Re: [Tails-dev] Searching documents in an airgap Tails
On 2018-06-09 05:34, sajolida wrote: > drw...@riseup.net: >> On 2018-06-04 16:20, u wrote: The discussion we had maybe in the open or maybe in the backchannels was, could we maintain some kind of "journalist pack" for persistence where we package these tools somewhat and these things install when you setup your persistence. >>> >>> I think it'd be useful to identify some of these tools, and propose them >>> when people launch the Additional Software Feature GUI for the first >>> time. Also see https://tails.boum.org/news/test_asp-beta/index.en.html >> >> Sure thing! Could you create a blueprint for this? Thanks! > Could you call it: searching_documents_additional_software > I haven't followed this thread at all so could you tell me how you want > your blueprint to be called? > > https://tails.boum.org/blueprint/??? Thanks! ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
Re: [Tails-dev] Searching documents in an airgap Tails
On 2018-06-04 16:20, u wrote: > Hi! > > DrWhax: > >> The discussion we had maybe in the open or maybe in the backchannels >> was, could we maintain some kind of "journalist pack" for persistence >> where we package these tools somewhat and these things install when you >> setup your persistence. > > I think it'd be useful to identify some of these tools, and propose them > when people launch the Additional Software Feature GUI for the first > time. Also see https://tails.boum.org/news/test_asp-beta/index.en.html Sure thing! Could you create a blueprint for this? Thanks! > >> We would also maintain some sort of deb repo for this. Maybe this could >> even be a way to get some funding in from bigger organisations and a way >> to support them in software! (crazy thought) > > I don't think we should maintain a deb repo for this. Instead, let's > identify some useful candidates we could propose to install in our > documentation on top of what I said above. Yes, that makes sense for now, even though some of these tools aren't packaged for Debian. But, let's put this all on the blueprint and see what comes out of it. Cheers, DrWhax ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
Re: [Tails-dev] Build Tails on MacBook 2015?
On 2018-06-08 15:49, u wrote: > > > >> Any chance to build Tails natively on macOS, without any VM? Unfortunately I >> don’t own any other hardware as of now. > > I cannot answer this question, but I believe not. > This is correct, building Tails natively on MacOS is not something that is supported. More information on how to build on Debian stretch here: https://tails.boum.org/contribute/build/ Cheers, ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
Re: [Tails-dev] Electrum in Tails has a serious bug
Hi Amir, Please see: https://labs.riseup.net/code/issues/15022 Thanks On 2018-02-06 13:17, Amir Taaki wrote: > Dear Tails developers, > > The current version of Electrum in Tails (2.7) has an attack vector via > open RPC with password-less wallets. > > Because Tails has encrypted persistence, many users are likely to use > Electrum on Tails without password protection. > > For more information, see here: > > https://github.com/spesmilo/electrum-docs/blob/master/cve.rst > > Fix: update the Electrum version to the current tarball on the download > page (3.0.6). > > Best regards and respect for your continued efforts, > Amir > ___ > Tails-dev mailing list > Tails-dev@boum.org > https://mailman.boum.org/listinfo/tails-dev > To unsubscribe from this list, send an empty email to > tails-dev-unsubscr...@boum.org. ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
Re: [Tails-dev] Searching documents in an airgap Tails
Hi, Is Tracker something that would actually be useful for journalists? Do you know of any case studies where it has proved useful? I think it's probably more useful to have a discuss ticket how to cater the needs of journalists better, than integrating something that might not be useful. What do you think? Best, Loic Dachary: > Hi, > > Do tails developers advise me to: > > a) create a feature request at > https://labs.riseup.net/code/projects/tails/issues/new for the inclusion of > tracker[1] in Tails and continue the discussion there > > b) keep discussing the general problem on this list instead of going for a > tentative improvement (including tracker) even before there is positive > feedback to go in this direction > > Please forgive me if that's a newbie question, still learning the best way to > communicate :-) > > Cheers > > [1] https://wiki.gnome.org/Projects/Tracker ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
