-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 19/02/2019 8.12 PM, unman wrote:
> On Sun, Feb 17, 2019 at 08:50:01PM +0100, r...@posteo.net wrote:
>> On 2/17/19 10:49 PM, jrsmi...@gmail.com wrote:
>>> Reading through the post questioning the trustworthiness of 
>>> Whonix, I can't tell whether we can continue trusting/using 
>>> Whonix or not.  Can someone (preferably in a position to speak 
>>> for QubesOS), please state, in a straightforward and 
>>> unambiguous manner, spell this out for us?
>> 
>> Personally, I don't trust Whonix. The decision to not trust 
>> Whonix is not based on the sysadmin/aussie issue that came up 
>> recently on the list. I'm simply not convinced that they are 
>> capable of designing and writing secure software. Furthermore, 
>> there is no reason to use whonix in the first place, especially 
>> when you are using Qubes. Creating a tor netvm is rather
>> straight forward (and a dispvm that includes the Tor Browser if
>> you like to use that as well). If there is enough interest, I can
>> also write up a summary on how to do that in Qubes.
>> 
>> Regards
> 
> Have you looked at the qubes-tor package and 
> www.qubes-os.org/doc/torvm? - that page is removed from the menu 
> but still available. The qubes-tor package is OK but with some 
> tweaking makes a solid replacement for Whonix gw - certainly for 
> live images and machines with limited RAM. imo the decision to 
> deprecate that package and then remove all reference to it from
> the docs was a mistake.
> 
> unman
> 

It's not true that all reference to TorVM was removed from the docs.
In fact, the intro section of our main Whonix page specifically
mentions TorVM and links to the the TorVM page. [1]

As you know, the decision to deprecate TorVM was years ago, [2][3] and
it's been unmaintained ever since. Using it now could be dangerous,
unless you really know what you're doing.


[1] https://www.qubes-os.org/doc/whonix/
[2] https://github.com/QubesOS/qubes-issues/issues/1196
[3] https://github.com/QubesOS/qubes-issues/issues/1201

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEZQ7rCYX0j3henGH1203TvDlQMDAFAlxxpKUACgkQ203TvDlQ
MDAfIhAAni1qEcGYUJZ2Rvr7mzlenxY4BAY/I5fxm+ROZpMxWMmkJBJGHvRoPn8b
W39f+d1WRH6RXCb9xsoJ9up4fTs05ZmjD8mULwoy5ugh58lYLfipTJwGyOLReQnM
DtkpWhmLxGF8O8U3ndjZJLOBSg73EmnlxsyDwLdBdVkqSfzCS++pdPlpjEgjfjSy
H8gBX+YnBuev/hUdTDBYsLsoHy35uIlq/AWkULLv+Md8zLh9fCfqHYsvRNdbUFfA
7aCv/9M2KwNZyWAr8hjhVyncPaqKHupaROv3bRN9sKCiH3vjFapNb44FRTMO1cb7
NytBgwR2mimluXvYFgFhOq7RzRgejmB1ZeNvmV98FFOJAOlE/Wadc4BIPd77aRWk
z6lZCcUz7OfoAUYfO2FqlGhJJjLsSX8qMcnv2hNTHRBbj7SLDsXisoBIxXpVHDTi
zFCU/d8UimN9gOodybfF4TxkwG3taRO7GmDzhZJMx2S3uzqZpgAO9qut8lzZAevl
SH3grIuANK3BBkqi+2QcXuKByxljVTjiZocxwjdmJP3a5pgG258zTxn43+QW2PU5
WB1/maSXyColKLHcimypxTpBHFNw/EjecqUiCWFMZgQAlsLYjjfA87O7pg5/YnYf
ICPz6EW9Chb2wP3ULSIcwnXkm6q22HpsUfTzk9Ld2fbx8RWyJAg=
=6ucB
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/28874664-abb4-6d34-a5ae-7a35d62fd592%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Reply via email to