Page MenuHomePhabricator
Feed All Stories

Oct 5 2022

Patrick added a comment to T473: test ticket - can be deleted.

test

Oct 5 2022, 8:20 PM · Whonix
Patrick added a comment to T473: test ticket - can be deleted.

test

Oct 5 2022, 8:12 PM · Whonix

Jul 29 2022

Patrick removed a project from T947: Qubes-Whonix eth1 static networking: Whonix 15.
Jul 29 2022, 3:54 PM · Whonix

Jun 29 2022

0x1f added a member for KVM: 0x1f.
Jun 29 2022, 4:30 PM
0x1f added a member for VirtualBox: 0x1f.
Jun 29 2022, 4:30 PM

Jun 5 2022

Patrick updated the task description for T815: sclockadj fingerprinting defense - set time using sclockadj the same way NTP / sntp / chrony / systemd-timesyncd is changing the clock.
Jun 5 2022, 9:36 AM · Whonix, C Code, sclockadj, sdwdate
Patrick added a comment to T815: sclockadj fingerprinting defense - set time using sclockadj the same way NTP / sntp / chrony / systemd-timesyncd is changing the clock.

https://www.kicksecure.com/wiki/Dev/sdwdate#chrony_as_a_replacement_for_sclockadj

Jun 5 2022, 9:36 AM · Whonix, C Code, sclockadj, sdwdate

Feb 10 2022

Patrick updated the task description for T930: whonix.SdwdateStatus service starts VMs that were killed.
Feb 10 2022, 6:22 PM · sdwdate-gui, Whonix
Patrick updated the task description for T930: whonix.SdwdateStatus service starts VMs that were killed.
Feb 10 2022, 6:20 PM · sdwdate-gui, Whonix
Patrick updated the task description for T930: whonix.SdwdateStatus service starts VMs that were killed.
Feb 10 2022, 6:19 PM · sdwdate-gui, Whonix

Jan 1 2022

Patrick updated the task description for T930: whonix.SdwdateStatus service starts VMs that were killed.
Jan 1 2022, 11:12 AM · sdwdate-gui, Whonix
Patrick updated the task description for T930: whonix.SdwdateStatus service starts VMs that were killed.
Jan 1 2022, 11:03 AM · sdwdate-gui, Whonix
Patrick updated the task description for T930: whonix.SdwdateStatus service starts VMs that were killed.
Jan 1 2022, 10:57 AM · sdwdate-gui, Whonix

Dec 31 2021

Patrick updated the task description for T930: whonix.SdwdateStatus service starts VMs that were killed.
Dec 31 2021, 12:54 PM · sdwdate-gui, Whonix

Dec 15 2021

Patrick added a comment to T984: convert /etc/sysctl.d to /etc/default/grub.d kernel Linux boot cmdline.

Is this still reuqired since we also have early sysctl loading during initramfs?

Dec 15 2021, 10:50 AM · Whonix, Debian version 11 codename Bullseye
Patrick closed T985: consider post Whonix News that recommends VirtualBox users reducing number of virtual CPUs to 3 as Wontfix.
Dec 15 2021, 10:48 AM · Whonix 15, Whonix, VirtualBox

Dec 11 2021

Patrick added a comment to T930: whonix.SdwdateStatus service starts VMs that were killed.

Funding available. Anyone up to implement this?

Dec 11 2021, 1:48 PM · sdwdate-gui, Whonix

Dec 9 2021

Patrick closed T958: Write VirtualBox Screen Resolution Bug Report as Resolved.
Dec 9 2021, 6:10 PM · C Code, upstream, bug, Whonix 15, VirtualBox, Whonix
Patrick closed T933: fix offline documentation - pdfbook as Invalid.

No longer using this extension. Alternatives here:
https://www.whonix.org/wiki/Offline_Documentation

Dec 9 2021, 2:49 PM · website, Whonix
Patrick closed T843: unsubscribing to whonix mailing list sending empty message as Wontfix.

No mailing list at the moment. Deprecating this issue tracker. Can be re-considered in the future.

Dec 9 2021, 2:47 PM · website, Whonix
Patrick closed T932: fix Git-Mediawiki whonix-wiki-backup as Resolved.
Dec 9 2021, 2:46 PM · Whonix, website
Patrick closed T987: offer rsync over SSH or TLS for download.whonix.org as Resolved.

rsync over TLS or even onion is implemented for a long time already and documented here:
https://www.whonix.org/wiki/Hosting_a_Mirror

Dec 9 2021, 2:46 PM · server-ssh-access-required, Whonix
Patrick closed T917: whonix.org server SSL settings enhancement as Resolved.

