Actions

Dev/Torified Wi-Fi Hotspot

From Whonix

< Dev



Reputational Considerations[edit]

  • For now Whonix ™ has a simple design and great reputation. At time of writing, no clearnet IP leak found ever. See Whonix ™ Protection against Real World Attacks.
  • If that gets mixed with android-anyting, the quality if leak protection could be lower due to issues causes on the Android, not Whonix ™ side.

Torified WiFi Hotspot[edit]

Even if a WiFi USB stick was added to Whonix-Workstation ™... Possible causes for clearnet leaks on the Android side:

  • The WiFi could go off / out of range. Then the device might jump to an untorified open WiFi.
  • Users might turn off WiFi off while forgetting to keep mobile network (clearnet) turned off.
  • madaidan:

    The mobile device wouldn't be isolated from local networks though. Nothing stops it from bruteforcing your neighbour's WiFi and deanonymizing you that way. Unlike in a Whonix ™ workstation VM, where it can't access those.

  • Adding all the security challenges of WiFi.
    • A 1) insecure WiFi + TLS is less of a problem than 2) insecure WiFi connection to Whonix-Gateway which would be even more of an issue. 1) could still be OK because TLS secures the contents of the connection. But 2) could be used to de-anonymize the user.
  • Using a stock android device once non-anonymously, then routing all traffic over Tor would not be as anonymous as expected due to TransparentProxyLeaks [archive].

forum discussion: https://forums.whonix.org/t/whonix-gateway-whonix-workstation-torified-wi-fi-hotspot/4751 [archive]

Using VPN[edit]

A VPN tunnel from Android to Whonix-Gateway ™ or Whonix-Workstation ™.

Many Android phones do not have a fail closed mechanism. When the VPN connection gets interrupted, device continues to connect without VPN.

Related[edit]



Fosshost is sponsors Kicksecure ™ stage server 100px
Fosshost About Advertisements

Search engines: YaCy | Qwant | ecosia | MetaGer | peekier | Whonix ™ Wiki


Follow: 1024px-Telegram 2019 Logo.svg.png Iconfinder Apple Mail 2697658.png Twitter.png Facebook.png Rss.png Reddit.jpg 200px-Mastodon Logotype (Simple).svg.png

Support: Discourse logo.png

Donate: Donate Bank Wire Paypal Bitcoin accepted here Monero accepted here Contribute

Whonix donate bitcoin.png Monero donate Whonix.png United Federation of Planets 1000px.png

Twitter-share-button.png Facebook-share-button.png Telegram-share.png link=mailto:?subject=Dev/Torified Wi-Fi Hotspot&body=../Dev/Torified_Wi-Fi_Hotspot link=https://reddit.com/submit?url=../Dev/Torified_Wi-Fi_Hotspot&title=Dev/Torified Wi-Fi Hotspot link=https://news.ycombinator.com/submitlink?u=../Dev/Torified_Wi-Fi_Hotspot&t=Dev/Torified Wi-Fi Hotspot link=https://mastodon.technology/share?message=Dev/Torified Wi-Fi Hotspot%20../Dev/Torified_Wi-Fi_Hotspot&t=Dev/Torified Wi-Fi Hotspot

Want to help create awesome, up-to-date screenshots for the Whonix ™ wiki? Help is most welcome!

https link onion link Priority Support | Investors | Professional Support

Whonix | © ENCRYPTED SUPPORT LP | Heckert gnu.big.png Freedom Software / Osi standard logo 0.png Open Source (Why?)

The personal opinions of moderators or contributors to the Whonix ™ project do not represent the project as a whole.

By using our website, you acknowledge that you have read, understood and agreed to our Privacy Policy, Cookie Policy, Terms of Service, and E-Sign Consent.