|
|
[https://www.whonix.org Whonix Homepage]
|
|
|
[Whonix Homepage](https://www.whonix.org)
|
|
|
[[TOC(noheading, depth=0)]]
|
|
|
|
|
|
= Tickets =
|
|
|
# Tickets
|
|
|
Moved to https://github.com/Whonix/Whonix/issues
|
|
|
|
|
|
= Related Tickets =
|
|
|
== Tor ==
|
|
|
|| '''ticket''' || '''topic''' || '''status''' ||
|
|
|
|| #5439; #4019 || notice flood; Tor warns about public SocksPort addresses twice on startup || '''(new defect)''' ||
|
|
|
|| #5438 || sockslistenaddr in torrc || '''fixed''' ||
|
|
|
|| #5437 || man page: IsolateClientProtocol needs clarification? || '''fixed''' ||
|
|
|
|| #5210 || Enable gcc and ld hardening by default in 0.2.3.x || '''(needs_revision defect)''' ||
|
|
|
|| #5220 || Intelligently use capabilities/privileges and drop what we don't need for Debian Gnu/Linux || '''accepted, no progress''' ||
|
|
|
|| #5553 || prevent protocol leaks; Tor client connection API or protocol review howto || '''accepted, no progress''' ||
|
|
|
|| #6060 || add http proxy support to Tor || '''accepted, no progress''' ||
|
|
|
|
|
|
== Vidalia ==
|
|
|
|| #6207 || apt-get install tor vidalia results in defunct Vidalia || ''duplicate'' ||
|
|
|
|| #4716 || vidalia... tries to start a per-user Tor with system-wide settings || ''accepted, no progress'' ||
|
|
|
|| #6209 || Add Vidalia to tpo precise repository || ''accepted, no progress'' ||
|
|
|
|| [https://tails.boum.org/todo/robust_and_strict_New_Identity_feature/ Tails] || Tails wants to push some things upstream || TODO ||
|
|
|
|
|
|
== obfsproxy ==
|
|
|
|| #6201 || Add obfsproxy to Tor stable repository || '''workaround, now using Debian package''' ||
|
|
|
|
|
|
== Analysis ==
|
|
|
|| #5928 || Research: IP discovery through Tor behind isolated network || '''No time?''' ||
|
|
|
|
|
|
== TorIM ==
|
|
|
|| #5498 || Tor IM Bundle - use decentralized system (ex: cabels or TorChat) || '''No time?''' ||
|
|
|
|| #1676 || Audit jabber/XMPP support for pidgin || '''stalled''' ||
|
|
|
|
|
|
== Infrastructure ==
|
|
|
|| #3592 || lack of web forums || '''accepted, in progress''' ||
|
|
|
|| #2436 || Front Page of Wiki Not Editable || '''REJECTED''', there is now [https://trac.torproject.org/projects/tor/wiki/WikiStartAlternate WikiStartAlternate], but ignored. ||
|
|
|
|| #5561 || introduce rules for Tor wiki, trac, irc; netiquette; policy || '''REJECTED''' ||
|
|
|
|| #1039 || subdomain.torproject.org as www.torproject.org/subdomain (comment: for reaching Tor check through tpo's hidden service) || '''REJECTED''' ||
|
|
|
|| #6103 || Make a list of all torproject.org hidden services (and bring them back online) || '''implemented''', https://trac.torproject.org/projects/tor and https://www.torproject.org/docs/tor-hidden-service.html.en ||
|
|
|
|
|
|
== GPG ==
|
|
|
|| #5606 || deb package with all torproject.org signing pgp keys || '''?''' ||
|
|
|
|| #2617 || Add GPG keys to website, remove dependency on keyservers || '''REJECTED''' ||
|
|
|
# Related Tickets
|
|
|
## Tor
|
|
|
| **ticket** | **topic** | **status** |
|
|
|
|------------|-----------|------------|
|
|
|
| #5439; #4019 | notice flood; Tor warns about public SocksPort addresses twice on startup | **(new defect)** |
|
|
|
| #5438 | sockslistenaddr in torrc | **fixed** |
|
|
|
| #5437 | man page: IsolateClientProtocol needs clarification? | **fixed** |
|
|
|
| #5210 | Enable gcc and ld hardening by default in 0.2.3.x | **(needs_revision defect)** |
|
|
|
| #5220 | Intelligently use capabilities/privileges and drop what we don't need for Debian Gnu/Linux | **accepted, no progress** |
|
|
|
| #5553 | prevent protocol leaks; Tor client connection API or protocol review howto | **accepted, no progress** |
|
|
|
| #6060 | add http proxy support to Tor | **accepted, no progress** |
|
|
|
|
|
|
## Vidalia
|
|
|
| #6207 | apt-get install tor vidalia results in defunct Vidalia | _duplicate_ |
|
|
|
|-------|--------------------------------------------------------|-------------|
|
|
|
| #4716 | vidalia... tries to start a per-user Tor with system-wide settings | _accepted, no progress_ |
|
|
|
| #6209 | Add Vidalia to tpo precise repository | _accepted, no progress_ |
|
|
|
| [Tails](https://tails.boum.org/todo/robust_and_strict_New_Identity_feature/) | Tails wants to push some things upstream | TODO |
|
|
|
|
|
|
## obfsproxy
|
|
|
| #6201 | Add obfsproxy to Tor stable repository | **workaround, now using Debian package** |
|
|
|
|-------|----------------------------------------|------------------------------------------|
|
|
|
|
|
|
## Analysis
|
|
|
| #5928 | Research: IP discovery through Tor behind isolated network | **No time?** |
|
|
|
|-------|------------------------------------------------------------|--------------|
|
|
|
|
|
|
## TorIM
|
|
|
| #5498 | Tor IM Bundle - use decentralized system (ex: cabels or TorChat) | **No time?** |
|
|
|
|-------|------------------------------------------------------------------|--------------|
|
|
|
| #1676 | Audit jabber/XMPP support for pidgin | **stalled** |
|
|
|
|
|
|
## Infrastructure
|
|
|
| #3592 | lack of web forums | **accepted, in progress** |
|
|
|
|-------|--------------------|---------------------------|
|
|
|
| #2436 | Front Page of Wiki Not Editable | **REJECTED**, there is now [WikiStartAlternate](https://trac.torproject.org/projects/tor/wiki/WikiStartAlternate), but ignored. |
|
|
|
| #5561 | introduce rules for Tor wiki, trac, irc; netiquette; policy | **REJECTED** |
|
|
|
| #1039 | subdomain.torproject.org as www.torproject.org/subdomain (comment: for reaching Tor check through tpo's hidden service) | **REJECTED** |
|
|
|
| #6103 | Make a list of all torproject.org hidden services (and bring them back online) | **implemented**, https://trac.torproject.org/projects/tor and https://www.torproject.org/docs/tor-hidden-service.html.en |
|
|
|
|
|
|
## GPG
|
|
|
| #5606 | deb package with all torproject.org signing pgp keys | **?** |
|
|
|
|-------|------------------------------------------------------|-------|
|
|
|
| #2617 | Add GPG keys to website, remove dependency on keyservers | **REJECTED** |
|
|
|
|
|
|
== Ubuntu ==
|
|
|
Ubuntu bugs do not matter so much anymore, since we switched to Debian.
