<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">For those of you that have never used it Whonix is hardcore anonymous operating system, akin to quebes os. New version is out, should be fun to try!<div><br></div><div>We did a cryptoparty with Patrick back in early 2015.<br><div><br></div><div>-Tim <br><div><br>Begin forwarded message:<br><br></div><blockquote type="cite"><div><b>From:</b> Patrick Schleizer <<a href="mailto:patrick-mailinglists@whonix.org">patrick-mailinglists@whonix.org</a>><br><b>Date:</b> August 7, 2018 at 03:17:00 PDT<br><b>To:</b> <a href="mailto:tor-talk@lists.torproject.org">tor-talk@lists.torproject.org</a>, Whonix-devel <<a href="mailto:whonix-devel@whonix.org">whonix-devel@whonix.org</a>>, qubes-users <<a href="mailto:qubes-users@googlegroups.com">qubes-users@googlegroups.com</a>>, <a href="mailto:debian-derivatives@lists.debian.org">debian-derivatives@lists.debian.org</a>, <a href="mailto:full-disclosure@lists.grok.org.uk">full-disclosure@lists.grok.org.uk</a>, <a href="mailto:liberationtech@lists.stanford.edu">liberationtech@lists.stanford.edu</a><br><b>Subject:</b> <b>[liberationtech] Whonix 14 has been Released</b><br><b>Reply-To:</b> liberationtech <<a href="mailto:liberationtech@lists.stanford.edu">liberationtech@lists.stanford.edu</a>><br><br></div></blockquote><blockquote type="cite"><div><span>-----BEGIN PGP SIGNED MESSAGE-----</span><br><span>Hash: SHA512</span><br><span></span><br><span>After more than two years of development, the Whonix Project is proud</span><br><span>to announce the release of Whonix 14.</span><br><span></span><br><span>Whonix 14 is based on the Debian stretch (Debian 9) distribution which</span><br><span>was released in June 2017. This means users have access to many new</span><br><span>software packages in concert with existing packages such as a modern</span><br><span>branch of GNuPG, and more. [1][2][3]</span><br><span></span><br><span>**Major Changes and New Features**</span><br><span></span><br><span>Whonix 14 contains extensive security and usability improvements, new</span><br><span>features and bug fixes. For a detailed description of these and other</span><br><span>changes, please refer to the official release notes. [4]</span><br><span></span><br><span>* Rebased Whonix on **Debian stretch** (Debian 9).</span><br><span>* Whonix 14 is **64-bit** (amd64) only - 32-bit (i386) images will no</span><br><span>longer be built and made available for download. [5]</span><br><span>* The new **Anon Connection Wizard** [6] feature in Whonix simplifies</span><br><span>connections to the Tor network via a Tor bridge and/or a proxy.</span><br><span>* The Tor pluggable transport **meek_lite** [7] is now supported,</span><br><span>making it much easier to connect to the Tor network in heavily</span><br><span>censored areas, like China. [8]</span><br><span>* **Onioncircuits** are installed by default in Whonix. [9]</span><br><span>* Tails' **onion-grater** program has been implemented to enable</span><br><span>**OnionShare, Ricochet and Zeronet** compatibility with Whonix. [10]</span><br><span>* **Onion sources** are now preferred for Whonix updates/upgrades for</span><br><span>greater security.</span><br><span>* Reduced the size of the default, binary Whonix images by</span><br><span>approximately **35 per cent** using zerofree. [11] [12]</span><br><span>* **Updated Tor** to version 3.3.7 (stable) release to enable full v3</span><br><span>onion functionality for both hosting of onion services and access to</span><br><span>v3 onion addresses in Tor Browser.</span><br><span>* Created the **grub-live package** [13] which can run Whonix as a</span><br><span>**live system** on non-Qubes-Whonix platforms. [14]</span><br><span>* Corrected and hardened various **AppArmor profiles** to ensure the</span><br><span>correct functioning of Tor Browser, obfsproxy and other applications.