I think hiding the clock is a bad idea as a user may want to manually run sdwdate to adjust it if it's out of whack before initiating internet traffic. (This is on non-Qubes versions lacking auto time adjust)

iry (iry):

iry added a comment.

It is still unclear to me if there is any other known and unknown ways to detect the fonts installed in Whonix by other applications.

In T72#15372, @Patrick wrote:

Does Qubes have any thoughts on internationalization? How to get it localized into several native languages? There is dom0 window manager, Debian template, Fedora template. @marmarek

Whonix is only a small piece in the bigger picture of Qubes internationalization, which would then follow how it is implemented for Debian templates.

It is still unclear to me if there is any other known and unknown ways to detect the fonts installed in Whonix by other applications.

Browser tests are problematic generally.

In T72#15382, @iry wrote:

Tor Browser has a feature effectively limit that, no? Or do you mean
localized Tor Browser's for non-English have different fonts? That seems
plausible, but is it a fact?

Please educate me if I am wrong. The reason I draw this conclusion is because when doing the fingerprint test on ip-check.info , there is a section called "Do you see strange symbols here? If yes, your fonts are readable!"

Tor Browser has a feature effectively limit that, no? Or do you mean
localized Tor Browser's for non-English have different fonts? That seems
plausible, but is it a fact?

iry (iry):

iry added a comment.

Another disadvantage for a)  and b):

Tor Browser can reveal what fonts have been installed in the system when JavaScript is enabled, which can be used as an effective fingerprint against users.

Another disadvantage for a) and b):

What are the privacy implications of this? @HulaHoop

Does Qubes have any thoughts on internationalization? How to get it localized into several native languages? There is dom0 window manager, Debian template, Fedora template. @marmarek

The first step for us is to localize Whonix?

status update:

Not clear what's missing.

Could anyone please help me to test if these two pull request will be enough to Integrate anon-connection-wizard into whonix-setup-wizard?

Is there anything left to do?

Merged.

Thank you so mcuh for your feedback and instructions!

iry (iry):

Notice that I have no idea how to find the path to torrc.example in graphical gateway. Could anyone help me to check if the information in block quote is correct or not please?

@iry I'm fine with those instructions. You're right to point out that replacing the whole thing (and making it automated as possible) is the right answer. To open torrc.example in graphical gateway, it is indeed how you wrote it.

I'm hoping he can put in better text about how to edit the torrc file for bridges (instead of "go do it").

iry is handling the changing the the whonixsetup text. I'm hoping he can put in better text about how to edit the torrc file for bridges (instead of "go do it").

Anything left to do here?

No, because justification is unfortunately still tied to Germany, explaining the disclaimer in German layman's terms in detail is my best guess on how to make it legally effective.

(but should obfs4 have the "managed" line?).

It gives a link, but there is a better link: https://bridges.torproject.org/options

whonixsetup, when selecting "tor is censored in my area" says "Go add bridges to torrc and come back". The advice " Start -> Applications -> torrc" needs to be changed to Start -> Applications -> System -> torrc

The "mixed message" is: "You should know English, but maybe we'll help you in your native language. At least for now. Maybe not later."

I can't remember: is host -> guest clipboard sharing enabled by default in the gateway ova?

ENG. Whonix is in English. Do not use Whonix without excellent knowledge of the English language. Misunderstandings have consequences.

There is a lot great news going on with anon-connection-wizard recently. iry is our GSoC student working on anon-connection-wizard. Pointed iry to this ticket.

Thanks! Merged. Works for me.

https://github.com/joysn/whonix-setup-wizard/commit/4864784435e5da96369167ed7e8f214ceceb3fc3

One mistake fixed.

This unfortunately has quite a chance to have messed up an argument an introduce a regression.

Great work! Merged and added some packaging / python3 related fixes on top.

https://github.com/joysn/whonix-setup-wizard/commit/2b0949b850c16bc18c74d8128622ac3adc139027
https://github.com/joysn/whonix-setup-wizard/commit/855e836f80712a6dae078d52862ef2529752b4a1

Apparently just a dependency issue. Fixed in 13.0.0.1.4.

Excellent! All merged.

whonix-setup-wizard, 1 change required, to be merged

So we are done with

From guimessages - 1 change required and it done
https://github.com/joysn/python-guimessages

From sdwdate-gui

br_add - nothing to add
striphtml nothing to add
generic_gui_message - done
tb_updater_gui - done

A few more projects are involved, where this is TODO. Btw there are all our components where python is involved.

Is this something you would like to work on? @goldstein

Good point.

I don't think we should encourage users to set time zones because it can give away their geo location both for an adversary in the VM and for timestamp leaks by applications in the WS.

Yes, they needed to be rebuild on jessie.

tb-default-browser... 'diff'ed /var/lib/dpkg/status before and after installation. Only difference...

No idea why this is happening.

Fixed in Whonix 11.0.0.2.0-developers-only.

Tested restart instead of start reload before your post, working. Could not check if that solves the issue at first boot in Whonix Gateway, (tor active, exited) but I guess it does, because a manual sudo service tor restart works.

fix 'Tor fails after reload related to torrc DisableNetwork setting issue' by only restarting Tor, no longer trying to reload Tor - https://phabricator.whonix.org/T320:
https://github.com/Whonix/whonix-setup-wizard/commit/d5aacf5c58d5aad1c158e589b43d0dd5ccc9cc3f

Done in whonixsetup,
fix 'Tor fails after reload related to torrc DisableNetwork setting issue' by only restarting Tor, no longer trying to reload Tor - https://phabricator.whonix.org/T320
https://github.com/Whonix/whonixsetup/commit/bc8cb713430a655eb3bb8dd3f8397babce1b6d3e

In T320#4855, @Patrick wrote:

Reported a bug upstream.
Tor dies on reload when swichting to 'DisableNetwork 0' when using 'DnsPort 127.0.0.1:53':
https://trac.torproject.org/projects/tor/ticket/16161

Until upstream fixes that bug and until their fix landed in deb.torproject.org, which will take a while... Our options are:

Reported a bug upstream.
Tor dies on reload when swichting to 'DisableNetwork 0' when using 'DnsPort 127.0.0.1:53':
https://trac.torproject.org/projects/tor/ticket/16161

Updated ticket description with instructions on how to reproduce this issue.

Resolved with qubes-whonix unreleased 9.6.9 and 10