|
|
|
|
|
|
|| [https://bugs.launchpad.net/launchpad/+bug/716535 716535] || apt-get freeze attack (Valid-Until) || '''importance: "low"(!)''' ||
|
|
|
|| [https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1105645 1105645] || /etc/bash.d/ wishlist || -
|
|
|
|
|
|
== Debian / Ubuntu ==
|
|
|
|| [https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/1039420] || NTP security vulnerability because not using authentication by default || '''?''' ||
|
|
|
|| [http://brainstorm.ubuntu.com/idea/30050/] || Idea #30050: Secure Network Time Synchronization || ''' Vote! ||
|
|
|
|| [http://brainstorm.ubuntu.com/idea/30076/] || Idea #30076: Enhancy Privacy/Security, Wipe RAM on shut down, reboot and trigger || ''' Vote! ||
|
|
|
|
|
|
== Debian ==
|
|
|
|| [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23687166 23687166] || ntp: NTP security vulnerability because not using authentication by default || stalled
|
|
|
|| [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700811 700811] || interface comes up even if a script in /etc/network/if-pre-up.d/ fails || - ||
|
|
|
|| [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=675008 675008] || bash: should handle /etc/bashrc.d (or similar) for non-login interactive shell || - ||
|
|
|
|
|
|
== Tor Browser ==
|
|
|
|| #5480 || can we get a link to "https://www.torproject.org/dist/torbrowser/latest-tor-browser" || '''REJECTED''' ||
|
|
|
|| #5322 || doesn't obey user.js? setting custom proxy settings || '''ANSWERED''' ||
|
|
|
|| #3455 || Tor Browser should set SOCKS username for a request based on referer || '''ACCEPTED, ASSIGNED''' ||
|
|
|
|| #5236 || Make a deb of the Torbrowser and add to repository || '''very unlikely''' ||
|
|
|
|| #3994 || Get TorBrowser in Debian || '''very unlikely''' ||
|
|
|
|| #4522 || Add privilege separation for bundled browser || '''needs_information enhancement''' ||
|
|
|
|| #5791 || Gather apparmor/selinux/seatbelt profiles for each component of TBB || '''assigned project''' ||
|
|
|
|| #5024 || compile time hardening of TBB (RELRO, canary, PIE) || '''(new enhancement)''' ||
|
|
|
|| #5611 || Enhance "Transparent Torification (Requires custom transproxy or Tor router)" in Tor Button. || '''?''' ||
|
|
|
|| #6025 || enable Bookmarks Toolbar by default || '''?''' ||
|
|
|
|| #6053 || TorButton breaks functionality to have multiple homepages (startpages) || '''?''' ||
|
|
|
|| #5273 || Update TBB design doc for 2.3.x-alpha (missing Tor Browser Update Check Technical Documentation) || '''new defect''' ||
|
|
|
|
|
|
== torsocks ==
|
|
|
|| #6155 || Import torsocks from google code to torproject.org trac || '''(assigned defect)''' ||
|
|
|
|| #8137 || add option to allow connections to local addresses || new ||
|
|
|
|
|
|
== Tor Check ==
|
|
|
|| #6098 || Add a hidden service to check.torproject.org || '''new enhancement''' ||
|
|
|
|
|
|
== TorBirdy ==
|
|
|
|| [https://trac.torproject.org/projects/tor/query?status=accepted&status=assigned&status=needs_information&status=needs_review&status=needs_revision&status=new&status=reopened&component=TorBirdy&order=priority&col=id&col=summary&col=component&col=status&col=type&col=priority&col=milestone TorBirdy] || different topics || '''new''' ||
|
|
|
|| #6018 || Add TorBirdy to the torproject.org repository || '''new''' ||
|
|
|
|
|
|
== Virtual Box ==
|
|
|
|| [https://www.virtualbox.org/ticket/10828 #10828] || VBoxService --disable-timesync broken || '''Done. [https://sourceforge.net/p/whonix/wiki/TimeSync/ Workarround.]''' They say it's actually a feature, not a bug or a missing feature. ||
