<pre> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ################ # About Whonix # ################ Whonix (called TorBOX or aos in past) is an anonymous general purpose operating system based on Virtual Box, Debian GNU/Linux and Tor. By Whonix design, IP and DNS leaks are impossible. Not even malware with root rights can find out the user's real IP/location. This is because Whonix consists of two (virtual) machines. One machine solely runs Tor and acts as a gateway, which we call Whonix-Gateway. The other machine, which we call Whonix-Workstation, is on a completely isolated network. Only connections through Tor are possible. Due to trademark issues the project was renamed to Whonix. The project homepage with a full project description, threat model and documentation, build instructions can be found here: http://whonix.sf.net ################ # Legal # ################ Whonix is produced independently from the Tor (r) anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. #################### # License # #################### See LICENSE in root of Whonix source for copyright, license and authors. ##################### # How to contact me # ##################### This is my personal user site. It acts as a brief introduction into Whonix and explains, how to contact me and what the caveats are. ######################## # Mirrors of this site # ######################## Sourceforge: * http://whonix.sf.net/adrelanos * Not even SSL. Github: * https://github.com/adrelanos/whonix * Github.com is accessible over SSL, see SSL security below. Torproject.org Wiki: * https://trac.torproject.org/projects/tor/wiki/doc/proper * Anyone can edit the torproject.org wiki and exchange content with malicious one. Therefore check the history feature. Obviously I do trust Tor and torproject.org. My wiki account "proper" should be genuine. Free Hosting Service * http://su6ephfi7dtxnbtb.onion/ * Anonymous admin. Absolutely no control over the server. ################ # SSL security # ################ Note, that the SSL public certificate authority system is not to be trusted, since the recent major security breaks. (Comodo, DigiNotar) ######################## # Contact me by e-mail # ######################## I do not trust any e-mail providers. They can shut down or impersonate my account at any time. If that concerns you, read GPG security below. adrelanos at riseup period net ################ # GPG security # ################ GPG is, as it is, secure. The tricky thing is the web of trust model and being sure, you got the right GPG key. My GPG public key is not stored on any keyservers, because as an anonymous developer, I can't get my key signed. The key can be found here and within the file adrelanos.asc on github. Check the fingerprint of the key. All mirrors of my personal site, do also have the power to exchange my GPG key with a malicious one. It's unlikely, that all mirrors will cooperate and tamper with my GPG key. As soon as our new website is ready, my GPG key and GPG fingerprint will be mirrored on at least on three different sites (torproject wiki, github). After all, the GPG key also only proves, that a message was singed with a specific key id. It doesn't prove, if I am a genuine or evil developer or even a whole entity. Also see https://sourceforge.net/p/whonix/wiki/Trust/. ################### # GPG fingerprint # ################### gpg --fingerprint 9C131AD3713AAEEF pub 4096R/713AAEEF 2012-03-02 Key fingerprint = 9B15 7153 925C 303A 4225 3AFB 9C13 1AD3 713A AEEF uid proper (e-mail removed) sub 4096R/794279C4 2012-03-02 ################## # GPG public key # ################## Due to sigining this message "-----" got convertend to "- -----". If you want to copy the public key below, please remove the "- " beforehand. - -----BEGIN PGP PUBLIC KEY BLOCK----- mQINBE9QN2ABEAC8SpmBxocz27epSQ7w7H4FSbJdMEf+alMiNj569IOw6aEZPbqe 3XajObdbSjMOZ/SPD3ZlONzuJFsrjSuFGnwszlUub8OoU3hL8J2NTJJKphQr9Ne4 reNWkwtayM5p1GFB6eoktpXmlOnmYY54/hvuXyyS0Ya5fy5SCq0r9OfLL83OjKHZ Yc26AHgAOoUbdZFX6oRnamQRsuKQBNKXG4C413KFzt4Hr5bX1pmWDUWKLZz28i+7 lFHQZFtjJ1FY6LLaPkh4qZgraEL10jjm+2Qq+o7wsK7kZanp+QWOCQtds0aucJjN HteAXm+KpnTcdOF/JR5IMp85ka0gCHFMa6cYugmTbp6BiNQv5TCC4AlA2DuJohX4 o5OrjCRmhPvRhxJPTpFAHtmeX75YAKl7VuVDhpo/jej5akbG23cJZvlSWJWfvAUp JjLsh3Pb9IScsQSPW744XbyFOElx7x3CKwcKYeaopfyN6jewDOadhUOFtcQ88Nmw 2cvuHSqK4QGuZqgNnWbeG84M4C4vm27ANYCxZIc/mo6RLp9fRrUR17am9U73zw2U bblQ4TqVI5OT+xhUFwgEgVRVAETmjbRuqFeMYTzQJJzcs2t5Q4MOH49zDwr2mLCT y5n52/Fj6DHmQ/EOIPbqezYsSrce6AV+y2zP6Ex8faXEQaBswPtKAYatCQARAQAB tB9wcm9wZXIgPHByb3BlckBzZWN1cmUtbWFpbC5iaXo+iQI4BBMBAgAiBQJPUDdg AhsDBgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRCcExrTcTqu73d6D/48XbFd arHrhVKF4LLJalgP1FhI6Fps4gSmMLdllMEvE+a6r7/riYwe1bbxit6xWzyANFcS GT1rh69qDxx6oyyhEt+Fal5bB+r5Yg4zPp24IpAMMbisx06KITRLDcvgwIrOMzss zZ//TN1CwHBc9OdtomhAWpx5vfiVk7Q/9l0fPZhsEV9zmQuJ5GzSM+VivzdAjV93 o57RN/f72Qltsy5hiv4ohx0PEN7otkKbftmALdaYvQCRHA29Z2dMi7DWEZPvFozO 2T1h+gq5YSwQzTqjQFuPN4DVeubEw5lsXmLG6ohq2z5L/JDEgAzKq7uddJxPLtjI LmoMfLmpMNvpyzZnxckWFnbnHSFTIlM1fV64mTzmJgGTQsV2P3LHuhhNvOxT05Lq FwwK1t6XPoc2ax+Z4/NYbWvtZap+1Ob5As+601fm6vsreCH93pez+eKQkj8LrMyO