Page MenuHomePhorge
Feed All Stories

Dec 31 2023

Patrick closed T492: research / document impact for tunnel users if Tor [exit] relays hosted at the same tunnel provider as Resolved.
Dec 31 2023, 10:47 PM · security, user documentation, Whonix, research
Patrick changed the status of T551: enter Whonix firewall timesync-fail-closed mode before suspend / enter Whonix firewall full mode after resume and clock-fix from Review to Open.
Dec 31 2023, 10:46 PM · Whonix 16, Whonix, sdwdate
Patrick closed T902: disable removable drives auto-mounting - XFCE only as Resolved.
Dec 31 2023, 10:46 PM · Whonix-Host, Whonix

Dec 18 2023

Patrick empowered mycobee as an administrator.
Dec 18 2023, 1:05 PM

Dec 16 2023

Patrick closed T959: investigate QEMU with HAXM acceleration on the Windows platform as VirtualBox replacement as Invalid.

HAXM was deprecated by intel as per:
https://github.com/intel/haxm

Dec 16 2023, 8:34 PM · Whonix

Dec 5 2023

Patrick updated the task description for T941: lock down interpreters / compilers (interpreter lock) (compiler lock).
Dec 5 2023, 8:19 AM · Whonix, security

Nov 26 2023

Patrick added a comment to T509: Consider nftables / Berkeley Packet Filter (BPF) as a replacement for iptables.

blocker:
Qubes integration
Integrate Whonix firewall with Qubes nftables rule

Nov 26 2023, 6:28 AM · iptables, vpn-firewall, whonix-ws-firewall, whonix-gw-firewall, Whonix, refactoring, research

Nov 22 2023

Patrick closed T901: package and test wiperam for Debian as Resolved.

There's now a dedicated project:
https://www.kicksecure.com/wiki/Ram-wipe
https://github.com/Kicksecure/ram-wipe

Nov 22 2023, 4:25 AM · Whonix-Host, Whonix
Patrick closed T644: replace tb-updater / curl-prgrs as Resolved.

This was implemented.

Nov 22 2023, 4:24 AM · bash, research, python, bug, Whonix, tb-updater
Patrick closed T927: port to /etc/apparmor.d/abstractions/base.d in Debian 11 bullseye as Resolved.
Nov 22 2023, 4:22 AM · Debian version 11 codename Bullseye, Whonix

Nov 9 2023

Patrick updated the task description for T941: lock down interpreters / compilers (interpreter lock) (compiler lock).
Nov 9 2023, 8:57 PM · Whonix, security

Nov 7 2023

Patrick closed T991: Update sdwdate-gui widget tray icons as Resolved.
Nov 7 2023, 7:34 PM · sdwdate-gui, Whonix
Patrick closed T991: Update sdwdate-gui widget tray icons, a subtask of T963: Make Whonix GUI usable for high-risk non-technical Qubes users, as Resolved.
Nov 7 2023, 7:34 PM · usability, sdwdate, sdwdate-gui, Whonix
Patrick renamed T991: Update sdwdate-gui widget tray icons from Update SDW-Date widget tray icons to Update sdwdate-gui widget tray icons.
Nov 7 2023, 7:33 PM · sdwdate-gui, Whonix
Patrick updated the task description for T915: sdwdate connectivity check host support.
Nov 7 2023, 7:31 PM · Whonix-Host, Whonix
Patrick updated the task description for T941: lock down interpreters / compilers (interpreter lock) (compiler lock).
Nov 7 2023, 12:09 PM · Whonix, security

Nov 1 2023

Patrick updated the task description for T766: use tinyproxy socks proxy support once available in Qubes-Whonix-Gateway.
Nov 1 2023, 7:25 PM · Whonix 16, Whonix, qubes-whonix

Oct 24 2023

Patrick closed T520: install fteproxy by default in Whonix-Gateway when porting to Debian stretch as Invalid.

quote https://forums.whonix.org/t/whonix-16-has-been-released-debian-11-bullseye-based-for-virtualbox-major-release/12297

Oct 24 2023, 12:10 PM · systemd, AppArmor, research, user documentation, enhancement, Whonix, circumvention

Oct 23 2023

Patrick updated the task description for T941: lock down interpreters / compilers (interpreter lock) (compiler lock).
Oct 23 2023, 11:07 AM · Whonix, security

Aug 14 2023

Patrick updated the task description for T910: anti-forensics / amnesia testing of Whonix-Host in Live mode.
Aug 14 2023, 1:52 PM · Whonix 15, Whonix-Host, Whonix
Patrick added a comment to T910: anti-forensics / amnesia testing of Whonix-Host in Live mode.