|
|
|
|
|
|
== Arm ==
|
|
|
|| [https://trac.torproject.org/projects/tor/ticket/7611 #7611] || Man page parser out of date || '''new defect''' ||
|
|
|
|
|
|
== KDE ==
|
|
|
* [https://bugs.kde.org/show_bug.cgi?id=314224 KDE Bug 314224 - clock freezes after modifying layout.js]
|
|
|
|
|
|
= wiki editing =
|
|
|
* [http://trac.edgewall.org/wiki/WikiFormatting list of all commands]
|
|
|
| [716535](https://bugs.launchpad.net/launchpad/+bug/716535) | apt-get freeze attack (Valid-Until) | **importance: "low"(!)** |
|
|
|
|------------------------------------------------------------|-------------------------------------|--------------------------|
|
|
|
| [1105645](https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1105645) | /etc/bash.d/ wishlist | -
|
|
|
|
|
|
## Debian / Ubuntu
|
|
|
| [https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/1039420] | NTP security vulnerability because not using authentication by default | **?** |
|
|
|
|--------------------------------------------------------------|------------------------------------------------------------------------|-------|
|
|
|
| [http://brainstorm.ubuntu.com/idea/30050/] | Idea #30050: Secure Network Time Synchronization | ''' Vote! |
|
|
|
| [http://brainstorm.ubuntu.com/idea/30076/] | Idea #30076: Enhancy Privacy/Security, Wipe RAM on shut down, reboot and trigger | ''' Vote! |
|
|
|
|
|
|
## Debian
|
|
|
| [23687166](http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23687166) | ntp: NTP security vulnerability because not using authentication by default | stalled
|
|
|
|------------------------------------------------------------------------|-----------------------------------------------------------------------------|--------
|
|
|
| [700811](http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700811) | interface comes up even if a script in /etc/network/if-pre-up.d/ fails | - |
|
|
|
| [675008](http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=675008) | bash: should handle /etc/bashrc.d (or similar) for non-login interactive shell | - |
|
|
|
|
|
|
## Tor Browser
|
|
|
| #5480 | can we get a link to "https://www.torproject.org/dist/torbrowser/latest-tor-browser" | **REJECTED** |
|
|
|
|-------|--------------------------------------------------------------------------------------|--------------|
|
|
|
| #5322 | doesn't obey user.js? setting custom proxy settings | **ANSWERED** |
|
|
|
| #3455 | Tor Browser should set SOCKS username for a request based on referer | **ACCEPTED, ASSIGNED** |
|
|
|
| #5236 | Make a deb of the Torbrowser and add to repository | **very unlikely** |
|
|
|
| #3994 | Get TorBrowser in Debian | **very unlikely** |
|
|
|
| #4522 | Add privilege separation for bundled browser | **needs_information enhancement** |
|
|
|
| #5791 | Gather apparmor/selinux/seatbelt profiles for each component of TBB | **assigned project** |
|
|
|
| #5024 | compile time hardening of TBB (RELRO, canary, PIE) | **(new enhancement)** |
|
|
|
| #5611 | Enhance "Transparent Torification (Requires custom transproxy or Tor router)" in Tor Button. | **?** |
|
|
|
| #6025 | enable Bookmarks Toolbar by default | **?** |
|
|
|
| #6053 | TorButton breaks functionality to have multiple homepages (startpages) | **?** |
|
|
|
| #5273 | Update TBB design doc for 2.3.x-alpha (missing Tor Browser Update Check Technical Documentation) | **new defect** |
|
|
|
|
|
|
## torsocks
|
|
|
| #6155 | Import torsocks from google code to torproject.org trac | **(assigned defect)** |
|
|
|