This was done a long time ago.

Dec 9 2021, 2:45 PM · website, server-ssh-access-required, Whonix, whonix.org server admin

Nov 7 2021

vajinadaraltma updated vajinadaraltma.
Nov 7 2021, 10:32 AM

Oct 15 2021

Patrick closed T818: simplify tb-starter function tb_detect_starter_bin as Invalid.

Not possible because of above issue.

Oct 15 2021, 5:34 PM · Whonix, Whonix 16, tb-starter

Sep 8 2021

Patrick closed T911: xfce theming as Resolved.
Sep 8 2021, 3:10 PM · whonix-xfce-desktop-config, Whonix, Whonix 15
Patrick closed T961: fix USB auto mounting bug / document as Resolved.

https://forums.whonix.org/t/disk-usb-automount-in-kicksecure/8728/31

Sep 8 2021, 3:08 PM · research, bug, Whonix, Whonix 15
Patrick closed T953: extrepo - safely adding repos as Resolved.
Sep 8 2021, 3:02 PM · Whonix 15, Whonix
Patrick closed T957: slow shutdown bug as Resolved.

Cannot reproduce anymore in Whonix for VirtualBox.

Sep 8 2021, 2:51 PM · bug, Whonix, Whonix 15

Aug 9 2021

Patrick added a comment to T509: Consider nftables / Berkeley Packet Filter (BPF) as a replacement for iptables.
In T509#20232, @ak88 wrote:

Any updates on this?

Aug 9 2021, 7:13 PM · iptables, vpn-firewall, whonix-ws-firewall, whonix-gw-firewall, Whonix, refactoring, research
ak88 added a comment to T509: Consider nftables / Berkeley Packet Filter (BPF) as a replacement for iptables.

Any updates on this?

Aug 9 2021, 5:22 PM · iptables, vpn-firewall, whonix-ws-firewall, whonix-gw-firewall, Whonix, refactoring, research

Jun 24 2021

Patrick closed T868: mediawiki fixes #2 as Invalid.

migrated to https://forums.whonix.org/t/mediawiki-css-fixes/11874

Jun 24 2021, 9:42 PM · website, Whonix
Patrick closed T964: mediawiki fixes #3 as Invalid.

migrated to https://forums.whonix.org/t/mediawiki-css-fixes/11874

Jun 24 2021, 9:42 PM · Whonix, website
Patrick updated the task description for T964: mediawiki fixes #3.
Jun 24 2021, 9:35 PM · Whonix, website

May 7 2021

Patrick defrocked mycobee.
May 7 2021, 6:06 AM
Patrick defrocked 0brand.
May 7 2021, 6:05 AM
Patrick defrocked mig5.
May 7 2021, 6:05 AM

Mar 21 2021

Patrick added a comment to T993: improve Windows Hosts / macOS wiki mentions.
In T993#20220, @Patrick wrote:

I don't see what else can be done here. This statement is limited to only what was said in this ticket.

Mar 21 2021, 11:20 AM · Whonix, Whonix 15, user documentation
Patrick closed T993: improve Windows Hosts / macOS wiki mentions as Resolved.

I don't see what else can be done here. This statement is limited to only what was said in this ticket.

Mar 21 2021, 11:20 AM · Whonix, Whonix 15, user documentation

Mar 20 2021

Patrick updated the task description for T993: improve Windows Hosts / macOS wiki mentions.
Mar 20 2021, 2:00 PM · Whonix, Whonix 15, user documentation
Patrick updated the task description for T993: improve Windows Hosts / macOS wiki mentions.
Mar 20 2021, 1:58 PM · Whonix, Whonix 15, user documentation
Patrick updated the task description for T993: improve Windows Hosts / macOS wiki mentions.
Mar 20 2021, 1:57 PM · Whonix, Whonix 15, user documentation

Jan 24 2021

Patrick closed T1001: Updates proxy check fails in whonix-ws-15 as Resolved.

Btw this issue tracker is being phased out:
https://www.whonix.org/wiki/Reporting_Bugs#Issue_Tracker

Jan 24 2021, 11:08 AM · bug, Whonix, Whonix 15

Jan 12 2021

Patrick added a comment to T533: iptables block network access until sdwdate succeeded.

I am not sure sdwdate-gui would be a strong enough notification if networking was actually blocked if sdwdate did not succeed yet.

