Whonix 17.2, ib qho kev faib tawm uas tsom mus rau kev muab kev lav phib xaub, kev ruaj ntseg, thiab kev tiv thaiv kev ceev ntiag tug, tam sim no muaj. Qhov kev faib tawm yog raws li Debian GNU/Linux thiab siv Tor los xyuas kom meej tias tsis qhia npe. Txoj haujlwm ntawm qhov project no tau tso cai raws li GPLv3. Cov duab virtual machine hauv hom ntawv .ova rau VirtualBox (2.1 GB nrog Xfce thiab 1.4 GB rau console) muaj rau rub tawm. Daim duab kuj tseem tuaj yeem hloov pauv rau kev siv nrog KVM hypervisor.
Ib qho tshwj xeeb ntawm Whonix yog nws faib ua ob lub Cheebtsam ua haujlwm sib cais: Whonix-Gateway, uas siv lub rooj vag network rau kev sib txuas lus tsis qhia npe, thiab Whonix-Workstation, uas muaj lub desktop. Ob lub Cheebtsam raug xa mus rau hauv ib daim duab khau raj. Kev nkag mus rau hauv network los ntawm Whonix-Workstation ib puag ncig tsuas yog ua tiav los ntawm Whonix-Gateway, uas cais cov chaw ua haujlwm los ntawm kev sib cuam tshuam ncaj qha nrog lub ntiaj teb sab nraud thiab tso cai rau tsuas yog siv cov chaw nyob network cuav. Txoj hauv kev no tiv thaiv tus neeg siv los ntawm kev xau cov ntaub ntawv tiag tiag. IP chaw nyob yog tias lub web browser raug hacked, lossis txawm tias muaj qhov tsis muaj zog raug siv uas muab kev nkag mus rau hauv paus rau lub system.
Hacking Whonix-Workstation yuav tso cai rau tus neeg tawm tsam kom tau txais cov ntaub ntawv tsis tseeb hauv lub network nkaus xwb, txij li qhov tseeb IP thiab DNS tsis tau muab zais tom qab ciam teb ntawm lub rooj vag network siv los ntawm Whonix-Gateway, uas khiav tsheb tsuas yog los ntawm Tor. Nws yuav tsum raug coj mus rau hauv tus account tias Whonix Cheebtsam yog tsim los khiav hauv daim ntawv ntawm cov qhua, i.e. Qhov muaj peev xwm ntawm kev siv qhov tseem ceeb 0-hnub qhov tsis zoo hauv virtualization platforms uas tuaj yeem muab kev nkag mus rau lub party system tsis tuaj yeem txiav tawm. Vim li no, nws tsis pom zoo kom khiav Whonix-Workstation ntawm tib lub computer li Whonix-Gateway.
Whonix-Workstation los nrog Xfce tus neeg siv ib puag ncig los ntawm lub neej ntawd. Nws suav nrog cov kev pab cuam xws li VLC, Tor Browser, Thunderbird + TorBirdy, Pidgin, thiab ntau ntxiv. Whonix-Gateway los nrog ib pawg ntawm cov ntawv thov server, suav nrog Apache httpd, ngnix, thiab IRC servers, uas tuaj yeem siv los khiav Tor cov kev pabcuam zais cia. Tunneling hla Tor yog ua tau rau Freenet, i2p, JonDonym, SSH, thiab VPNKev sib piv ntawm Whonix nrog Tails, Tor Browser, Qubes OS TorVM, thiab txoj kev hauv tsev tuaj yeem pom ntawm nplooj ntawv no. Yog tias xav tau, tus neeg siv tsuas yog siv tau Whonix-Gateway thiab txuas lawv cov kab ke ib txwm los ntawm nws, suav nrog Windows, uas ua rau nws muaj peev xwm muab kev nkag mus rau cov chaw ua haujlwm uas twb siv lawm.
Cov kev hloov loj:
- Cov kev sib dhos tshiab raws li cov khoom ntawm kev faib tawm Kicksecure uas tiv thaiv, uas txuas ntxiv mus Debian cov txheej txheem ntxiv thiab cov chaw teeb tsa los txhim kho kev ruaj ntseg (AppArmor rau kev cais tawm, txhim kho cov kev hloov tshiab ntawm Tor, siv tally2 PAM module los tiv thaiv kev kwv yees lo lus zais, nthuav dav entropy rau RNG, lov tes taw SUID, tsis qhib cov chaw nres nkoj network los ntawm lub neej ntawd, siv cov lus pom zoo los ntawm KSPP (Kernel Self Protection Project), ntxiv kev tiv thaiv kev xau ntawm cov ntaub ntawv hais txog CPU kev ua haujlwm, thiab lwm yam).
- Ua kom muaj kev sib txuas rau Tor network los ntawm lub neej ntawd (tsis yog hu rau kev sib txuas wizard ntawm thawj khau raj). Cov neeg siv uas xav tau kev sib txuas ncaj qha rau lub network raug nug kom cais hu rau ACW (Anon Connection Wizard).
- Lub Whonix-Firewall firewall tau txav los ntawm iptables mus rau nftables.
- Txhim kho IPv6 kev txhawb nqa.
- Ua hauj lwm txuas ntxiv ntawm kev sim nyob ua ke ntawm Whonix-Host, nruab nrog lub installer. Qhov tsim yog ua raws li Kicksecure ib puag ncig thiab yog tsim los muab qhov chaw ruaj ntseg rau kev khiav lag luam virtual los ntawm Whonix-Gateway thiab Whonix-Workstation.
- Hloov tshiab versions ntawm Tor thiab Tor Browser.
- Cov kev hloov pauv tau ua los txhawb nqa Bisq 2 decentralized P2P network rau cryptocurrency pauv thiab ua lag luam.
- Templates rau Qubes OS tau hloov kho. Kev hloov pauv ntawm pulseaudio mus rau pipewire tau ua tiav. Tinyproxy thiab SOCKS raws tu qauv yog siv los khiav tsheb los ntawm Tor.
- Thaum khiav hauv KVM hypervisor, RAM loj hauv qhov tsis muaj Whonix-Gateway virtual tshuab tau nce mus rau 1280 MB, thiab Whonix-Workstation - mus rau 2048 MB, uas sib haum rau yav dhau los siv rau VirtualBox.
Tau qhov twg los: opennet.ru
