Whonix
Whonix (/huːnɪks/, HOO-niks)[2] is a Linux distribution, based on Kicksecure OS, claimed to be security hardened by its developers.[3][4] Its main goals are to provide strong privacy and anonymity on the Internet.[5] The operating system consists of two virtual machines, a workstation and a Tor gateway running Debian. All communications are forced through Tor.[6][7][8]
Developer
Whonix Developers
Active
29 February 2012
17[1] / July 20, 2023
Personal Computing, Servers (onion service hosting)
Mainly the GNU GPL v3 and various other free software licenses
History[edit]
TorBOX (February – July 2012)[edit]
The initial concept was announced by Patrick Schleizer under the pseudonym Proper, and later changed to Adrelanos in 2012 before revealing his identity in 2014.[11][12] His idea was to leverage a virtual machine acting as a transparent proxy to route all Internet traffic through the Tor network. This would have allowed one to mask one's IP address, prevent DNS leaks and avoid having to configure proxy settings for individual applications (or ones who do not support them).[13]
TorBOX was at its beginning only a guide released on the Tor Project website which also provided some shell scripts.[14] Other contributors provided more information as TorBOX became more popular.[13][15]
As the project's complexity grew, leak tests became increasingly necessary. Some contributors developed utilities to automate many steps and improve user-friendliness. Nonetheless, maintaining the build instructions for TorBOX while simultaneously updating the shell scripts became too much of a burden for the developers, who decided to drop the manual creation instructions, migrating them and focusing exclusively on the shell scripts.[16]
Even then, complexity was still growing due to additional features or changes in line with security research. On March 25, 2012 with the release of TorBOX's 0.1.3,[17] the programmers agreed to completely automate the build process and improve codability with a change in the developing process, brought by a new website with better capabilities than the old project's wiki.[16]
The TorBOX/aos wiki listed seven released versions.[18] With the advent of the third release, Patrick Schleizer, acting under his pseudonym Proper, released his GPG public-key containing his contact information,[19]
The sixth version saw the first rename of the developer Proper to Adrelanos.[20] However, the former username was maintained on the Tor Website until the seventh and final version.[21]
Development of TorBOX continued until version 0.2.1, release July 16, 2012. The project was renamed the following day.[22]
Rename into AOS (July – September 2012)[edit]
Andrew Lewman (Then the Tor Project Executive Director[23][24]) privately advised Adrelanos to rename the project, stating that even if TorBOX mentioned on its website about being unaffiliated with the Tor Project, it was still being mistaken by some people. Adrelanos renamed the project aos, acronym of "anonymous operating system".[25]
The choice of the name aos was quickly regretted and described as "suboptimal" by adrelanos. He noted that search engines did not return relevant results due to the name being shared with many other acronyms. A secondary reason was the project's name being non-capitalized, which would have made it incompatible with the grammatical convention of capitalizing a word at the beginning of a sentence.[26]
No new releases were made under the name aos.
Whonix (September 2012 – present)[edit]
Adrelanos posted a request for suggestions on the tor-talk mailing list. His original idea was a name which would have made the purpose of the anonymous operating system clear and at the same time avoided confusion or trademark issues.[27] Nick Mathewson, Tor Project's co-founder debated the idea of having a self-explanatory name, stating that Tor was "doing okay" even without having a particularly descriptive name.[28]
While many suggestions were sent, Adrelanos concluded the post announcing the new name, Whonix, and publishing a signed message with his final decision on the project's website.[29][30] He reasoned that the name was unused and would have provided more results in search engines. Whonix is a compound of two words: who ("what person/s") and nix (a German word that means "nothing").[25]
Whonix 0.3.0, never released, was based on Ubuntu.[31] While Ubuntu was praised from a technical perspective, potential trademark issues would have complicated the distribution along the potential revocation of the license from Canonical. Complying with the terms requested by a rebranding[32] would have required work which was beyond the capability of the Whonix developers.[33] Moreover, the release of Ubuntu 12.10 was heavily criticized for the closer integration with the Amazon ecosystem and other privacy issues.[34][35][36][37]
The Whonix project recognized the privacy issues which would have caused a problem with the use of Ubuntu, and recommended against using it even on the host machine.[38]
The first release under the new name of Whonix happened with version 0.4.4, the first one since TorBOX 0.2.1.[39] It was rebased on Debian which is described by the project as being "a good compromise of security and usability".[40]
The second release, Whonix 0.4.5 was the first to be announced by adrelanos on the tor-talk mailing list.[41]
In a blog post published on January 18, 2014 on the Whonix wiki, adrelanos decided to give up his pseudonymity and using for the first time his real name, Patrick Schleizer.
Schleizer, a German citizen[42] stated the burden of maintaining his operational security. Also, he mentioned that both the USA and Germany are not persecuting their citizens for criticizing the government, concluding with a remark on the importance of speaking out in public and taking action.[43]
Porting to Qubes OS[edit]
In August 2014 a user called WhonixQubes announced on the qubes-users mailing list the first successful integration of Qubes OS version R2-rc2 and Whonix 8.2. Joanna Rutkowska, founder of Qubes OS, publicly stated her praise about the efforts.[44]
In June 2015, Rutkowska announced the reception of funding from the Open Technology Fund to further sponsor the porting work of Whonix to Qubes OS. The proposal to OTF was made initially in September 2014, after Rutkowska was approached by Michael Carbone, an employee of Access Now[45] and member of the Qubes OS team[46] who helped with the process.[47]
At the same time, Patrick Schleizer wrote about wanting to personally focus on the development of Qubes-Whonix.[48]
With the release of Qubes OS R3.0 in October 2015,[49] Whonix templates officially became available.[50]
Variants[edit]
Standalone[edit]
The standard version of Whonix can be used on many different platforms as host-machines, such as Windows, macOS, GNU/Linux and Qubes OS. It is downloadable in formats compatible with the most common hypervisors like VirtualBox, QEMU, KVM and Xen.[51] Whonix is reported to have experimental compatibility with VMware and Hyper-V, though not officially supported.[52][53]
The VirtualBox packages for both the Workstation and Gateway are distributed with the xfce desktop environment or in a headless "CLI" version.[54] They can be seamlessly combined.[55]
Anonymity is a complex problem with many issues beyond IP address masking that are necessary to protect user privacy. Whonix focuses on these areas to provide a comprehensive solution. Some features include: