Andrew David Wong: > On 2016-06-08 00:14, Albin Otterhäll wrote: >> I'm assuming that if you connect to Tor using the same Whonix >> gateway (e.g. "sys-whonix"), you get the same "identity" (IP, etc.) >> on both your workstations. Is this correct? > > > Not entirely. By default, stream isolation applies to different > workstations and to any supported apps in those workstations. This > means that every VM connected to sys-whonix will (and every supported > app in those VMs) will use a different circuit through the Tor > network, hence a different exit node, hence have a different IP address. > > However, there are still side-channel attacks that can be used to > correlate multiple workstations running on the same host (stressing > hardware and observing the effects in all workstations, clock skew, > network timings, etc.). > > Details: > https://www.whonix.org/wiki/Multiple_Whonix-Workstations > https://www.whonix.org/wiki/Stream_Isolation > >
What Andrew said. Some nitpicking: There is no guarantee that you will have a different exit node (or even a different circuit). It's random so you might wind up with the same but not intentionally. Also, Tor Browser has stream isolation features of its own, such as separate circuits per tab and new circuits after a set time interval. Finally, non-stream-isolated (meaning non-tor-proxified) apps in the *same* workstation will share the same circuit since they will route through Whonix-Gateway's Transparent Proxy Port (TransPort). The TransPort can be disabled to prevent this. (Instructions in Andrew's links). ------------------------------------------------- ONLY AT VFEmail! - Use our Metadata Mitigator to keep your email out of the NSA's hands! $24.95 ONETIME Lifetime accounts with Privacy Features! 15GB disk! No bandwidth quotas! Commercial and Bulk Mail Options! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/57586A08.1050606%40vfemail.net. For more options, visit https://groups.google.com/d/optout.