te1MpbWsR8lSXF8WxvJf5Wo27dKzZ2cQaLmhGF0RTq0KJS42DJrmkErooGNRTev8 sUnGdYIF1UoEBkacODri+/A/Pkm476CRrh5pgKmHfe9bucJgi2SEq+1NRdTL5yAM X+uMmftznuO8zQbDRZNhMlVe4git6eVCCnCBMOPjgY8cHA2k2672janzepc+aotn wyb6uXaKJx614Kr+i6esb6ExUPlpOYpAFGA3DrkCDQRPUDdgARAA20rIrVlqSw5g bYic4nFCZ9xAF/nZbVXf39jMgUjdjIxc/3WFiT/P2hO46s5jSkCJ2dCFaMyZ6lba 1U0hkMkEJFPHiUDv0X5T8vOXkQb+ctGRwA72e6KVpckZ7mu3JRAWOj1ky3jWQs/C cCHjog1NCosKN2usgedHxL0XajiMDTOHa10mhG8WF6YacJ2/OhJE/tlN269rhFa4 /rafUOlcqsg7AX2nlXOnRL6i2yYp8cHcwb3PfX7ZPqAxG23qHt8XxF1AHJ1o7Ck2 EiyfymfjZ+KGIXNi2BVF0B4vj5IFBsdevfD8qupcokf/fazJCZgSOLxil6djwyIF hTPIiXHEDbt5DlHIoq65zUdUp5DSwPQpIFDxf+Hhnt2/9tPSs6D2GHrTqMxm0H5h 02TcSEoqXV/6zd9+fainzZMqayGCvYepk8RPB2WdYZp9m+VoUFZHOXCK5myvghS/ /ZepuTROTvdac1/vEIFCx9RmVQa4TsNJs2oRepNs2zVtzVTnHbmrMSanVdWwTkuB UalYmPsPxfN/nf4MU/UnD/htN+wpXYIdRSMGBWHHw9eeAhMHU85AZJwm1c7HVetA eGfHDC7EbwzWl5PnAjc5FCfvUqmVl5H7u01mFk4KwhX3goRxkRet2Op96wP8+B7R bNySPwtkQT8KY5BPIWciNLs+PcszWxMAEQEAAYkCHwQYAQIACQUCT1A3YAIbDAAK CRCcExrTcTqu74EJD/4mPn+BHoWuJts1S0tIkbu8Equ+tRdwELn3nWPMLLn6yozp p3pgJizZo5WleKBNlf1i89jYvhV0hM7sYuFiFnLjCeje9a44GtJQcfwGrOHFBnsR R5UzR5FP5YwS006Wknn/TD1gNfqAAfeBvDg+uduJ46JaXo/LLuB+Qv1mOdajA75o VXAEZRJ7a+gOhd13Ulwtvg2Z2vsOd4sEdCUGIOmCyV6ijSyUAICCNN2K/rKIUVxd lIEPX/yOmYua3yWp45k/2g6QKnCV2RBb7oLL808ZT8DcN7F0AK8RkYrIUyHnu/gv fQjadOaOBKITLeCnveawfwN5sigeYhaTaR3tDR/8GuaqwElFpXmGWKv3WiJirJvA bdwh3Xgrc7JVVnUg7DpCP29UxSbDwqd7I5Va3ofPEZXFUEysF1aCSFHnTbjYnH1P YgiZt7Isdt3AJdAVnpsKbGgE0gFofOkKCAZxJbsqbW5BVXxIrNctXk5J5cT6iM1j R9zGSXadByDA9OPPA4bgbcg8aONX+d6oYz3wn2e1vRwMkykjFlJ9y3Onv0Oidd3Y VtiOZQ5ZWabToRyy9gTowgcpvG5axHXhPkwrfOknSqxv/LalnrDa90Djl6nEXPse +7veqYr3oeJZbUSwgrEc5eOPys4PtvSyRTIIap9XbzeT2AmZ2gGAHrnq3T81Nw== =N9Kn - -----END PGP PUBLIC KEY BLOCK----- ####### # End # ####### -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJQelILAAoJEJwTGtNxOq7vlLEQAKJ09E1qt3Spf/vBCh05FqTg Oif0ip32/6kTEENtcvj4Eo5LSfxUJ+D/hIqS6hcDQb1tHtZT/B/uOR0QTgH4N6Uy qRNrFeIA5qWZzI04GJYCps1qLW8GncluzkcCiN85H5NgNIyAKFFlaKZ1ii5MyL9p 2uPdPZdYksMQTyHezSaEy6XpLiiftdLYC7yv+7uFwKWh/xtxhuvZEUI8bGiTN+Me 5w8AYBVgua/Dz2AgtDrcM2WGMwdmKaeBykxafb+sWr+2048BTgo4DK2o7njWACm2 Bb2m8IEcuHuFbY8+rc79kL9FuW1SKSh+6Cr8nX2RsTgzTwkIKJ3fYWSk5oDNYEeg nRZ8IeL6mTmUpurO1OwWW48ywao63qz7pIvx0O/JRSknshXqordJTiFYbXlufiLl uocSicvc95lag4Zsa9C/7RN0FH14m8br94xdm/z5zgFjGq/2INGOnEkd/BaLqPmz 7vRlsSwTk+GYn65j7pvZL/ZfEiTIF0zV+nCr/z5fPoxiToejKWR6AXWjt9Ty9W5M +l2BeDt2kP6Co+zzl/dHj+P17B5QdT3DeGrhJ1c0AYXSFbwlKd7lgGdW/U2VGN9A exjgIUIVyYzoSVLmKZkvmYPdh6SF+DyzoZRF00VHy08Dv8qpaGyBv4KT7YAgJbqN KLFkzwRCzSZPYURYnCsZ =PKmT -----END PGP SIGNATURE----- </pre>