Qhov kev faib tawm Whonix 18.2, uas tsom mus rau kev muab kev lav tsis qhia npe, kev ruaj ntseg, thiab kev tiv thaiv kev ceev ntiag tug, tau tso tawm lawm. Qhov kev faib tawm yog raws li Debian GNU/Linux thiab siv Tor los xyuas kom meej tias tsis qhia npe. Txoj haujlwm ntawm qhov project no tau tso cai raws li daim ntawv tso cai GPLv3. Cov duab muaj rau rub tawm. cov tshuab virtual nyob rau hauv hom ntawv ova rau VirtualBox (2.6 GB nrog LXQt thiab 1.5 GB console) thiab qcow2 rau KVM hypervisor (4 GB nrog LXQt thiab 2.3 GB console).
Ib qho tshwj xeeb ntawm Whonix yog qhov kev faib tawm faib ua ob qho khoom sib cais: Whonix-Gateway, uas siv lub rooj vag network rau kev sib txuas lus tsis qhia npe, thiab Whonix-Workstation, uas muaj lub desktop. Cov khoom sib cais yog cov chaw ib puag ncig ntawm lub kaw lus, xa tuaj rau hauv ib daim duab khau raj thiab khiav hauv cov chaw sib txawv. cov tshuab virtualKev nkag mus rau hauv lub network los ntawm Whonix-Workstation ib puag ncig tsuas yog ua tau los ntawm Whonix-Gateway, uas cais qhov chaw ua haujlwm los ntawm kev sib cuag ncaj qha nrog lub ntiaj teb sab nraud thiab tso cai rau tsuas yog siv cov chaw nyob network cuav. Txoj hauv kev no tiv thaiv tus neeg siv los ntawm kev xau cov ntaub ntawv hauv ntiaj teb tiag. IP chaw nyob yog tias muaj ib qho web browser raug hacked lossis muaj qhov tsis muaj zog raug siv uas muab kev nkag mus rau hauv paus rau lub system.
Hacking Whonix-Workstation yuav tso cai rau tus neeg tawm tsam kom tau txais cov ntaub ntawv tsis tseeb hauv lub network nkaus xwb, txij li qhov tseeb IP thiab DNS tsis tau muab zais tom qab ciam teb ntawm lub rooj vag network siv los ntawm Whonix-Gateway, uas khiav tsheb tsuas yog los ntawm Tor. Nws yuav tsum raug coj mus rau hauv tus account tias Whonix Cheebtsam yog tsim los khiav hauv daim ntawv ntawm cov qhua, i.e. Qhov muaj peev xwm ntawm kev siv qhov tseem ceeb 0-hnub qhov tsis zoo hauv virtualization platforms uas tuaj yeem muab kev nkag mus rau lub party system tsis tuaj yeem txiav tawm. Vim li no, nws tsis pom zoo kom khiav Whonix-Workstation ntawm tib lub computer li Whonix-Gateway.
Whonix-Workstation los nrog LXQt tus neeg siv ib puag ncig los ntawm lub neej ntawd. Nws suav nrog cov kev pab cuam xws li VLC thiab Tor Browser. Whonix-Gateway los nrog ib pawg ntawm cov ntawv thov server, suav nrog Apache httpd, ngnix, thiab IRC servers, uas tuaj yeem siv los khiav Tor cov kev pabcuam zais cia. Tunneling hla Tor yog ua tau rau Freenet, i2p, JonDonym, SSH, thiab VPNYog tias xav tau, tus neeg siv tsuas yog siv tau Whonix-Gateway thiab txuas lawv cov kab ke ib txwm los ntawm nws, suav nrog Windows, uas tso cai rau kev nkag mus rau cov chaw ua haujlwm uas twb muaj lawm yam tsis qhia npe.
Lub kaw lus ib puag ncig yog raws li kev faib tawm tiv thaiv Kicksecure, uas tau tsim los ua ke los ntawm cov neeg tsim khoom tib yam thiab nthuav dav Debian Cov txheej txheem ntxiv thiab cov chaw teeb tsa rau kev ruaj ntseg ntxiv: AppArmor rau kev cais tawm, txhim kho cov hloov tshiab ntawm Tor, siv tally2 PAM module los tiv thaiv kev kwv yees lo lus zais, nthuav dav entropy rau RNG, lov tes taw SUID, tsis qhib cov chaw nres nkoj network los ntawm lub neej ntawd, siv cov lus pom zoo los ntawm KSPP (Kernel Self Protection Project), ntxiv kev tiv thaiv tiv thaiv kev xau ntawm CPU cov ntaub ntawv ua haujlwm, thiab lwm yam.
Cov kev hloov loj:
- Hloov kho qhov chaw ib puag ncig Kicksecure kom siv pob Sequoia-PGP (kev siv OpenPGP hauv Rust) es tsis txhob siv GnuPG, thiab kaw qhov chaw cia khoom los ntawm lub neej ntawd. Debian Kev Khiav Ceev: Thaum siv LXQt, kev teeb tsa ntawm Qps (ib qho interface rau saib cov txheej txheem khiav) tau raug tso tseg, thiab kev txhawb nqa rau qemu:///session tau ntxiv rau kev khiav cov tshuab virtual los ntawm cov neeg siv tsis muaj cai.
- Ib qho kev tshuaj xyuas kev ruaj ntseg sab hauv tau ua tiav thiab ib qho kev tshuaj xyuas sab nraud tau pib lawm.
- Txhim kho pob khoom Kloak, siv los tawm tsam tus neeg siv kev txheeb xyuas raws li cov keyboard input thiab nas txav.
- Qhov kev faib tawm Qubes-Whonix-Gateway suav nrog pob fwupd-qubes-vm.
- Rov sau dua los ntawm Whonix-Windows-Tus neeg teeb tsa thiab Whonix-Windows-Tus pib.
- Txhim kho kev tsim kho rau cov khoom siv nrog Apple Silicon processors.
Tau qhov twg los: opennet.ru
