Page MenuHomePhabricator

anon-mixmasterProject
ActivePublic

Members (1)

Watchers

  • This project does not have any watchers.
  • View All

Recent Activity

Apr 6 2019

Patrick added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

mixmaster said to be dead upstream and permanently removed from Debian

Apr 6 2019, 6:06 PM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix
Patrick closed T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users as Invalid.

mixmaster is unavaiable in Debian version 10 codename Buster.

Apr 6 2019, 2:57 PM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix

Apr 4 2019

Patrick added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

Can you think of any other app besides a browser that parses JS/Remote code that can manipulate it into requesting those particular addresses?

Apr 4 2019, 6:16 PM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix

Mar 26 2019

HulaHoop added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

Can you think of any other app besides a browser that parses JS/Remote code that can manipulate it into requesting those particular addresses?

Mar 26 2019, 5:04 PM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix
Patrick added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

But this isn't a Tor Browser only thing. Applies to any application, specifically those using system default networking (Tor's TransPort).

Mar 26 2019, 12:00 PM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix

Mar 25 2019

HulaHoop added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

On a second thought I wonder if this is still a Whonix specific fingerprinting vector. Any DNS request for 172.24.0.0 would resolve to bshc44ac76q3kskw.onion. Not something a remote website could exploit?

Mar 25 2019, 7:39 PM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix
Patrick added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

https://github.com/Whonix/anon-gw-anonymizer-config/commit/57e3976d9726fc636741865ee90d1bb2bbf3dfad

Mar 25 2019, 6:43 AM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix
Patrick added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

On a second thought I wonder if this is still a Whonix specific fingerprinting vector. Any DNS request for 172.24.0.0 would resolve to bshc44ac76q3kskw.onion. Not something a remote website could exploit?

Mar 25 2019, 6:42 AM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix

Mar 24 2019

HulaHoop added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

@Patrick Now we have to figure out how or if we can use the version in sid on Buster since it is no longer available in stable-next after the freeze. Let me know what you think and I will open a ticket for it is doable.

Mar 24 2019, 11:35 PM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix
HulaHoop added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

https://github.com/Whonix/anon-gw-anonymizer-config/pull/17/commits/5351bd4765476e9522c77cea5a8e30e6c4f94083

Mar 24 2019, 11:33 PM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix

Feb 18 2019

Patrick added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

Yes.

Feb 18 2019, 9:47 PM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix
HulaHoop added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

Other imporvements in this thread such as functioning SMTP gateways are also part of this ticket:

Feb 18 2019, 6:01 PM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix

Feb 2 2019

Patrick added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

Sounds good!

Feb 2 2019, 8:19 AM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix
HulaHoop added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

Middle of the range solution. How does this sound? Confirmed it falls within the private address CIDR:

Feb 2 2019, 2:36 AM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix

Jan 31 2019

Patrick added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

My advice is to use a private address range reserved for this purpose by IANA. These will never be used in the future by anyone. Sine we use 10.x.x.x and moved away from 192.x.x.x, this leaves 172.x.x.x

172.16.0.0 – 172.31.255.255

https://en.wikipedia.org/wiki/Private_network

Jan 31 2019, 11:15 AM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix
Patrick changed the status of T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users from testing-in-next-build-required to Open.
Jan 31 2019, 11:06 AM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix

Dec 9 2018

Patrick lowered the priority of T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users from High to Normal.
Dec 9 2018, 5:52 AM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix

Dec 4 2018

HulaHoop added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

My advice is to use a private address range reserved for this purpose by IANA. These will never be used in the future by anyone. Sine we use 10.x.x.x and moved away from 192.x.x.x, this leaves 172.x.x.x

Dec 4 2018, 11:13 PM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix

Nov 28 2018

Patrick changed the status of T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users from Open to testing-in-next-build-required.

Removed for now.

Nov 28 2018, 5:28 AM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix
Patrick added a project to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users: anon-gw-anonymizer-config.
Nov 28 2018, 5:27 AM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix
Patrick renamed T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users from mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 are likely not what you want to remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.
Nov 28 2018, 5:26 AM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix

Nov 27 2018

nusenu added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

first rule: don't use public IP addresses that are not assigned to you

Nov 27 2018, 11:41 AM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix
Patrick added a comment to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users.

The rationale is making mixmaster work by default.

Nov 27 2018, 6:28 AM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix
Patrick added projects to T878: remove mapaddress entries in torrc for 1.1.1.1 and 2.2.2.2 since these allow fingerprinting Whonix users: anon-mixmaster, Whonix 15.
Nov 27 2018, 6:28 AM · anon-gw-anonymizer-config, Whonix 15, anon-mixmaster, Whonix

Apr 29 2016

Patrick closed T419: no longer write to home folder directly; use /etc/skel as Resolved.
Apr 29 2016, 5:00 AM · Whonix, whonix-initializer, Qubes, anon-torchat, whonix-base-files, anon-mixmaster, xchat-improved-privacy, anon-gpg-tweaks, Whonix 13

Apr 26 2016

Patrick changed the status of T419: no longer write to home folder directly; use /etc/skel from Open to Review.

https://github.com/Whonix/whonix-base-files/commit/7dca3e197a2dce1fae27363eb412ee63f54e0b27

Apr 26 2016, 9:20 PM · Whonix, whonix-initializer, Qubes, anon-torchat, whonix-base-files, anon-mixmaster, xchat-improved-privacy, anon-gpg-tweaks, Whonix 13
Patrick changed the status of T419: no longer write to home folder directly; use /etc/skel from Review to Open.