Have the dev team tested the anti-forensic capability of Whonix-live mode and grub live?

Aug 14 2023, 1:32 PM · Whonix 15, Whonix-Host, Whonix
Patrick updated the task description for T910: anti-forensics / amnesia testing of Whonix-Host in Live mode.
Aug 14 2023, 1:30 PM · Whonix 15, Whonix-Host, Whonix

May 16 2023

Patrick added a comment to T509: Consider nftables / Berkeley Packet Filter (BPF) as a replacement for iptables.

https://wiki.nftables.org/wiki-nftables/index.php/Atomic_rule_replacement

May 16 2023, 10:32 AM · iptables, vpn-firewall, whonix-ws-firewall, whonix-gw-firewall, Whonix, refactoring, research

May 15 2023

Patrick added a comment to T509: Consider nftables / Berkeley Packet Filter (BPF) as a replacement for iptables.

https://wiki.nftables.org/wiki-nftables/index.php/Scripting

May 15 2023, 6:21 PM · iptables, vpn-firewall, whonix-ws-firewall, whonix-gw-firewall, Whonix, refactoring, research
Patrick added a comment to T509: Consider nftables / Berkeley Packet Filter (BPF) as a replacement for iptables.

Some progress.

May 15 2023, 5:23 PM · iptables, vpn-firewall, whonix-ws-firewall, whonix-gw-firewall, Whonix, refactoring, research

May 9 2023

Patrick added a comment to T509: Consider nftables / Berkeley Packet Filter (BPF) as a replacement for iptables.

In other words, iptabels is already symlinked to iptabels-nft anyhow. Therefore Whonix is already using iptabels-nft.

May 9 2023, 10:34 AM · iptables, vpn-firewall, whonix-ws-firewall, whonix-gw-firewall, Whonix, refactoring, research
Patrick added a comment to T509: Consider nftables / Berkeley Packet Filter (BPF) as a replacement for iptables.
May 9 2023, 10:23 AM · iptables, vpn-firewall, whonix-ws-firewall, whonix-gw-firewall, Whonix, refactoring, research
Patrick added a comment to T28: RELATED,ESTABLISHED -> ESTABLISHED.

related:
https://forums.whonix.org/t/tails-features-ideas/2611

May 9 2023, 9:24 AM · security, Whonix 10, Whonix, whonix-gw-firewall
Patrick added a comment to T28: RELATED,ESTABLISHED -> ESTABLISHED.

Fixed link:
https://github.com/Whonix/whonix-firewall/commit/414c2105149e02dcff82303e4c5b2dcd60ebbd29

May 9 2023, 9:00 AM · security, Whonix 10, Whonix, whonix-gw-firewall

Feb 17 2023

Patrick added a comment to T673: document https downgrade sslstrip defenses - wget vs curl vs scurl.

https://forums.whonix.org/t/whonix-linux-installer-development-discussion/15917/20

Feb 17 2023, 10:52 AM · Whonix, user documentation, research, Whonix 14, scurl

Jan 19 2023

Patrick archived qubes-whonix 12.
Jan 19 2023, 11:26 AM
Patrick archived qubes-whonix 11.
Jan 19 2023, 11:25 AM
Patrick updated the task description for T526: systemd introduces memory protection.
Jan 19 2023, 11:12 AM · sdwdate, Whonix, research
Patrick updated the task description for T526: systemd introduces memory protection.
Jan 19 2023, 11:10 AM · sdwdate, Whonix, research
Patrick updated the task description for T526: systemd introduces memory protection.
Jan 19 2023, 11:02 AM · sdwdate, Whonix, research
Patrick closed T375: Include Debian ReportBug GUI? as Wontfix.

Due to phabricator being deprecated upstream, all tickets need to me migrated. Therefore closing here.

