Git-Mirrors/anarsec.guide
1
0
Fork 0
mirror of https://0xacab.org/anarsec/anarsec.guide.git synced 2025-08-05 04:54:29 -04:00
Code Issues Projects Releases Packages Wiki Activity

arrows replace >

Browse source
This commit is contained in:
anarsec 2023-06-29 18:40:17 +00:00
parent 5589c4ed6e
commit e50b0f2188
No known key found for this signature in database
5 changed files with 31 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

14
content/posts/e2ee/index.md
View file

@ -146,10 +146,10 @@ Some of [Signal Configuration and Hardening Guide](https://blog.privacyguides.or
Signal Desktop on Whonix is not guaranteed to have Tor Stream Isolation from other applications in the same qube, so we will install it in a dedicated qube. Signal Desktop is installed in a Template, not an App qube (because it is available as a .deb from a third party repository).
* Go to **Applications menu > Qubes Tools > Qube Manager**
* Go to **Applications menu → Qubes Tools → Qube Manager**
* Clone whonix-ws-16, and call it something like whonix-ws-16-signal.
* We do this to not add attack surface to the base Whonix Workstation template. If you also install other messaging applications like Element Desktop, they could share a cloned template with a name like whonix-ws-16-e2ee
* Open a Terminal in the new Template: **Applications menu > Template: whonix-ws-16-signal: Xfce Terminal**
* Open a Terminal in the new Template: **Applications menu → Template: whonix-ws-16-signal: Xfce Terminal**
* Run the commands in the [Signal install guide](https://www.signal.org/download/linux/) to install Signal Desktop in the Template.
* Note that the layout of the Signal install guide is a bit confusing for users unfamiliar with the command line; `wget` and `cat` are separate commands, but `echo` in #2 is one command that is so long it takes two lines (which is why the second line is indented).
* Template qubes require a proxy for `wget`. Before running the command, create a configuration file at `~/.wgetrc` in the Template, with the contents:
@ -159,7 +159,7 @@ http_proxy = 127.0.0.1:8082
https_proxy = 127.0.0.1:8082
```
* [Create an App qube](/posts/qubes/#how-to-organize-your-qubes) with the Template `whonix-ws-16-signal` and networking `sys-whonix`.
* In the new App qube's **Settings > Applications** tab, bring Signal into the Selected column, and press **OK**.
* In the new App qube's **Settings → Applications** tab, bring Signal into the Selected column, and press **OK**.
* Updates will be handled by **Qubes Update** as you would expect.
>**Alternative:** You can install Signal Desktop in a Whonix Workstation App qube by using [Qube Apps](https://micahflee.com/2021/11/introducing-qube-apps/), and you will not need to bother with Templates. Signal Desktop on Flathub is [community maintained](https://github.com/flathub/org.signal.Signal), not official, which [is a security consideration](https://www.kicksecure.com/wiki/Install_Software#Flathub_Package_Sources_Security).
@ -186,7 +186,7 @@ Matrix can either be used through a web client (using Element Web on Tor Browser
A matrix ID looks like @username:homeserver, so for example, @anarsec:riot.anarchyplanet.org. Just like email, you can message accounts that are on different homeservers.
As soon as you have logged in, go to **Settings > Security & Privacy**.
As soon as you have logged in, go to **Setting → Security & Privacy**.
* You will see that under **Where you're signed in** it lists all signed-in devices. For anonymous use cases, you will generally only be signed-in on one device.
* Scroll down to **Secure Backup**. This is a feature that allows you to verify a new session without having access to a signed-in device. Press **Set up**, then the **Generate a Security Key** choice. Save the Security Key in KeePassXC. This "Security Key" will be needed for logging into a new device or session.
* For Element Desktop, you will only need to use the Security Key if you sign out.
@ -222,10 +222,10 @@ The easiest option is to use the Element web client on Tor Browser is a disposab
To install Element Desktop, Whonix is not guaranteed to have Tor Stream Isolation from other applications in the same qube, so we will install it in a dedicated qube. Element Desktop is installed in a Template, not an App qube (because it is available as a .deb from a third party repository).
* Go to **Applications menu > Qubes Tools > Qube Manager**
* Go to **Applications menu → Qubes Tools → Qube Manager**
* Clone whonix-ws-16, and call it something like whonix-ws-16-element.
* We do this to not add attack surface to the base Whonix Workstation template. If you also install other messaging applications like Signal Desktop, they could share a cloned template with a name like whonix-ws-16-e2ee
* Open a Terminal in the new Template: **Applications menu > Template: whonix-ws-16-element: Xfce Terminal**
* Open a Terminal in the new Template: **Applications menu → Template: whonix-ws-16-element: Xfce Terminal**
* Run the commands in the [Element install guide](https://element.io/download#linux) to install Element Desktop in the Template.
* Template qubes require a proxy for `wget`. Before running the command, create a configuration file at `~/.wgetrc` in the Template, with the contents:
```
@ -234,7 +234,7 @@ http_proxy = 127.0.0.1:8082
https_proxy = 127.0.0.1:8082
```
* [Create an App qube](/posts/qubes/#how-to-organize-your-qubes) with the Template `whonix-ws-16-element` and networking `sys-whonix`.
* In the new App qube's **Settings > Applications** tab, bring Element Desktop into the Selected column, and press **OK**.
* In the new App qube's **Settings → Applications** tab, bring Element Desktop into the Selected column, and press **OK**.
* Updates will be handled by **Qubes Update** as you would expect.
* Avoid pressing "Sign Out", simply shutdown the qube when finished.