Re: [Tails-dev] Searching documents in an airgap Tails
Hi, I had some discussions with some of the people supporting the journalists working on the Snowden archives and journalists using tools. Some of them are custom written and only do one job, take out all the "speaker notes" for example in powerpoint presentations (don't ask). Most of that stuff isn't packaged in Debian and they have to install it themselves. The discussion we had maybe in the open or maybe in the backchannels was, could we maintain some kind of "journalist pack" for persistence where we package these tools somewhat and these things install when you setup your persistence. We would also maintain some sort of deb repo for this. Maybe this could even be a way to get some funding in from bigger organisations and a way to support them in software! (crazy thought) I don't think we reached any conclusion or actionable points so thanks for starting this discussion again and I hope my blurp is good for something. Best, Jurre Loic Dachary: > Hi, > > Journalist using SecureDrop decrypt and read documents in an airgap Tails. I > wonder which tools are available to search the documents stored in their > persistence. Maybe this topic was discussed somewhere already ? Looking for > "search engine" and other similar words in readmine[1] points to numerous > entries related to web search engines, reason why I may have missed something > focused specifically on this problem. > > Ideally Tails would come with the best search tools there is for Debian > GNU/Linux. But ... the footprint of these tools may be too much to impose on > all Tails users since journalists are a minority. Even if we care very much > about investigative journalists working on airgap machines, adding hundreds > of mega bytes to the Tails ISO could have a negative impact for the majority > of use cases. > > An alternative would be to add those tools in the persistence so they are > installed on every reboot[2]. While this is a fine temporary solution or when > the the packages are small, it significantly increases the boot time (because > packages are re-installed on boot). And there is no documented upgrade path > for these packages. It may be the case that this eventually improves as part > of rethinking the installation and upgrade process[3] though. > > Any advice you may have, things I could do to move forward, would be most > welcome :-) > > Cheers > > [1] https://labs.riseup.net/code/projects/tails/issues > [2] > https://tails.boum.org/doc/advanced_topics/additional_software/index.en.html > [3] Rethink the installation process and upgrade process > https://labs.riseup.net/code/issues/11679 > ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
Re: [Tails-dev] Create random seed at installation time with Tails Installer
intrigeri: > kurono: >> * The natural place to put it is in the usual seed file, inside the >> Tails file system (filesystem.squashfs). But this would imply to extract >> the image, change the file, and create a new image, which would be a lot >> of extra work. Another disadvantage is that it makes any further file >> integrity checking impossible. > > Ouch, no, let's not do that. > >> * The other option is to locate it outside of the tails file system, > > You mean in the FAT filesystem that Tails Installer creates, right? > If yes, then this seems like the best option. Another option would be > somewhere in the GPT (IIRC someone researched that). > >> let say the "binary" part, and link the random init script to this >> file, only if we are creating it by the installer. > > I guess checking for this file's existence is enough. > >> I don't know if this last option is even possible. >> Are there already some examples of it? Maybe the syslinux, etc? > > Yes, Tails Installer already creates / renames / mangles files in the > FAT filesystem after extracting the content of the ISO filesystem. > > Just curious: > > * When do we update the content of this file? > * What's the plan for upgrades of the Tails USB stick? > > Cheers, > Maybe this requires a blueprint? :) Thanks for working on this kurono! Cheers, DrWhax ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
Re: [Tails-dev] Tails 3.0
On 2017-01-25 20:18, Silkie Carlo wrote: Thanks for your replies. Given the pool, albeit small, of some very high risk users who rely on using Tails with 32bit machines, might there be an interest in maintaining a specific Tails version for that purpose? Thanks again, Silkie Hi, Tails will not. However, if you want, you could maintain such a derivative. https://tails.boum.org/contribute/derivatives/ Sorry! ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
