Hello,
I would like to construct disposable sys-whonix net vm.
My purpose is using both of plain-tor and vpn-over-tor simultaneously. For this purpose, I feel it’s better to use two separate net vms.
I’ve already experienced to make a disposable sys-net by following this instruction
I would appreciate your help. Thanks…
Possible solution
To obtain disposbale sys-whonix, do the same process to make a disposable netvm, but creating DispVM under whonix-gateway template.
While trying to answer another thread I’ve come upon this one so I’ll post the warning here as well in case someone comes across this in a web search.
sys-whonix should not be disposable. See the Warnings section on
Specifically,
Ephemeral Whonix-Gateway ProxyVMs Using Disposables for both the Whonix Gateway and Workstation in Qubes does not increase security without any corresponding privacy downside, for the following reasons: [17] [18] [19]
- Disposables are not amnesic. In practice this means traces of their activity can be left on storage or in memory, making them vulnerable to forensic operations. [20]
- Using a Disposable for the Whonix-Gateway results in non-persistent entry guards to the Tor network; behavior unlike the default configurations for Whonix, Tor, and the Tor Browser Bundle. Mathematically speaking, end-to-end correlation attacks are more likely to succeed when a user chooses many random entry and exit points in the Tor network, rather than semi-permanent entry guards which are only rotated every few months. [21] [22]
- See additional footnote. [23]
Thank you.
oh, boy. Whonix is such a crap and people using it for anonymity makes me sad. Of course users should make their sys-tor (or sys-whonix for that matter) vms disposable, and yes, they should configure their Tor guards.
Maybe I take this as motivation to finally put up my sys-tor salt and torrc here.
I would appreciate it.
What is your opinion about The grandest obstacle to making anonymous web browsing possible in QubesOS
Do you know how to make tor browser anonymously inside qubes ?
I only skimmed it. I read it as a mix of unfounded claims and a solution to a problem that may not exist.
What makes you think that Tor Browser provides less anonymity when run inside Qubes compared to outside of Qubes, for any reasonable definition of anonymity?
First I want make sure I am not expert, I am privacy and OPSEC enthusiastic.
My claims was regarding the events buffering do not cover mouse jitter.
I am here just to learn.
So that we don’t further hijack this thread (and to answer the OP’s question): see Sys-tor: Tor in Qubes (plain & simple) for how to create a disposable sys-whonix replacement.
I don’t think an online forum in general (and this thread in particular) is the right place for elaborating my view. So I’d give you the high-level gist and leave it at that, if that’s ok with you. I have zero trust in the technical ability and the moral ethos of Whonix’ lead “developer”, which is problematic in a security-sensitive area (to put it mildly).
I don’t think an online forum in general (and this thread in particular) is the right place for elaborating my view.
I see nothing wrong with elaborating your view on Whonix as a product as it is shipped with Qubes which makes it a part of it.
As for anything else that you feel inappropriate to share publicly, do you think you can PM me the details? I am always open to evidence.
Maybe this is of interest for you (search for ‘core-tor’)