from Hacker News

Whonix – an OS focused on anonymity, privacy and security

by Run_DOS_Run on 9/14/23, 3:28 PM with 59 comments

  • by taway1237 on 9/14/23, 5:55 PM

    Whonix is great. I use it all the time in my dayjob. I write a lot of scripts that have to interact with criminal (malware c&c, phishing website, etc) infrastructure, including APT analysis. You don't want to make an opsec fail and/or leak your IP in a situation like this. Instead of doing something fragile and error-prone, like being careful to use a proxy all the time in my code, having a VPN, etc, I just run everything in Whonix and sleep well at night.
  • by 1shooner on 9/14/23, 8:02 PM

    This is really a missed opportunity for a penguin-colored owl mascot.
  • by dooglius on 9/14/23, 5:52 PM

    More technical overview at https://www.whonix.org/wiki/About
  • by beardog on 9/14/23, 6:40 PM

    Whonix when used via Qubes DispVMs is more effective than Tails in my opinion (better protection against IP leaking), unless your goal is mainly the amnesic aspect.
  • by adultSwim on 9/14/23, 6:45 PM

    Whonix + Qubes is a treasure
  • by thatxliner on 9/15/23, 3:55 AM

    How does this compare to Tails (https://tails.net/)
  • by Robspierre on 9/14/23, 11:34 PM

    Is it me or the install process to USB is absurdly complex?
  • by rvba on 9/14/23, 11:10 PM

    Is it legal to use the matrix screnshots?
  • by replwoacause on 9/15/23, 12:41 AM

    Does not work on arm
  • by coldblues on 9/14/23, 5:01 PM

    The website is fine. Please don't detract from the topic. Whonix is unanimously considered the best Linux distribution in terms of privacy and security. You can also run it in Qubes OS. It's intended to run on Virtualbox for now. One VM is for network access, while the other one is connected to the previous VM for said network access, and it's the one you should use. This is to prevent any de-anonymization attacks.
  • by f1shy on 9/14/23, 4:31 PM

    The OS is focused on privacy... at the foot page there is a legend:

    "By using our website, you acknowledge that you have read, understood and agreed to our Privacy Policy, Cookie Policy, Terms of Service, and E-Sign Consent."

    I clicked in "more information" and was directed to a long page with small print, where you have to navigate to different policies (which remain somewhat hidden if you are not careful) ...

    Really?

  • by neilalexander on 9/14/23, 4:19 PM

    The website is quite dreadful, excessively verbose in some places and totally lacking in others. It took me quite a few clicks just to learn that this is effectively virtual machines with Tor but still didn't find much at-a-glance information on what the user experience is actually like. Does anyone have any experience with this?
  • by baz00 on 9/14/23, 4:32 PM

    Web site looks like it's trying to sell me some shitty VPN software I don't need.
  • by msla on 9/14/23, 9:58 PM

    So it's a Debian-based Linux distro with some configuration work done.

    I wish they'd simply summarize what it is.