Available release whhonix 17.3 , aimed at providing guaranteed anonymity, security and protection of private information. The distribution is based on Debian GNU/Linux and uses Tor to ensure anonymity. The projects of the project are distributed under the GPLV3 license. For downloads images of virtual machines in format in format OVA for VirtualBox (2.3 GB C XFCE and 1.5 GB of console), which can be is adjusted for use with the KVM hypervisor.
The feature of Whonix is the division of the distribution into two separately launched components-Whonix-Gateway with the implementation of a network gateway for anonymous communications and Whonix -workstation with a desktop. The components are separate systemic environment, supplied inside one loading image and launched in different virtual machines. The Whonix-WorkStation network is exit to the network only through the Whonix-Gateway gateway, which isolating the working environment from direct interaction with the outside world and allows the use of only fictitious network addresses. A similar approach allows you to protect the user from leakage of a real IP address in case of hacking a Web browser or the operation of a vulnerability that gives an attacking Root access to the system.
Whhonix-Workstation hacking will allow the attacker to get only fictitious network parameters, since the real IP and DNS parameters are hidden abroad of a network gateway operating on the basis of Whonix-Gateway, which directs traffic only through Tor. It should be borne in mind that the Whonix components are designed to launch in the form of guest systems, i.e. The possibility of exploitation of critical 0-day vulnerabilities in virtualization platforms, which can provide access to the host system, is not excluded. In this regard, it is not recommended to launch Whonix -workStation on the same computer as Whonix-Gateway.
The default Whork -workstation is provided by the XFCE user environment. The supply includes such programs , like vlc, tor Browser, Thunderbird+Torbiry, Pidign, etc. In the supply of Whonix-Gateway, you can find a set of server applications, including Apache HTTPD, NGNIX and IRC servers that can be used to organize the work of hidden Tor services. It is possible to pass over Tor tunnels for Freeneet, i2p, Jondonym, SSH and VPN. If desired, the user can only cost Whonix-Gateway and connect his usual systems through it, including Windows, which allows anonymous output for already located working stations.
The main changes:
- In Whonix -Workstation with the XFCE desktop, working account by default divided