Jan 19 2023, 11:01 AM · enhancement, anon-meta-packages, Debian version 8 codename Jessie, Whonix
Patrick updated the task description for T135: find packages without security support / consider installation of debian-security-support by default.
Jan 19 2023, 10:58 AM · bash, Whonix, research, user documentation, security, usability
Patrick removed a project from T135: find packages without security support / consider installation of debian-security-support by default: Debian version 8 codename Jessie.
Jan 19 2023, 10:57 AM · bash, Whonix, research, user documentation, security, usability
Patrick closed T652: test Thunderbird with Torbirdy / anon-gpg-tweaks changes required? as Resolved.

https://forums.whonix.org/t/torbirdy-replacement/8782

Jan 19 2023, 10:57 AM · Debian version 9 codename Stretch, anon-gpg-tweaks, Whonix
Patrick archived Debian version 9 codename Stretch.
Jan 19 2023, 10:56 AM
Patrick archived Debian version 8 codename Jessie.
Jan 19 2023, 10:55 AM
Patrick closed T46: whonixcheck should check for dpkg problems as Resolved.

This is implemented in /usr/libexec/systemcheck/check_dpkg.bsh for a long time already.

Jan 19 2023, 10:55 AM · usability, Whonix, whonixcheck
Patrick closed T931: Testing tpm2-pkcs11with KVM vTPM 2.0 as Invalid.

Due to https://www.whonix.org/wiki/Reporting_Bugs#Transition_to_Discourse_Forums all tickets need to be migrated to forums. Please re-open in forums if this still still relevant.

Jan 19 2023, 10:53 AM · Debian version 11 codename Bullseye, Whonix
Patrick renamed T927: port to /etc/apparmor.d/abstractions/base.d in Debian 11 bullseye from port to /etc/apparmor.d/abstractions.d in Debian 11 bullseye to port to /etc/apparmor.d/abstractions/base.d in Debian 11 bullseye.
Jan 19 2023, 10:51 AM · Debian version 11 codename Bullseye, Whonix
Patrick closed T606: merge /etc/apparmor.d/abstractions/base.anondist from Debian bullseye as Resolved.

This will be done when doing T927.

Jan 19 2023, 10:49 AM · Debian version 11 codename Bullseye, AppArmor, Whonix
Patrick changed Impact from Whonix:triage to Whonix:low on T927: port to /etc/apparmor.d/abstractions/base.d in Debian 11 bullseye.
Jan 19 2023, 10:49 AM · Debian version 11 codename Bullseye, Whonix
Patrick closed T984: convert /etc/sysctl.d to /etc/default/grub.d kernel Linux boot cmdline as Invalid.

And we also port to dracut which also does early sysctl loading.
Adding tons of sysctl to an already very long kernel command line (do we got the world record already :) seems excessive.
Since nobody is making the argument anymore, rejecting this ticket.

Jan 19 2023, 10:48 AM · Whonix, Debian version 11 codename Bullseye
Patrick closed T968: Bullseye: live-boot needs GRUB_DISABLE_LINUX_UUID="true" parameter in /etc/grub.d/11_linux_live as Resolved.
Jan 19 2023, 10:43 AM · Debian version 11 codename Bullseye, live-mode, Whonix
Patrick closed T803: coyIM as Invalid.

Now tracked here:
https://forums.whonix.org/t/coyim-in-whonix-development-discussion/5901

Jan 19 2023, 10:41 AM · Debian version 11 codename Bullseye, Whonix 16, anon-meta-packages, Whonix
Patrick closed T924: rename to bullseye-security as Resolved.
Jan 19 2023, 10:40 AM · anon-apt-sources-list, Debian version 11 codename Bullseye, Whonix
Patrick closed T682: Check curl for latests tls support (--tlsv1.3) as Resolved.
Jan 19 2023, 10:40 AM · Whonix, Debian version 10 codename Buster

Dec 13 2022

Patrick updated the task description for T973: merge duplicate wiki pages?.
Dec 13 2022, 3:20 PM · Whonix, user documentation

Dec 9 2022

Patrick updated the task description for T139: device auto mounter broken.
Dec 9 2022, 3:32 PM · bug, Whonix, usability

Dec 8 2022

Patrick renamed T802: whonixcheck should check if torsocks IsolatePID stream isolation is functional from whonixcheck should check if torsocks IsolatePID stream isolation is functinoal to whonixcheck should check if torsocks IsolatePID stream isolation is functional.
Dec 8 2022, 4:46 PM · enhancement, easy, whonixcheck, Whonix, Whonix 16
Patrick updated the task description for T591: whonixcheck --clearnet connectivity test.
Dec 8 2022, 4:46 PM · whonixcheck, Whonix
Patrick closed T921: Installing git-all will delete some Whonix packages as Resolved.

No longer an issue in Whonix 16.

Dec 8 2022, 4:42 PM · Whonix
Patrick closed T912: qubes integration tools missing as Resolved.

Still works for me, still not reproducible. Old ticket. Therefore closing. Please re-report in the new issue tracker (and link to this old ticket) should this still be an issue.