Re: [Tails-dev] Tails 3.0
On 2017-01-17 11:47, Silkie Carlo wrote: Hi, Will Tails 3.0 and updates beyond that be only for 64-bit computers? Many high risk users are using Tails with Thinkpad X60s and other, older modified 32-bit machines. Thanks a lot, Silkie Hi, Yes, our plan is to switch to 64-bit only Tails releases and drop the 32-bit users since there aren't as many as there used to be. Some of the rationale can be found here: https://labs.riseup.net/code/issues/8183 I guess your best bet is to find those hard to find x60 64-bit motherboard + cpu... Best, DrWhax ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
Re: [Tails-dev] [Tails-project] Working on Persistence Seed PRNG
bertagaz: > Hi, > > On Thu, Oct 06, 2016 at 08:27:20PM +0000, DrWhax wrote: >> Reminder that we have a meeting on Friday, October 7th. > > Sorry this email ended in the wrong mailbox, so I missed it and did not > find it when I tried to find back when was this meeting. :/ > > Did it happen, with some results? Is there another one planed? No problem. kurono added a section with: "Use the Tails installer to create a better seed" to the blueprint: https://tails.boum.org/blueprint/randomness_seeding/ I propose to have the next meeting on the first friday of November, it being the 4th at 12:00 again. We haven't reached a conclusion as of yet. I'd like a dedicated meeting in December when we have concluded most of our research and read in before that so it's a nice and effective meeting! Cheers! ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
Re: [Tails-dev] Working on Persistence Seed PRNG
Hi, Reminder that we have a meeting on Friday, October 7th. Cheers! drwhax: > Hi, > > We had a very efficient meeting in September with 5 people discussing some of > the > proposed solutions listed on the blueprint. We divided tasks and plan to > discuss them in a next meeting. > > This is to announce a new meeting for those interested. We'll be working > on: "Investigate whether we should resume shipping a random seed"[1]. > > Time and place is: > > October 7th 2016, 12:00 - 14:00 (Paris/Amsterdam/Berlin time) > This meeting is open to everyone and is being held at: > tails-...@conference.riseup.net (XMPP) > > The goal of this meeting is to discuss work that has been done by volunteers, > update the blueprint with our findings based on the work and announce a new > meeting date. > > Report back from: > > - Use the Tails installer to ship a seed to users #7675 > - Analyze early boot entropy gathering #11758 > > Please make sure that the blueprint/tickets are updated before the meeting. > > Best, > > Jurre > > [1] https://labs.riseup.net/code/issues/7642 > > [2] https://tails.boum.org/blueprint/randomness_seeding/ > ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
[Tails-dev] Working on Persistence Seed PRNG
Hi, This is to announce a meeting for those interested on Friday, September 2th where we'll be working on: " Investigate whether we should resume shipping a static random seed"[1]. In addition to our blueprint[2] Please study some of this before we'll have the meeting! * September 2rd 2016, 12:00 - 14:00 (Paris/Amsterdam/Berlin time) The goal of this meeting is to have a clear understanding on where we stand and to divide tasks in addition to scheduling a follow-up meeting. Best, dr [1] https://labs.riseup.net/code/issues/7642 [2] https://tails.boum.org/blueprint/randomness_seeding/ ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
Re: [Tails-dev] Why Tails partition is non-deterministic?
> Hi, >>//>>/Joanna Rutkowska: />>/dd if=/dev/sda1 | sha1sum />>// > I love you XD > Wordlife, > Spencer Spencer, I'll do this publicly, this is against our code of conduct, see https://tails.boum.org/contribute/working_together/code_of_conduct/ Please refrain from unwanted sexual attention. Sorry Joanna :( Best, Jurre ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
Re: [Tails-dev] Tails template for Qubes
On 05/31/2016 06:33 PM, sajolida wrote: > I just wanted to let you know that people from Qubes started a ticket > about having a Tails template for Qubes. I never used Qubes myself and > barely understand what this means but I'll follow the ticket and maybe > others interested in Qubes should do to: DrWhax, anonym? > > https://github.com/QubesOS/qubes-issues/issues/2024 I subscribed to the ticket. ___ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.