</span><br><span></span><br><span></span><br><span>**Known Issues**</span><br><span></span><br><span>* Desktop shortcuts are no longer available in non-Qubes-Whonix.</span><br><span>* OnionShare is not installed by default in Whonix 14 as it is not in</span><br><span>the stretch repository. [15] It can still be manually installed by</span><br><span>following the Whonix wiki instructions [16] or building it from source</span><br><span>code. [17]</span><br><span>* Enabling seccomp (Sandbox 1) in /usr/local/etc/torrc.d/50_user.conf</span><br><span>causes the Tor process to crash if a Tor version lower than 0.3.3 is</span><br><span>used. [18] [19]</span><br><span></span><br><span></span><br><span>While there may be other issues that exist in this declared stable</span><br><span>release, every effort has been made to address major known problems.</span><br><span></span><br><span>Please report any other issues to us in the forums, after first</span><br><span>searching for whether it is already known.</span><br><span></span><br><span> <a href="https://www.whonix.org/wiki/Known_Issues">https://www.whonix.org/wiki/Known_Issues</a></span><br><span></span><br><span>**Download Whonix 14**</span><br><span></span><br><span>Whonix is cross-platform and can be installed on the Windows, macOS,</span><br><span>Linux or Qubes operating systems. Choose your operating system from</span><br><span>the link below and follow the instructions to install it.</span><br><span></span><br><span> <a href="https://www.whonix.org/download/">https://www.whonix.org/download/</a></span><br><span></span><br><span>**Upgrade to Whonix 14**</span><br><span></span><br><span>Current Whonix users (or those with 32-bit hardware) who would prefer</span><br><span>to upgrade their existing Whonix 13 platform should follow the upgrade</span><br><span>instructions below.</span><br><span></span><br><span> <a href="https://whonix.org/wiki/Upgrading_Whonix_13_to_Whonix_14">https://whonix.org/wiki/Upgrading_Whonix_13_to_Whonix_14</a></span><br><span></span><br><span>**What’s Next?**</span><br><span></span><br><span>Work on Whonix 15 is ongoing and interested users can refer to the</span><br><span>roadmap to see where Whonix is heading. [20]</span><br><span></span><br><span>Developer priorities are currently focused on easing the transition to</span><br><span>the next Debian release due in 2019 (“buster”; Debian 10) and</span><br><span>squashing existing bugs, rather than implementing new features.</span><br><span></span><br><span>We need your help and there are various ways to contribute to Whonix -</span><br><span>donating or investing your time will help the project immensely. Come</span><br><span>and talk with us! [21]</span><br><span></span><br><span>**References**</span><br><span></span><br><span>[1] <a href="https://www.debian.org/News/2017/20170617">https://www.debian.org/News/2017/20170617</a></span><br><span>[2] <a href="https://www.debian.org/releases/stable/amd64/release-notes/">https://www.debian.org/releases/stable/amd64/release-notes/</a></span><br><span>[3] <a href="https://www.debian.org/releases/stable/i386/release-notes/">https://www.debian.org/releases/stable/i386/release-notes/</a></span><br><span>[4] <a href="https://whonix.org/wiki/Whonix_Release_Notes#Whonix_14">https://whonix.org/wiki/Whonix_Release_Notes#Whonix_14</a></span><br><span>[5] Whonix 13 users with 32-bit systems can however upgrade their</span><br><span>platform by following the available wiki instructions, rather than</span><br><span>download new Whonix-WS and Whonix-GW images.