[tor-talk] Whonix Anonymous Operating System Version 7 Released!

[adrelanos]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Whonix is an operating system focused on anonymity, privacy and
security. It's based on the Tor anonymity network, Debian GNU/Linux
and the principle of security by isolation. DNS leaks are impossible,
and not even malware with root privileges can find out the user's real IP.

Whonix consists of two parts: One solely runs Tor and acts as a
gateway, which we call Whonix-Gateway. The other, which we call
Whonix-Workstation, is on a completely isolated network. Only
connections through Tor are possible.

Download: https://www.whonix.org/wiki/Download

Users of Whonix 0.5.6 and below:

There is no upgrade path from Whonix 0.5.6 to Whonix 7. You have to
manually download new Whonix images.

Call for Help:

If you know shell scripting (/bin/bash) and linux sysadmin, please
join us! There are plenty of ways to make Whonix safer. We are also
looking for an https direct download mirror.

Whonix 7 Changelog:

* Updated Tor to 0.2.4.

* Installed obfs3 by default. (for obfsproxy bridges)

* New Identity button on Tor Browser is now functional thanks to the
Control Port Filter Proxy (#3).

* Tor Browser is now the system default browser (#86). In addition,
when opening a link or an html file it will ask for confirmation to
avoid accidental linking. (configurable)

* Graphical Whonix-Gateway (#26). Optionally, if you reduce
Whonix-Gateway RAM to below 500 MB, let's say to 128 MB, you
automagically end up with the usual non-graphical Whonix-Gateway.
(configurable)

* Whonix now includes an updater. It can not be promised that you will
never have to download a new image for next stable releases, but we
are on that way. Interested testers may have to download images of
testing releases from time to time.

* Tor networking is disabled for the first start of Whonix-Gateway.
The connection wizard (whonixsetup) will automatically start to help
enabling Tor or setting up bridges. This is useful for people using
bridges to connect to the Tor network to hide the fact that they are
using Tor.

* The current Tor Browser Bundle (TBB) Alpha, which will soon become
the new TBB stable, will work out of the box in Whonix, even if you
download and install it manually from torproject.org. This is useful
for the case that the Whonix Tor Browser updater breaks due to changes
on torproject.org. Tor over Tor situation will be automatically
prevented on manual installs.

* Boot Clock Randomization.

* Time Sanity Check.

* Higher console resolution: 1024x768 (without X).

* Disabled the throw-keyids option on gpg.conf due to usability
issues. Enable it manually if you need it.

* Fixed uwt. To do certain tasks such as installing the Adobe Flash
plugin or running update-command-not-found you no longer need to
"chmod -x /usr/local/bin/curl".

* Deactivated the kgpg tray icon by default (#10), not perfect, but
less confusing, since it will now start in foreground by default and
no longer as tray icon (which was automatically and confusingly hidden
by default).

* Downloading Tor Browser and signature from idnxcnkne4qt76tg.onion
instead of torproject.org for better security when run inside Whonix.

* Time Privacy wrapper (optional).

* Enable "apparmor=1 security=apparmor" by default (didn't enable
enforce mode or add any useful profiles yet).

* Manpages for scripts which come with Whonix.

* Flexible modular .d style configuration folders: /etc/whonix.d/,
/etc/whonix_firewall.d/, /etc/controlportfilt.d/.

* Moved blog to wordpress.com, better than sourceforge, because
wordpress.com supports SSL, closed #23.

* Lots of other improvements and bug fixes which can be found under
the git log.
-----BEGIN PGP SIGNATURE-----
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=ZfCc
-----END PGP SIGNATURE-----