www.qubes-os.org/doc/supported-releases/#note-on-whonix-support {{q_project_name}} version support policy]: <blockquote>{{project_name_long}} templates are supported by our partner, the {{project_name_long}} Project. The {{project_name_long}} Project has set its own support policy for {{project_name_long}} templates in Qubes. This policy requires {{project_name_long}} template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and {{project_name_long}} templates within a month of their respective releases. To be precise: * One month after a new stable version of Qubes OS is released, {{project_name_long}} templates will no longer be supported on any older release of Qubes OS. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable Qubes OS release within one month of its release. * One month after new stable versions of {{project_name_long}} templates are released, older releases of {{project_name_long}} templates will no longer be supported. This means that users who wish to continue using {{project_name_long}} templates on Qubes must always upgrade to the latest stable {{project_name_long}} template releases within one month of their release. We aim to announce both types of events one month in advance in order to remind users to upgrade.</blockquote> = Next Steps = Learning more about {{project_name_long}} is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended: * The [[Warning]] page to understand the security limitations of {{project_name_long}} and Tor. * Further information about {{project_name_long}} [[Features]]. * The implied [[Trust]] placed in {{project_name_long}} when it is used. * Other relevant [[Documentation|Documentation]] explaining how to use {{project_name_long}} safely. = See Also = * [[Whonix against Real Attacks|Whonix Track Record against Real Cyber Attacks]] * [[History|10 years history of success]] = Footnotes = {{reflist|close=1}} [[About|About]] [[Category:Documentation]] = License = {{License_Amnesia|{{FULLPAGENAME}}}} {{JonDos}} The "Summary" chapter of the {{project_name_long}} Design and Goals wiki page contains content from the JonDonym documentation [https://anonymous-proxy-servers.net/en/help/about.html Features] page. {{Footer}} [[Category:Documentation]] qsvtbfytg97o7uyh1gmh6dlw2wqzvyp 92352 92097 2023-01-25T14:47:54Z Hans 5031 92352 wikitext text/x-wiki <!-- Copyright: {{project_name_long}} About wiki page Copyright (C) Amnesia <amnesia at boum dot org> {{project_name_long}} About wiki page Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to: Free Software Foundation, Inc. 51 Franklin St, Fifth Floor Boston, MA 02110-1301, USA. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in the /usr/share/common-licenses' directory. The complete text of the GNU General Public License can also be found online on gnu.org <https://www.gnu.org/licenses/gpl.html>, in {{project_name_long}} virtual machine images in /usr/share/common-licenses/GPL-3 file or on Github <https://github.com/{{project_name_short}}/derivative-maker/blob/master/GPLv3>. --> <!-- This wiki page is a fork of the Tails About page, from this exact source <https://git.immerda.ch/?p=amnesia.git;a=blob;f=wiki/src/about.mdwn;hb=9ff23c529b206f6f3d637257f8f1f2aa434f3d27>. --> {{Header}} {{hide_all_banners}} {{Title|title= {{project_name_long}} - Overview }} {{#seo: |description=Privacy protection. Anonymity online. Anonymous Operating System. {{project_name_long}} routes all Internet traffic through the Tor anonymity network. Security by Isolation. Based on Debian. {{project_name_long}} Architecture. |image=Whonixonly.jpg }} {{#css: .intro-p { margin-top: 0 !important; } #mw-content-text .wikitable { border-spacing: 8px; margin-left: -8px!important; } #mw-content-text .wikitable th { background: #cdf5c7; vertical-align: middle; } #mw-content-text .wikitable th[scope=row] { background: #d2effd; } #mw-content-text .wikitable td { background: #e6e6e6; } }} {{Anchor|overview}} {{intro| '''{{project_name_long}} is an anonymous operating system that runs like an app''' and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems. }} {{LeftRightImageText |image=Whonix-homepage-main.png |addToClass=promo-style |imagelink=Download |text= <h3>Superior Internet Privacy</h3> {{documentation_mininav}} <p> {{project_name_long}} is a free and open-source desktop {{os}} that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. {{project_name_long}} [[Whonix_against_Real_Attacks|defeats common attacks]] while maintaining usability. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Kicksecure-promo.jpg |addToClass=promo-style |imageright=1 |imagelink=https://www.kicksecure.com |text= <h3>Security hardened</h3> <p> {{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened) which is run inside multiple <u>v</u>irtual <u>m</u>achines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. [[#Introduction|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image=Preview-user-groups.jpg |addToClass=promo-style |imageright=1 |imagelink=Users_of_Whonix |text= <h3>Privacy First Users</h3> <p> The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. [[#Whonix_.E2.84.A2_User_Groups|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> {{LeftRightImageText |image={{project_name_short}}-concept-detailed.jpg |addToClass=promo-style |text= <h3>Innovative Architecture</h3> <p> {{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. [[#Whonix_.E2.84.A2_Architecture|Learn more]]. </p> }} <div class="vspacer-20 margin-top-20"></div> <center> {{#widget:Download_Button |text=Download Whonix ™ (FREE) |url=/wiki/Download |fontsize=22px }} <div class="vspacer-20"></div> {{Supported_Platforms_Icons| size=50 }} </center> <div class="vspacer-20 margin-top-30"></div> ---- <div class="vspacer-20"></div> '''Now we're diving deep into what makes {{project_name_long}} great.''' We'll provide a more detailled look and lots of links for you to even more thoroughly study {{project_name_long}}. <div class="vspacer-20"></div> __TOC__ = Introduction = [[File:Whonix-logo-rectangle.png|thumb|130px|[[Dev/Logo|{{project name long}} rectangular logo]]]] [[File:Kicksecure-seal.png|thumb|130px]] [[File:Debian.png|thumb|130px|Debian logo]] [[File:Tor-logo.png|thumb|130px|Tor logo]] '''{{project_name_long}} is a free and open-source desktop {{os}}''' that is specifically designed for [https://www.whonix.org/#security advanced security and privacy]. It's based on the [https://torproject.org Tor] anonymity network, security-focused Linux Distribution {{Kicksecure_link | |{{Kicksecure}} }}, GNU/Linux and the principle of security by isolation. '''{{project_name_long}} [[Whonix_against_Real_Attacks|defeats common attacks]] while maintaining usability'''. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the [[Users_of_Whonix|user]]'s physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). [https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ If you can see both flows], simple statistics based on data volume and timing can determine whether they match up. </ref> '''{{project_name_long}} uses an extensively security reconfigured Debian base ({{Kicksecure}} Hardened)'''. It consists of two virtual machines -- [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] -- which are designed to be used on a [[Download|supported]] host OS ([[Host_Operating_System_Selection|Host Operating System Selection]]). The host OS supporting {{project_name_long}} is usually the one installed on the user's computer, but OSes installed on external drives will also work ([[USB Installation]]). Users choose the preferred {{project_name_long}} configuration and may use either a Type I hypervisor ([[{{q_project_name_short}}|{{q_project_name}}]]), or a Type II hypervisor like [[KVM|KVM]] and [[VirtualBox|Virtualbox]]. '''This architecture provides a substantial layer of protection from malware and [[Data_Collection_Techniques#IP_Address|IP]] leaks'''. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. {{project_name_long}} is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools {{project_name_long}} provides also make it ideally suited for hosting secure and anonymous onion services. '''By helping [[Users_of_Whonix|users]] run applications anonymously {{project_name_long}} aims to preserve privacy and anonymity'''. A [[Tor Browser|web browser]], [[HexChat|IRC client]], [[Software#Office_Suite|office suite]], and [[Software|more]] come pre-configured with security in mind. Internet traffic by {{project name long}} is all routed through the Tor anonymity network. {{project_name_long}} is [[Reasons for Freedom Software|Freedom Software]] and is based on {{Kicksecure_link | |{{Kicksecure}} }} (security-focused Linux Distribution), Tor <ref> https://www.torproject.org/about/overview.html.en </ref>, Debian GNU/Linux <ref> https://en.wikipedia.org/wiki/Debian </ref>, and the principle of security by isolation. = {{project_name_long}} User Groups = [[File:Preview-user-groups.jpg|thumb|400px|link=Users_of_Whonix|[[Users_of_Whonix|Users of {{project name long}}]]]] '''Privacy is a human right'''. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. {{project_name_long}} is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using {{project_name_long}}. This includes the following. Also see [[Users_of_Whonix|Users of {{project name long}}]]. # '''Investigators and whistleblowers whose work threatens the powerful'''. Within our isolated environment, research and evidence can be gathered without accidental exposure. # '''Researchers, government officials or business-people who may be targets of espionage'''. Anti-malware and anti-exploit modifications lower the threat of trojans and backdoors. # '''Journalists who endanger themselves and their families by reporting on organized crime'''. Compartmentalized, anonymous Internet use prevents identity correlation between social media and other logins. # '''Political activists under targeted surveillance and attack'''. The usefulness of threatening the ISP in order to analyze a target's Internet use is severely limited. The cost of targeting a {{project_name_long}} user is greatly increased. # '''Average computer users in a repressive or censored environment'''. Easy Tor setup and options for advanced configurations means users in repressive countries can fully access the Internet desktop-wide, not just in their browser. # '''Average computer users who simply don’t want all or some aspect of their private lives uploaded, saved and analyzed'''. {{project_name_long}} does not silently upload identifying information in the background. = {{project_name_long}} Architecture = {{Anchor|architecture}} [[File:{{project_name_short}}-concept-detailed.jpg|thumb|400px|{{project name long}} Architecture]] '''{{project_name_long}} consists of two VMs: the [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] and the [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]]'''. <ref> In [[{{q_project_name_short}}|{{q_project_name}}]], these VMs are named <code>{{project_name_gateway_vm}}</code> and <code>{{project_name_workstation_vm}}</code>, respectively. </ref> The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The {{project_name_long}} architecture affords several benefits: * Only connections through Tor are permitted. * Servers can be run, and applications used, anonymously over the Internet. * DNS leaks are impossible. * Malware with root privileges cannot discover the user's real IP address. * Threats posed by misbehaving applications and user error are minimized. * The platform has [https://www.whonix.org/#security extensive security hardening]. = Features = == Full Spectrum Anti-Tracking Protection == '''Hiding your identity is harder than just hiding your IP'''. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection. '''Table:''' ''Surveillance Technology, Impact and {{project_name_long}} Defenses'' <div class="scroll-table"> {| class="wikitable" |- ! scope="col"| '''Surveillance Technology''' ! scope="col"| '''Impact on your Privacy''' ! scope="col"| '''{{project_name_long}} Tracking Protection Technology''' |- ! scope="row"| [[Data_Collection_Techniques#IP|IP address tracking]] | IP is tied to user identity and physical location. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Data_Collection_Techniques#Browser_Fingerprinting|Browser fingerprinting]] | Tracking, creating a profile of the user even if the user is already cloaking its IP. | [[Tor Browser]] |- ! scope="row"| [[Fingerprint#Website_Traffic_Fingerprinting|Website Traffic Fingerprinting]] | Your {{isp}} knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. <ref> [[Whonix_versus_VPNs#VPNs_do_not_even_hide_visited_websites_from_your_Internet_Service_Provider|VPNs do not even hide visited websites from your Internet Service Provider]] </ref> For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attack could figure out who you are. | [[Why_does_Whonix_use_Tor|IP cloaking using Tor]] |- ! scope="row"| [[Keystroke_Deanonymization|Personal keyboard typing fingerprinting]] | Re-identification once you are typing on a website because of your personal typing style. | [[Keystroke_Deanonymization#Kloak|kloak (keystroke anonymizer)]] |- ! scope="row"| [[Time_Attacks|Time attacks]] | Individual computer time can give away your identity. | [[Boot Clock Randomization]] and secure network time synchronization through [[sdwdate]] (Secure Distributed Web Date) |- |} </div> == Based on Debian == [[File:Debian.png|thumb|130px|Debian logo]] {{Based_on_Debian}} {{Anchor|{{project_name_long}} Version}} == Security by Isolation == '''{{project_name_long}} is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because {{project_name_long}} protects from leaks'''. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels. '''Even when Tor provides sufficient anonymity, it can be [https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO very complicated or impossible] for users to configure applications''' so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to [[Whonix_against_Real_Attacks#Tor_Browser_Bundle|Tor Browser Bundle software defects (bugs)]]. In such cases, {{project name long}} users were protected and unaffected by these leaks. '''In {{project_name_long}}, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible'''. Even malware with root privileges cannot discover the user's real IP address because {{project_name_long}}'s split-VM design ensures all internet traffic is routed through Tor. ''{{project_name_long}} is divided into two VMs'': * [[{{project_name_gateway_short}}|{{project_name_gateway_long}}]] to enforce routing of all Internet traffic through the Tor network, and * [[{{project_name_workstation_short}}|{{project_name_workstation_long}}]] for work activities. {{project_name_workstation_long}} is unaware of its real external IP address, which means the user's real external IP address is always protected and leaks are impossible. '''This security by isolation configuration averts many threats posed by [[malware]], misbehaving applications, and user error.''' '''Figure:''' ''{{project_name_long}} Operating System Design'' [[File:{{project_name_short}}-concept-detailed.jpg|500px]] ([[Art_Gallery#Technical_Illustrations|more technical illustrative images]]) '''This is not an empty claim -- {{project_name_long}} has been audited via the [[corridor]] (Tor traffic whitelisting gateway) and other [[Dev/Leak Tests|leak tests]]'''. In over a [[History|decade]], no leaks were ever discovered. Technical readers can refer to the [[Dev/Technical_Introduction|{{project name long}} technical introduction]] and [[Dev/Technical_Introduction#Security_Overview|security overview]] chapters for further details. == Online Anonymity via Tor == [[File:Tor-logo.png|thumb|130px|Tor logo]] {{project_name_long}} relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. <ref> Current practical, low-latency, anonymity designs like Tor fail when the attacker can see both ends of the communication channel (traffic going into and out of the Tor network). {{Archive_link |url=https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ |text=If both flows are visible |onion=http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/one-cell-enough-break-tors-anonymity/index.html }} simple statistics can determine whether they match up. </ref> To learn more about Tor, read the official documentation on the {{Archive_link |url=https://www.torproject.org/ |text=Tor website |onion=http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html }}: * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#whyweneedtor |text=Tor overview: Why we need Tor |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#whyweneedtor }} * {{Archive_link |url=https://2019.www.torproject.org/about/overview.html.en#thesolution |text=Tor overview: How Tor Works |onion=http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/about/overview.html.en#thesolution }} * {{Archive_