Dec 8 2022, 4:40 PM · Qubes, Whonix
Patrick closed T827: make whonixcheck work outside of Whonix as Resolved.

whonixcheck was renamed to systemcheck and is now functional in Kicksecure.

Dec 8 2022, 4:38 PM · Whonix 16, Whonix, whonixcheck
Patrick closed T812: use onion sources list exclusively for apt-get updating by default as Wontfix.

Not a good idea nowadays due to prolonged DDoS attack on the Tor network. References:

Dec 8 2022, 4:37 PM · anon-apt-sources-list, Whonix
Patrick closed T805: cwtch as Invalid.

Tracked in https://forums.whonix.org/t/cwtch-messaging/5353/ but could use some new forum tag for things which aren't actionable (not in packages.debian.org) that we want to monitor every now and then over the various releases maybe.

Dec 8 2022, 4:35 PM · Whonix
Patrick closed T684: Better instructions for adding bridges as Resolved.
Dec 8 2022, 4:32 PM · Whonix 16, anon-connection-wizard, whonix-setup-wizard, Whonix
Patrick updated the task description for T962: create new release of Whonix Windows Installer.
Dec 8 2022, 4:30 PM · Whonix 16, VirtualBox, Whonix
Patrick closed T997: All pluggable transports stopped working after 11-06-2020 as Invalid.
Dec 8 2022, 4:28 PM · Whonix
Patrick closed T944: Hardened sshd Setup as Wontfix.

This is for whonix.org server security?

Dec 8 2022, 4:28 PM · enhancement, Whonix
Patrick closed T946: test sdwdate apparmor profile and remove complain mode as Resolved.

Done for a long time.

Dec 8 2022, 4:24 PM · sdwdate, Whonix, Whonix 15
Patrick closed T966: fix pkexec as Resolved.
Dec 8 2022, 4:23 PM · bug, Whonix, Whonix 15

Oct 5 2022

Patrick added a comment to T473: test ticket - can be deleted.

test

Oct 5 2022, 8:20 PM · Whonix
Patrick added a comment to T473: test ticket - can be deleted.

test

Oct 5 2022, 8:12 PM · Whonix

Jul 29 2022

Patrick removed a project from T947: Qubes-Whonix eth1 static networking: Whonix 15.
Jul 29 2022, 3:54 PM · Whonix

Jun 29 2022

0x1f added a member for KVM: 0x1f.
Jun 29 2022, 4:30 PM
0x1f added a member for VirtualBox: 0x1f.
Jun 29 2022, 4:30 PM

Jun 5 2022

Patrick updated the task description for T815: sclockadj fingerprinting defense - set time using sclockadj the same way NTP / sntp / chrony / systemd-timesyncd is changing the clock.
Jun 5 2022, 9:36 AM · Whonix, C Code, sclockadj, sdwdate
Patrick added a comment to T815: sclockadj fingerprinting defense - set time using sclockadj the same way NTP / sntp / chrony / systemd-timesyncd is changing the clock.

https://www.kicksecure.com/wiki/Dev/sdwdate#chrony_as_a_replacement_for_sclockadj

Jun 5 2022, 9:36 AM · Whonix, C Code, sclockadj, sdwdate

Feb 10 2022

Patrick updated the task description for T930: whonix.SdwdateStatus service starts VMs that were killed.
Feb 10 2022, 6:22 PM · sdwdate-gui, Whonix
Patrick updated the task description for T930: whonix.SdwdateStatus service starts VMs that were killed.
Feb 10 2022, 6:20 PM · sdwdate-gui, Whonix
Patrick updated the task description for T930: whonix.SdwdateStatus service starts VMs that were killed.
Feb 10 2022, 6:19 PM · sdwdate-gui, Whonix

Jan 1 2022

Patrick updated the task description for T930: whonix.SdwdateStatus service starts VMs that were killed.
Jan 1 2022, 11:12 AM · sdwdate-gui, Whonix
Patrick updated the task description for T930: whonix.SdwdateStatus service starts VMs that were killed.
Jan 1 2022, 11:03 AM · sdwdate-gui, Whonix
Patrick updated the task description for T930: whonix.SdwdateStatus service starts VMs that were killed.
Jan 1 2022, 10:57 AM · sdwdate-gui, Whonix

Dec 31 2021

Patrick updated the task description for T930: whonix.SdwdateStatus service starts VMs that were killed.
Dec 31 2021, 12:54 PM · sdwdate-gui, Whonix

Dec 15 2021

Patrick added a comment to T984: convert /etc/sysctl.d to /etc/default/grub.d kernel Linux boot cmdline.