</span><br><span>[6] <a href="https://whonix.org/wiki/Anon_Connection_Wizard">https://whonix.org/wiki/Anon_Connection_Wizard</a></span><br><span>[7] <a href="https://www.whonix.org/blog/meek_lite-whonix-14">https://www.whonix.org/blog/meek_lite-whonix-14</a></span><br><span>[8]</span><br><span><a href="https://github.com/Yawning/obfs4/commit/611205be681322883a4d73dd00fcb13c">https://github.com/Yawning/obfs4/commit/611205be681322883a4d73dd00fcb13c</a></span><br><span>4352fe53</span><br><span>[9] <a href="https://packages.debian.org/stretch/onioncircuits">https://packages.debian.org/stretch/onioncircuits</a></span><br><span>[10] <a href="https://phabricator.whonix.org/T657">https://phabricator.whonix.org/T657</a></span><br><span>[11] <a href="https://phabricator.whonix.org/T790">https://phabricator.whonix.org/T790</a></span><br><span>[12] VirtualBox .ova and libvirt qcow2 raw images. The Whonix-Gateway</span><br><span>is reduced from 1.7 GB to 1.1 GB, while the Whonix-Workstation is</span><br><span>reduced from 2 GB to 1.3 GB.</span><br><span>[13] <a href="https://whonix.org/wiki/Whonix_Live">https://whonix.org/wiki/Whonix_Live</a></span><br><span>[14] grub-live is optional and requires the user to first enable it</span><br><span>manually.</span><br><span>[15] <a href="https://packages.debian.org/search?searchon=names&keywords=onionsha">https://packages.debian.org/search?searchon=names&keywords=onionsha</a></span><br><span>re</span><br><span>[16] <a href="https://whonix.org/wiki/Onionshare">https://whonix.org/wiki/Onionshare</a></span><br><span>[17] <a href="https://github.com/micahflee/onionshare/blob/master/BUILD.md#gnulin">https://github.com/micahflee/onionshare/blob/master/BUILD.md#gnulin</a></span><br><span>ux</span><br><span>[18] <a href="https://trac.torproject.org/projects/tor/ticket/22605">https://trac.torproject.org/projects/tor/ticket/22605</a></span><br><span>[19] <a href="https://packages.debian.org/stretch/tor">https://packages.debian.org/stretch/tor</a></span><br><span>[20] <a href="https://phabricator.whonix.org/maniphest/query/open/">https://phabricator.whonix.org/maniphest/query/open/</a></span><br><span>[21] <a href="https://forums.whonix.org">https://forums.whonix.org</a></span><br><span>-----BEGIN PGP SIGNATURE-----</span><br><span></span><br><span>iQKTBAEBCgB9FiEEbpebKKbzfEO+MK+hy41Qu3e7PEgFAltpcbJfFIAAAAAALgAo</span><br><span>aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDZF</span><br><span>OTc5QjI4QTZGMzdDNDNCRTMwQUZBMUNCOEQ1MEJCNzdCQjNDNDgACgkQy41Qu3e7</span><br><span>PEhxNQ//SIYdoE64adUykqUSlWGZXeDpn090+RDolyOmg6zn1XuSTKAkeX7uuqoI</span><br><span>7dAr+YM2ZUM73LtlnmLTDPXZFxhSXUB/Z2OUEdivDgau+FUaF80z7rMbw7kZkfhH</span><br><span>+V5hdY+GDH4ud/1iCR1agaiVHqJ0zY7HfEFmthJkaqn4UPynMciNrAn8CDijUmuE</span><br><span>KjJCeWCYIvrq/mRIUuwdvdwjRyWeMgUiH1elVBURVqT/IUK97yXm+/cC0uTTw/MG</span><br><span>Gp+i3wAVWsVt5AV2k7DSdRanlWsBRXFOwCuGDLnGyYsXBwS0lYmJK60psBAJK7rj</span><br><span>AEh0Vo3VcY9B+ueCe4/bwLe28rN4HfC4uF8FB1a8PtgOz41xsUvWBtI+CrHcTrdc</span><br><span>WPcEnFqsRXtEd5DN/TqsiiPFT7OeiVvXL2lM37o2fcMf7XIAwPB3oQXGKOZURvRD</span><br><span>SJbXUqE0IqzRy3j+oUVS9wo/lgZkTjdtCDNITljxVBZckYVEIm3KsJIsgeeX6+oN</span><br><span>07OPQB/h6jfn2TQWueOunUUvzqS2Jjs+IjNVLZWUvn5jgFEPAlB1Qzj6XI5qOgJy</span><br><span>8EstwiS4wAU1UjOqO+0/wEiopsbVvw596rvS3bw981yF7O3kEzUjXaKrllmLsKpM</span><br><span>Mi9ux7wy3lx5puS/Sc/j8qlxNRDdN5XM14CMtAuS4d7YkyzSDWs=</span><br><span>=I8IO</span><br><span>-----END PGP SIGNATURE-----</span><br><span>-- </span><br><span>Liberationtech is public & archives are searchable on Google. Violations of list guidelines will get you moderated: <a href="https://mailman.stanford.edu/mailman/listinfo/liberationtech">https://mailman.stanford.edu/mailman/listinfo/liberationtech</a>. Unsubscribe, change to digest, or change password by emailing the moderator at <a href="mailto:zakwhitt@stanford.edu">zakwhitt@stanford.edu</a>.</span></div></blockquote></div></div></body></html>