Jan 12 2021, 7:51 AM · Whonix, usability, whonix-ws-firewall, whonix-gw-firewall, iptables, python, security, enhancement, sdwdate-gui, sdwdate
Patrick updated the task description for T533: iptables block network access until sdwdate succeeded.
Jan 12 2021, 3:53 AM · Whonix, usability, whonix-ws-firewall, whonix-gw-firewall, iptables, python, security, enhancement, sdwdate-gui, sdwdate

Jan 9 2021

Patrick closed T133: url_to_unxtime https support, a subtask of T132: port sdwdate to url_to_unixtime, as Resolved.
Jan 9 2021, 2:48 PM · Whonix 10, sdwdate, Whonix
Patrick closed T133: url_to_unxtime https support as Resolved.
Jan 9 2021, 2:48 PM · python, sdwdate, Whonix
Patrick added a comment to T133: url_to_unxtime https support.

This was implemented. Now using python3 requests.

Jan 9 2021, 2:47 PM · python, sdwdate, Whonix
Patrick closed T916: improve sdwdate connectivity check as Resolved.

No longer required. Was implemented through te_pe_tb_check enhancements.

Jan 9 2021, 2:34 PM · whonixcheck, sdwdate-gui, Whonix, sdwdate
Patrick added a comment to T1001: Updates proxy check fails in whonix-ws-15.

https://gitlab.com/whonix/qubes-whonix/-/commit/53ff72ab6ce59cb2c98401fd701ae782ca100e37

Jan 9 2021, 6:43 AM · bug, Whonix, Whonix 15

Jan 8 2021

marmarek added a comment to T1001: Updates proxy check fails in whonix-ws-15.

I've found why sudo asked for password, it wasn't related to security-misc script mentioned earlier. And should be fixed in newer qubes-core-agent package.

Jan 8 2021, 2:28 PM · bug, Whonix, Whonix 15

Jan 5 2021

marmarek added a comment to T1001: Updates proxy check fails in whonix-ws-15.

/usr/lib/qubes-whonix/init/torified-updates-proxy-check is currently only started by /lib/systemd/system/qubes-whonix-torified-updates-proxy-check.service.

Wondering why this is happening. When root uses sudo, pam shouldn't even be involved.

Jan 5 2021, 5:54 PM · bug, Whonix, Whonix 15
Patrick added a comment to T1001: Updates proxy check fails in whonix-ws-15.

/usr/lib/qubes-whonix/init/torified-updates-proxy-check is currently only started by /lib/systemd/system/qubes-whonix-torified-updates-proxy-check.service.

Jan 5 2021, 6:07 AM · bug, Whonix, Whonix 15
marmarek added a project to T1001: Updates proxy check fails in whonix-ws-15: bug.
Jan 5 2021, 5:03 AM · bug, Whonix, Whonix 15
marmarek created T1001: Updates proxy check fails in whonix-ws-15.
Jan 5 2021, 5:03 AM · bug, Whonix, Whonix 15

Dec 9 2020

SimonSelg updated SimonSelg.
Dec 9 2020, 4:06 PM

Oct 26 2020

Patrick updated the task description for T689: use whonixcheck Whonix News to count Whonix users.
Oct 26 2020, 8:54 PM · Whonix 14, Whonix, whonixcheck
Patrick added a comment to T689: use whonixcheck Whonix News to count Whonix users.

documented here:
https://www.whonix.org/wiki/Whonixcheck_Hardening#Prevent_Downloading_Whonix_.E2.84.A2_News_and_Whonix_.E2.84.A2_User_Census_Counting

Oct 26 2020, 8:53 PM · Whonix 14, Whonix, whonixcheck

Sep 28 2020

Patrick closed T950: set kernel.printk sysctl to prevent kernel info leaks as Resolved.

Looks all good and quite in Whonix 15.0.1.5.1.

Sep 28 2020, 2:32 PM · Debian version 11 codename Bullseye, Whonix 15, security-misc, Whonix

Aug 31 2020

Patrick closed T1000: Add Wasabi Bitcoin wallet as Invalid.

We don't use this tracker for new feature requests anymore either as per:
https://www.whonix.org/wiki/Reporting_Bugs

Aug 31 2020, 10:38 AM · Whonix

Aug 30 2020

ratpoison4 created T1000: Add Wasabi Bitcoin wallet.
Aug 30 2020, 2:33 PM · Whonix

Aug 23 2020

sanyo added a comment to T998: Whonix without systemD.