Is this still reuqired since we also have early sysctl loading during initramfs?

Dec 15 2021, 10:50 AM · Whonix, Debian version 11 codename Bullseye
Patrick closed T985: consider post Whonix News that recommends VirtualBox users reducing number of virtual CPUs to 3 as Wontfix.
Dec 15 2021, 10:48 AM · Whonix 15, Whonix, VirtualBox

Dec 11 2021

Patrick added a comment to T930: whonix.SdwdateStatus service starts VMs that were killed.
Dec 11 2021, 1:48 PM · sdwdate-gui, Whonix

Dec 9 2021

Patrick closed T958: Write VirtualBox Screen Resolution Bug Report as Resolved.
Dec 9 2021, 6:10 PM · C Code, upstream, bug, Whonix 15, Whonix, VirtualBox
Patrick closed T933: fix offline documentation - pdfbook as Invalid.

No longer using this extension. Alternatives here:
https://www.whonix.org/wiki/Offline_Documentation

Dec 9 2021, 2:49 PM · website, Whonix
Patrick closed T843: unsubscribing to whonix mailing list sending empty message as Wontfix.

No mailing list at the moment. Deprecating this issue tracker. Can be re-considered in the future.

Dec 9 2021, 2:47 PM · website, Whonix
Patrick closed T932: fix Git-Mediawiki whonix-wiki-backup as Resolved.
Dec 9 2021, 2:46 PM · website, Whonix
Patrick closed T987: offer rsync over SSH or TLS for download.whonix.org as Resolved.

rsync over TLS or even onion is implemented for a long time already and documented here:
https://www.whonix.org/wiki/Hosting_a_Mirror

Dec 9 2021, 2:46 PM · server-ssh-access-required, Whonix
Patrick closed T917: whonix.org server SSL settings enhancement as Resolved.

This was done a long time ago.

Dec 9 2021, 2:45 PM · website, server-ssh-access-required, whonix.org server admin, Whonix

Nov 7 2021

vajinadaraltma updated vajinadaraltma.
Nov 7 2021, 10:32 AM

Oct 15 2021

Patrick closed T818: simplify tb-starter function tb_detect_starter_bin as Invalid.

Not possible because of above issue.

Oct 15 2021, 5:34 PM · Whonix, Whonix 16, tb-starter

Sep 8 2021

Patrick closed T911: xfce theming as Resolved.
Sep 8 2021, 3:10 PM · whonix-xfce-desktop-config, Whonix 15, Whonix
Patrick closed T961: fix USB auto mounting bug / document as Resolved.

https://forums.whonix.org/t/disk-usb-automount-in-kicksecure/8728/31

Sep 8 2021, 3:08 PM · research, bug, Whonix 15, Whonix
Patrick closed T953: extrepo - safely adding repos as Resolved.
Sep 8 2021, 3:02 PM · Whonix 15, Whonix
Patrick closed T957: slow shutdown bug as Resolved.

Cannot reproduce anymore in Whonix for VirtualBox.

Sep 8 2021, 2:51 PM · bug, Whonix 15, Whonix

Aug 9 2021

Patrick added a comment to T509: Consider nftables / Berkeley Packet Filter (BPF) as a replacement for iptables.
In T509#20232, @ak88 wrote:

Any updates on this?

Aug 9 2021, 7:13 PM · iptables, vpn-firewall, whonix-ws-firewall, whonix-gw-firewall, Whonix, refactoring, research
ak88 added a comment to T509: Consider nftables / Berkeley Packet Filter (BPF) as a replacement for iptables.

Any updates on this?

Aug 9 2021, 5:22 PM · iptables, vpn-firewall, whonix-ws-firewall, whonix-gw-firewall, Whonix, refactoring, research

Jun 24 2021

Patrick closed T868: mediawiki fixes #2 as Invalid.

migrated to https://forums.whonix.org/t/mediawiki-css-fixes/11874

Jun 24 2021, 9:42 PM · Whonix, website
Patrick closed T964: mediawiki fixes #3 as Invalid.

migrated to https://forums.whonix.org/t/mediawiki-css-fixes/11874

Jun 24 2021, 9:42 PM · website, Whonix
Patrick updated the task description for T964: mediawiki fixes #3.
Jun 24 2021, 9:35 PM · website, Whonix