Re: [Tails-dev] Why Tails partition is non-deterministic?

2016-08-08 Thread bertagaz
Hi,

[ Ignoring some kind of private answer sent here although it doesn't
belong to this list. ]

On Mon, Aug 08, 2016 at 09:32:17PM +0200, Joanna Rutkowska wrote:
> Is there any special reason why the partition where Tails installs itself is
> non-deterministic? It is thanks to differing timestamps on the filesystem.
>
> This posses a problem for a prudent user who would like to be able to verify
> Tails integrity, e.g. by typing:
> 
> dd if=/dev/sda1 | sha1sum
>
> This might be especially useful if one uses the stick on various computers and
> would like to verify if her USB stick holding Tails installs hasn't been
> modified (e.g. by a malicious BIOS). Yes, I'm aware that the first sector of 
> the
> disk (/dev/sda) would still differ thanks to different partition sizes.

Good question. Did you try and found out that only timestamps were
different? If it is, good news, means it may not be so hard to fix.
Would be nice if you could post your data on our bug tracker
(https://labs.riseup.net/code/projects/tails).

So far we've been focusing on tails-verifier (ticket #7496, waiting for
review...) for people to check their install, so I don't remember if we
explored this.

Bert.
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.

Re: [Tails-dev] Why Tails partition is non-deterministic?

2016-08-08 Thread Spencer

Hi,



drwhax:
sexual attention.



It is very hurtful to have my intentions decided for me ):

If the snip of code wasn't enough context: I am a fan of dd hacks (:

And as was said to emmapeel privately, love is for everybody XD

I love you, too.

Wordlife,
Spencer



___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.

Re: [Tails-dev] Why Tails partition is non-deterministic?

2016-08-08 Thread drwhax
> Hi,

>>//>>/Joanna Rutkowska: />>/dd if=/dev/sda1 | sha1sum />>//
> I love you XD

> Wordlife,
> Spencer


Spencer,

I'll do this publicly, this is against our code of conduct, see
https://tails.boum.org/contribute/working_together/code_of_conduct/

Please refrain from unwanted sexual attention.

Sorry Joanna :(

Best,
Jurre
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.

Re: [Tails-dev] Why Tails partition is non-deterministic?

2016-08-08 Thread Spencer

Hi,



Joanna Rutkowska:
dd if=/dev/sda1 | sha1sum



I love you XD

Wordlife,
Spencer



___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.

[Tails-dev] Why Tails partition is non-deterministic?

2016-08-08 Thread Joanna Rutkowska
Hello,

Is there any special reason why the partition where Tails installs itself is
non-deterministic? It is thanks to differing timestamps on the filesystem.

This posses a problem for a prudent user who would like to be able to verify
Tails integrity, e.g. by typing:

dd if=/dev/sda1 | sha1sum

This might be especially useful if one uses the stick on various computers and
would like to verify if her USB stick holding Tails installs hasn't been
modified (e.g. by a malicious BIOS). Yes, I'm aware that the first sector of the
disk (/dev/sda) would still differ thanks to different partition sizes.

Thanks,
joanna.


signature.asc
Description: PGP signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.

[Tails-dev] Tor 0.2.9.1-alpha (development series) has been uploaded to dist.torproject.org

2016-08-08 Thread Nick Mathewson
Hello, all!

I'm writing to inform you that Tor 0.2.9.1-alpha now officially
exists. The source release has been uploaded to
https://dist.torproject.org/
; please remember to check the signatures.

I'll be updating the website and sending an official announcement in a
few minutes or hours, but as usual the the packagers should get a
heads-up first.

peace,
-- 
Nick
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.

Re: [Tails-dev] Our Torbirdy patches needs refreshing

2016-08-08 Thread bertagaz
On Fri, Aug 05, 2016 at 11:41:37AM +0200, intrigeri wrote:
> bertagaz:
> > Since the 2.5 release, it seems one of our Torbirdy patches are fuzzy, which
> > makes the build of devel (and any branch based on it) fail.
> 
> I suspect you mean "since torbirdy 0.2.0-1~bpo8+1 was accepted in
> jessie-backports" (because this is likely to cause exactly the problem
> you're describing, while the 2.5 release is very unlikely to produce
> it), but I did not check closely yet.
> 
> u & bertagaz: see commits 1a791ff141b76a79e66dfbe5e1899908fe616587 and
> da6ac8bba70b5c14fb9665a671b09c4b83a9aaa9 on feature/stretch.

Yes, I didn't look at the upstream repo at first, so didn't see our
patches were merged. Congrats to the Icedove team!

bert.
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.

Re: [Tails-dev] Our Torbirdy patches needs refreshing

2016-08-08 Thread bertagaz
Hi again,

On Fri, Aug 05, 2016 at 11:44:27AM +0200, intrigeri wrote:
> u:
> > Question 1: how urgent is this?
> 
> In general: keeping the Git tree building is high priority because
> otherwise any development based on the branch that fails to build
> is blocked.
> 
> Right now: I don't know who's working on branches based on devel this
> week. Personally, I guess I'll fix that next time I am blocked by it,
> just like I did on feature/stretch, so _for me_ it's not urgent.

I needed devel to build so I fixed it myself. It meant removing our two
Torbirdy patches. That I did by merging myself my own branch for #11619,
that's bold but given the tiny change I guess that's not too much. I've
tested the autoconfig wizarr and didn't find any regression compared to
2.5 or 2.4. If someone (u?) wants to check again just un case, that'd be
nice. That also meant merging the Tor 2.8 branch, as it has been
released some days ago and our apparmor patch in devel wasn't up-to-date
anymore. Ironically, that's why I wanted devel to build at the first
place.

bert.
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.