It is important to understand, that systemD is actually much more than simply an init system:

Aug 23 2020, 12:56 PM · Whonix

Aug 13 2020

Patrick updated the task description for T540: Advanced Attacks Meta Ticket.
Aug 13 2020, 8:33 AM · VirtualBox, KVM, Qubes, security, research, Whonix
Patrick closed T542: Keyboard/Mouse Fingerprinting Defense as Resolved.

Shipping kloak in Whonix stable for a few releases already.

Aug 13 2020, 8:32 AM · security, Whonix
Patrick closed T542: Keyboard/Mouse Fingerprinting Defense, a subtask of T540: Advanced Attacks Meta Ticket, as Resolved.
Aug 13 2020, 8:32 AM · VirtualBox, KVM, Qubes, security, research, Whonix

Aug 12 2020

HulaHoop closed T530: CPU-induced latency Covert Channel Countermeasures as Invalid.

After running a bunch of tcp ping tests, the conclusion is this attack
is not really effective against TCP like ICMP. The latency is much lower
for TCP pings and though it slightly decreases with cpu stress it is not
consistent. Reloading pages in TBB with cpu stress
on/off does not impact latency readings while doing so with tc
attached has massive latency foot prints - implying it will ironically make such attacks much easier in addition to degrading performance.

Aug 12 2020, 4:30 PM · virtualizer, VMware, VirtualBox, KVM, Qubes, security, research, Whonix
HulaHoop closed T530: CPU-induced latency Covert Channel Countermeasures, a subtask of T540: Advanced Attacks Meta Ticket, as Invalid.
Aug 12 2020, 4:30 PM · VirtualBox, KVM, Qubes, security, research, Whonix

Aug 7 2020

HulaHoop added a comment to T530: CPU-induced latency Covert Channel Countermeasures.

Cyrus recommends adding delays per packet to disrupt inter-packet patterns that remain. The command can be fine tuned as such:

Aug 7 2020, 4:54 PM · virtualizer, VMware, VirtualBox, KVM, Qubes, security, research, Whonix

Aug 1 2020

HulaHoop added a comment to T530: CPU-induced latency Covert Channel Countermeasures.

The good news is I think I've figured out the equivalent tc-netem command looking the slot parameter in the manual:

Aug 1 2020, 3:42 PM · virtualizer, VMware, VirtualBox, KVM, Qubes, security, research, Whonix

Jul 23 2020

Patrick closed T999: Can't build Whonix from source as Invalid.

Building on anything other than Debian buster is unsupported.

Jul 23 2020, 5:08 PM · Whonix
el-cpu created T999: Can't build Whonix from source.
Jul 23 2020, 4:56 PM · Whonix
Patrick added a comment to T996: Readying for Tor Browser 9.5 (June 2).

553 Unable to store creds for

Did you set ClientOnionAuthDir in torrc (to a directory with "private
enough" permissions)?

Rusty

Jul 23 2020, 11:27 AM · Whonix 15, anon-gw-anonymizer-config, Whonix

Jul 7 2020

sanyo added a comment to T998: Whonix without systemD.

A few more questions:

Jul 7 2020, 8:23 PM · Whonix
sanyo added a comment to T998: Whonix without systemD.

Btw, Devuan is almost the same Debian with systemD removed from it.
Devuan even uses the same Debian binary repository with a few substitutions/replacements by its own Devuan packages just to eliminate nasty systemD.

Jul 7 2020, 6:05 PM · Whonix
sanyo updated sanyo.
Jul 7 2020, 5:50 PM
sanyo updated sanyo.
Jul 7 2020, 5:49 PM
Patrick added a comment to T998: Whonix without systemD.
In T998#20144, @sanyo wrote:

May I know, what do you think about Whonix vs OpenBSD in terms of security for a headless server without any GUI?

Jul 7 2020, 9:53 AM · Whonix

Jul 6 2020

sanyo added a comment to T998: Whonix without systemD.

May I know, what do you think about Whonix vs OpenBSD in terms of security for a headless server without any GUI?

Jul 6 2020, 6:29 PM · Whonix
sanyo added a comment to T998: Whonix without systemD.

I guess it shall not be any harder to port Whonix to Devuan than porting it to original Debian.

Jul 6 2020, 6:26 PM · Whonix
Patrick closed T998: Whonix without systemD as Wontfix.

There's no manual.

Jul 6 2020, 10:01 AM · Whonix

Jul 5 2020

sanyo updated the task description for T998: Whonix without systemD.
Jul 5 2020, 6:36 PM · Whonix
sanyo updated the task description for T998: Whonix without systemD.
Jul 5 2020, 6:34 PM · Whonix
sanyo triaged T998: Whonix without systemD as Wishlist priority.
Jul 5 2020, 6:33 PM · Whonix

Jun 25 2020

Patrick added a comment to T997: All pluggable transports stopped working after 11-06-2020 .

Thanks for the report.

Jun 25 2020, 9:29 AM · Whonix
Patrick triaged T997: All pluggable transports stopped working after 11-06-2020 as Normal priority.
Jun 25 2020, 9:29 AM · Whonix

Jun 24 2020

leh6r0 added a comment to T997: All pluggable transports stopped working after 11-06-2020 .

More useful information from my tests: When I setup obfs4 using the Anon-Connection-Wizard the previous obfs4 that I used worked fine. Unfortunately I can't setup snowflake from it.

Jun 24 2020, 11:51 AM · Whonix

Jun 23 2020

leh6r0 renamed T997: All pluggable transports stopped working after 11-06-2020 from Snowflake stopped working after 11-06-2020 to All pluggable transports stopped working after 11-06-2020 .
Jun 23 2020, 8:55 AM · Whonix

Jun 21 2020

leh6r0 added a comment to T997: All pluggable transports stopped working after 11-06-2020 .

Don't know if this is indicative of anything but after I add -log snowflake-client.log -log-to-state-dir at the end of the ClientTransportPlugin snowflake line in /usr/local/etc/torrc.d/50_user.conf I obtain the following error:

Jun 21 2020, 8:34 AM · Whonix
leh6r0 created T997: All pluggable transports stopped working after 11-06-2020 .
Jun 21 2020, 8:21 AM · Whonix

Jun 19 2020

Patrick added a comment to T996: Readying for Tor Browser 9.5 (June 2).

Tor Browser onion authentication prompt:
https://blog.torproject.org/sites/default/files/inline-images/onion-auth%402x.png

Jun 19 2020, 8:48 AM · Whonix 15, anon-gw-anonymizer-config, Whonix

Jun 18 2020

HulaHoop added a comment to T996: Readying for Tor Browser 9.5 (June 2).

What Tor related apps are broken without support for this?

Jun 18 2020, 6:03 PM · Whonix 15, anon-gw-anonymizer-config, Whonix
Patrick raised the priority of T800: Migrating from Github from Wishlist to High.

Alternative to github.com now needed.

Jun 18 2020, 2:38 PM · Whonix
Patrick added a comment to T996: Readying for Tor Browser 9.5 (June 2).

Maybe this is bound per connection similar to ephemeral Tor onion services? In that case, other VMs couldn't re-use it.

Jun 18 2020, 2:38 PM · Whonix 15, anon-gw-anonymizer-config, Whonix
rustybird added a comment to T996: Readying for Tor Browser 9.5 (June 2).

https://github.com/adrelanos/anon-gw-anonymizer-config/commit/97ff68a6c49ecef3e79ab10e1a930a4f5e13198d#commitcomment-39671373

Jun 18 2020, 2:38 PM · Whonix 15, anon-gw-anonymizer-config, Whonix
Patrick closed T996: Readying for Tor Browser 9.5 (June 2) as Resolved.

onion_client_auth_add Flags=Permanent fails with 553 Unable to store creds for

Jun 18 2020, 2:38 PM · Whonix 15, anon-gw-anonymizer-config, Whonix
Patrick updated subscribers of T996: Readying for Tor Browser 9.5 (June 2).
Jun 18 2020, 2:38 PM · Whonix 15, anon-gw-anonymizer-config, Whonix
Patrick updated the task description for T996: Readying for Tor Browser 9.5 (June 2).
Jun 18 2020, 2:38 PM · Whonix 15, anon-gw-anonymizer-config, Whonix
Patrick closed T800: Migrating from Github as Resolved.

https://forums.whonix.org/t/whonix-moving-from-github-to-gitlab/9676

Jun 18 2020, 2:38 PM · Whonix
rustybird added a comment to T996: Readying for Tor Browser 9.5 (June 2).

Maybe this is bound per connection similar to ephemeral Tor onion services?

Jun 18 2020, 2:38 PM · Whonix 15, anon-gw-anonymizer-config, Whonix
Patrick changed the status of T996: Readying for Tor Browser 9.5 (June 2) from Open to testing-in-next-build-required.

Update Tor to 0.4.3.5

Jun 18 2020, 2:38 PM · Whonix 15, anon-gw-anonymizer-config, Whonix