Whonix v15 - Anonymous Operating System
Whonix
is an operating system focused on anonymity, privacy and security. It’s
based on the Tor anonymity network, Debian GNU/Linux and security by
isolation. DNS leaks are impossible, and not even malware with root
privileges can find out the user’s real IP.
Whonix consists of two parts: One solely runs Tor and acts as a
gateway, which we call Whonix-Gateway. The other, which we call
Whonix-Workstation, is on a completely isolated network. Only
connections through Tor are possible.
After approximately one year of development, the Whonix Project is proud to announce the release of Whonix 15.
Whonix 15 is based on the Debian
buster (Debian 10)
distribution. This means users have access to many new software
packages in concert with existing packages, such as a modern branch of
GNuPG, and more.Major Changes and New Features
- port Whonix from Debian stretch to Debian buster 5
- kernel hardening 7
- Blacklist uncommon network protocols 6
- systemd unit sandboxing 5
- improve entropy collection through extensive research and installation by default of jitterentropy-rngd 3
- research implications of spectre / meltdown / retpoline / L1 Terminal Fault (L1TF) 5 vs Whonix
- Non-Qubes-Whonix: kloak - Keystroke Anonymization Tool 5
- Non-Qubes-Whonix: Whonix Live 3 / Live Mode Indicator / grub-live / grub-default-live 1
- Non-Qubes-Whonix: switch desktop environment from KDE to XFCE (poll 2) (other desktop environments 3)
- Non-Qubes-Whonix: reduced image size using zerofree 2
- Whonix VirtualBox: CLI version 2 (Whonix ™ with CLI is a version suited for advanced users – those who want Whonix ™ without a GUI.)
- Whonix VirtualBox: unified ova downloads 5
- Qubes-Whonix: change Qubes-Whonix default applications from KDE-ish to XFCE-ish 5
- Qubes-Whonix: simplify installation of VM kernel 2 by installing the same recommended Qubes packages as Qubes Debian packages (source 1 (source 2)
- Whonix KVM: serial console support 3
- update sdwdate time sources 1
- List of processed Whonix 15 tickets
- arm64 / RPi 5 port
- install by default zulucrypt, qtox, onionshare, keepassxc, firejail
- new usability wrappers: scurlget 1, curlget, pwchange, upgrade-nonroot 1, apt-get-noninteractive, apt-get-update-plus
- remove mixmaster, ricochet since dead upstream
- support for Bisq - The P2P Exchange Network 4
- port build script to cowbuilder; build packages in chroot and use mmdebstrap for better security
- add UsrMerge compatibility
Whonix v15 - Anonymous Operating System
Reviewed by Zion3R
on
8:52 AM
Rating:
Reviewed by Zion3R
on
8:52 AM
Rating:
