To read all comments associated with this story, please click here.
They should have read and followed this: http://www.slideshare.net/grugq/opsec-for-hackers :-)
Yes, my comment was of general nature rather. Not too specifically about Whonix itself.
What I meant, was: such "anonymyzing networks" can be established especially for tracking down the individuals, wanting to hide their identity. Instead of tracking entire Internet - it's easier to create TOR-like network, bid welcome to all those wanting to remain anonymous - and just read the logs. Police, or some other secret services can establish such "TOR"-s exactly as honeypots.
The wikipedia page covers some weaknesses of tor.
http://en.wikipedia.org/wiki/Tor_%28anonymity_network%29#We...
One is getting the client to hand out some identifying information, such tor's encryption is irrelevant. But whonix looks like it should be fairly well protected from this particular problem.
Another issue is that tor is susceptible to statistical analysis by trojan peers in the tor network. The tor protocol itself cannot guarantee any anonymity if the peers are ratting out statistical details.




Member since:
2008-08-28
On one hand: they assure, that "not even malware with root rights can find out the user's real IP/location". But on the other hand: if someone wants to hide his identity so much, should be aware, that it'll still remain known to... "anonymizing network" admins.
It can be used as kind of "honeypot".