There is a problem with the script which runs as root - https://github.com/Whonix/whonix-base-files/blob/master/usr/lib/anon-base-files/first-boot-skel - with the following commands.

Apr 26 2016, 8:01 PM · Whonix, whonix-initializer, Qubes, anon-torchat, whonix-base-files, anon-mixmaster, xchat-improved-privacy, anon-gpg-tweaks, Whonix 13

Apr 21 2016

Patrick added a comment to T419: no longer write to home folder directly; use /etc/skel.

https://github.com/Whonix/whonix-base-files/commit/da56e3338e1eb802d956f0e55c6debd270cdfa3f
https://github.com/Whonix/whonix-base-files/commit/e87191e2ae8833cadad08d1949ab36198f9eb239
https://github.com/Whonix/qubes-whonix/commit/65fac1f6eb3fd0cfa1d5beb47b757ac4263a5537

Apr 21 2016, 9:42 PM · Whonix, whonix-initializer, Qubes, anon-torchat, whonix-base-files, anon-mixmaster, xchat-improved-privacy, anon-gpg-tweaks, Whonix 13

Jan 7 2016

Patrick added a comment to T419: no longer write to home folder directly; use /etc/skel.

first-boot-skel: hide needless output of diff in the logs
https://github.com/Whonix/whonix-base-files/commit/d3d7da44e1e0ca1d8059c202abefce7e1181ce16

Jan 7 2016, 10:55 PM · Whonix, whonix-initializer, Qubes, anon-torchat, whonix-base-files, anon-mixmaster, xchat-improved-privacy, anon-gpg-tweaks, Whonix 13
Patrick added a comment to T419: no longer write to home folder directly; use /etc/skel.

do not needlessly copy .bashrc.whonix-orig from skel to home
https://github.com/Whonix/whonix-base-files/commit/63ed2423f4b6303af32d1daa8affb3e5006e6837

Jan 7 2016, 10:52 PM · Whonix, whonix-initializer, Qubes, anon-torchat, whonix-base-files, anon-mixmaster, xchat-improved-privacy, anon-gpg-tweaks, Whonix 13
Patrick added a comment to T419: no longer write to home folder directly; use /etc/skel.
fix / code simplification
Jan 7 2016, 10:40 PM · Whonix, whonix-initializer, Qubes, anon-torchat, whonix-base-files, anon-mixmaster, xchat-improved-privacy, anon-gpg-tweaks, Whonix 13

Dec 10 2015

Patrick updated the task description for T419: no longer write to home folder directly; use /etc/skel.
Dec 10 2015, 9:35 PM · Whonix, whonix-initializer, Qubes, anon-torchat, whonix-base-files, anon-mixmaster, xchat-improved-privacy, anon-gpg-tweaks, Whonix 13
Patrick changed the status of T419: no longer write to home folder directly; use /etc/skel from Open to Review.
populate /home/user from /etc/skel at first boot
Dec 10 2015, 9:34 PM · Whonix, whonix-initializer, Qubes, anon-torchat, whonix-base-files, anon-mixmaster, xchat-improved-privacy, anon-gpg-tweaks, Whonix 13

Dec 3 2015

Patrick added a comment to T419: no longer write to home folder directly; use /etc/skel.

chmod 700 /etc/skel/.gnupg in postinst to prevent gpg permission warning:
https://github.com/Whonix/anon-gpg-tweaks/commit/55b727974acf10ed76ed99c84fa560260d36e540

Dec 3 2015, 10:54 PM · Whonix, whonix-initializer, Qubes, anon-torchat, whonix-base-files, anon-mixmaster, xchat-improved-privacy, anon-gpg-tweaks, Whonix 13
Patrick triaged T419: no longer write to home folder directly; use /etc/skel as Normal priority.
Dec 3 2015, 10:43 PM · Whonix, whonix-initializer, Qubes, anon-torchat, whonix-base-files, anon-mixmaster, xchat-improved-privacy, anon-gpg-tweaks, Whonix 13
Patrick added a comment to T419: no longer write to home folder directly; use /etc/skel.
no longer write to home folder directly; use /etc/skel;
Dec 3 2015, 10:33 PM · Whonix, whonix-initializer, Qubes, anon-torchat, whonix-base-files, anon-mixmaster, xchat-improved-privacy, anon-gpg-tweaks, Whonix 13
Patrick added a comment to T419: no longer write to home folder directly; use /etc/skel.
no longer write to home folder directly; use /etc/skel;
Dec 3 2015, 10:11 PM · Whonix, whonix-initializer, Qubes, anon-torchat, whonix-base-files, anon-mixmaster, xchat-improved-privacy, anon-gpg-tweaks, Whonix 13

Oct 17 2015

Patrick created T419: no longer write to home folder directly; use /etc/skel.
Oct 17 2015, 4:45 PM · Whonix, whonix-initializer, Qubes, anon-torchat, whonix-base-files, anon-mixmaster, xchat-improved-privacy, anon-gpg-tweaks, Whonix 13
Patrick created anon-mixmaster.
Oct 17 2015, 4:31 PM