|-------|---------------------------------------------------------|-----------------------|
|
|
|
| #8137 | add option to allow connections to local addresses | new |
|
|
|
|
|
|
## Tor Check
|
|
|
| #6098 | Add a hidden service to check.torproject.org | **new enhancement** |
|
|
|
|-------|----------------------------------------------|---------------------|
|
|
|
|
|
|
## TorBirdy
|
|
|
| [TorBirdy](https://trac.torproject.org/projects/tor/query?status=accepted&status=assigned&status=needs_information&status=needs_review&status=needs_revision&status=new&status=reopened&component=TorBirdy&order=priority&col=id&col=summary&col=component&col=status&col=type&col=priority&col=milestone) | different topics | **new** |
|
|
|
|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------|---------|
|
|
|
| #6018 | Add TorBirdy to the torproject.org repository | **new** |
|
|
|
|
|
|
## Virtual Box
|
|
|
| [#10828](https://www.virtualbox.org/ticket/10828) | VBoxService --disable-timesync broken | **Done. [Workarround.](https://sourceforge.net/p/whonix/wiki/TimeSync/)** They say it's actually a feature, not a bug or a missing feature. |
|
|
|
|---------------------------------------------------|---------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------|
|
|
|
|
|
|
## Arm
|
|
|
| [#7611](https://trac.torproject.org/projects/tor/ticket/7611) | Man page parser out of date | **new defect** |
|
|
|
|---------------------------------------------------------------|-----------------------------|----------------|
|
|
|
|
|
|
## KDE
|
|
|
* [KDE Bug 314224 - clock freezes after modifying layout.js](https://bugs.kde.org/show_bug.cgi?id=314224)
|
|
|
|
|
|
# wiki editing
|
|
|
* [list of all commands](http://trac.edgewall.org/wiki/WikiFormatting)
|
|
|
* html supported!
|
|
|
{{{
|
|
|
#!html
|
|
|
```
|
|
|
<h1 style="text-align: left; color: blue">
|
|
|
HTML Test
|
|
|
</h1>
|
|
|
}}}
|
|
|
* pictures supported! [[Image(https://www.torproject.org/images/icon-TorBrowser.jpg)]]
|
|
|
* [http://trac-hacks.org/wiki/TocMacro trac wiki - TOC - Table of Contents]
|
|
|
```
|
|
|
* pictures supported! ![https://www.torproject.org/images/icon-TorBrowser.jpg](https://www.torproject.org/images/icon-TorBrowser.jpg)
|
|
|
* [trac wiki - TOC - Table of Contents](http://trac-hacks.org/wiki/TocMacro)
|
|
|
|
|
|
= Similar Projects =
|
|
|
# Similar Projects
|
|
|
https://sourceforge.net/p/whonix/wiki/Authorship/#similar-projects
|
|
|
|
|
|
= people talking about Whonix =
|
|
|
# people talking about Whonix
|
|
|
moved to https://sourceforge.net/p/whonix/wiki/Security/#security-reviews-and-feedback
|
|
|
|
|
|
= Our Shell scripts and Build Documentation =
|
|
|
Build Documentation [[BR]]
|
|
|
# Our Shell scripts and Build Documentation
|
|
|
Build Documentation
|
|
|
|
|
|
https://sourceforge.net/p/whonix/wiki/BuildDocumentation/
|
|
|
|
|
|
= Questions =
|
|
|
Archived: [https://trac.torproject.org/projects/tor/wiki/doc/TorBOX/Dev/ArchivedDiscussion/QUESTIONS Dev/ArchivedDiscussion/QUESTIONS]
|
|
|
# Questions
|
|
|
Archived: [Dev/ArchivedDiscussion/QUESTIONS](https://trac.torproject.org/projects/tor/wiki/doc/TorBOX/Dev/ArchivedDiscussion/QUESTIONS)
|
|
|
|
|
|
New questions: [http://sourceforge.net/p/whonix/wiki/Readme/#contacting-whonix-developers-feedback-questions Contacting Whonix developers / Feedback / Questions] |
|
|
\ No newline at end of file |
|
|
New questions: [Contacting Whonix developers / Feedback / Questions](http://sourceforge.net/p/whonix/wiki/Readme/#contacting-whonix-developers-feedback-questions) |
|
|
\ No newline at end of file |