-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA512################# About Whonix #################Whonix (called TorBOX or aos in past) is an anonymous general purposeoperating system based on Virtual Box, Debian GNU/Linux and Tor.By Whonix design, IP and DNS leaks are impossible. Not even malwarewith root rights can find out the user's real IP/location.This is because Whonix consists of two (virtual) machines. One machinesolely runs Tor and acts as a gateway, which we call Whonix-Gateway.The other machine, which we call Whonix-Workstation, is on a completelyisolated network. Only connections through Tor are possible.Due to trademark issues the project was renamed to Whonix.The project homepage with a full project description, threat model anddocumentation, build instructions can be found here:http://whonix.sf.net################# git branches #################In the master branch is almost nothing beside some general informationabout Whonix, adrelanos and adrelanos's gpg public key.Most new changes currently go into the untested_adre branch.Detailed information about the Whonix git branches can be found here:https://sourceforge.net/p/whonix/wiki/Dev_git/################# Legal #################Whonix is produced independently from the Tor (r) anonymity software andcarries no guarantee from The Tor Project about quality, suitabilityor anything else.##################### License #####################See LICENSE in root of Whonix source for copyright, license and authors.###################### How to contact me ######################This is my personal user site. It acts as a brief introduction into Whonixand explains, how to contact me and what the caveats are.######################### Mirrors of this site #########################Sourceforge:* http://whonix.sf.net/adrelanos* Not even SSL.Github:* https://github.com/adrelanos/whonix* Github.com is accessible over SSL, see SSL security below.Torproject.org Wiki:* https://trac.torproject.org/projects/tor/wiki/doc/proper* Anyone can edit the torproject.org wiki and exchange content with malicious one. Therefore check the history feature. Obviously I do trust Tor and torproject.org. My wiki account "proper" should be genuine.Free Onion Hosting Service* http://su6ephfi7dtxnbtb.onion/* Anonymous admin.torhost.onion Free Onion Hosting Service* http://p4vm6o4n4hbfqxhy.onion/* Anonymous admin.################################# Mirrors of adrelanos GPG key #################################savannah.gnu.org profile page* https://savannah.gnu.org/people/viewgpg.php?user_id=89289* The following command is recommend to enforce downloading the key over SSL.* ## Not forced through Tor, unless you are using Whonix, torsocks or similar.* curl --tlsv1 --proto =https https://savannah.gnu.org/people/viewgpg.php?user_id=89289 > adrelanos.asc.4gpg keyserver* No SSL.* Should really be only used as a mirror.* ## Not forced through Tor, unless you are using Whonix, torsocks or similar.* gpg --keyserver x-hkp://pool.sks-keyservers.net --recv-keys 9B157153925C303A42253AFB9C131AD3713AAEEF################# SSL security #################Note, that the SSL public certificate authority system is not to be trusted,since the recent major security breaks. (Comodo, DigiNotar)######################### Contact me by e-mail #########################I do not trust any e-mail providers. They can shut down or impersonate myaccount at any time. If that concerns you, read GPG security below.adrelanos at riseup period net################# GPG security #################GPG is, as it is, secure. The tricky thing is the web of trust model andbeing sure, you got the right GPG key.My GPG public key is not stored on any keyservers, because as an anonymousdeveloper, I can't get my key signed. The key can be found here and withinthe file adrelanos.asc on github. Check the fingerprint of the key.All mirrors of my personal site, do also have the power to exchange my GPGkey with a malicious one. It's unlikely, that all mirrors will cooperateand tamper with my GPG key.As soon as our new website is ready, my GPG key andGPG fingerprint will be mirrored on at least on three different sites(torproject wiki, github).After all, the GPG key also only proves, that a message was singed with aspecific key id. It doesn't prove, if I am a genuine or evil developer oreven a whole entity.See also:https://sourceforge.net/p/whonix/wiki/TrustingWhonixSigningKey/#################### GPG fingerprint ####################gpg --fingerprint 9B157153925C303A42253AFB9C131AD3713AAEEFpub 4096R/713AAEEF 2012-03-02 Key fingerprint = 9B15 7153 925C 303A 4225 3AFB 9C13 1AD3 713A AEEFuid proper (e-mail removed)sub 4096R/794279C4 2012-03-02################### GPG public key ###################Due to sigining this message "-----" got convertend to "- -----". If youwant to copy the public key below, please remove the "- " beforehand.- -----BEGIN PGP PUBLIC KEY BLOCK-----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l8ma- -----END PGP PUBLIC KEY BLOCK-----######## End ########-----BEGIN PGP SIGNATURE-----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8896-----END PGP SIGNATURE-----