Hello David, I'm well aware of Mat2 it's a great tool, and have heard about the GUI "Metadata Cleaner" for it no longer being maintained.
Will Mat2 remove PII from flat files and structured databases? That is more what I'm looking at I know there is some kind of python libraries used for this and I thought there was GUI tool somewhere but maybe I'm getting confused with ones that are for local management of websites or self hosting. GreyFedora On Sunday, April 20th, 2025 at 04:33, [email protected] <[email protected]> wrote: > Send Tails-dev mailing list submissions to > [email protected] > > To subscribe or unsubscribe via the World Wide Web, visit > https://www.autistici.org/mailman/listinfo/tails-dev > or, via email, send a message with subject or body 'help' to > [email protected] > > You can reach the person managing the list at > [email protected] > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Tails-dev digest..." > > > Today's Topics: > > 1. No data masking tools included? (GreyFedora) > 2. Re: No data masking tools included? (David A. Wheeler) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 19 Apr 2025 19:20:52 +0000 > From: GreyFedora [email protected] > > To: "[email protected]" [email protected] > > Subject: [Tails-dev] No data masking tools included? > Message-ID: > Q8aaZ5zOGOde2Un6FVou1wr7SPNLJFIIL09csI5m5dTCd4ed7R4x74TjPiiheWmRmvjIJvONo1bxzTnWlMjgoQrMmdnxB_220kXVJCk99aA=@proton.me > > > Content-Type: text/plain; charset="utf-8" > > How come no tools included in Tails to remove PII from database files or data > masking software to protect confidential sources in whistleblowing or leaking? > > > thankee, > > GreyFedora > -------------- next part -------------- > HTML attachment scrubbed and removed > -------------- next part -------------- > A non-text attachment was scrubbed... > Name: publickey - [email protected] - 0xEAE0D34E.asc > Type: application/pgp-keys > Size: 661 bytes > Desc: not available > URL: > https://lists.autistici.org/list/tails-dev.html/attachments/20250419/2097ebd5/attachment.key > > -------------- next part -------------- > A non-text attachment was scrubbed... > Name: signature.asc > Type: application/pgp-signature > Size: 343 bytes > Desc: OpenPGP digital signature > URL: > https://lists.autistici.org/list/tails-dev.html/attachments/20250419/2097ebd5/attachment.sig > > > ------------------------------ > > Message: 2 > Date: Sat, 19 Apr 2025 17:43:00 -0400 > From: "David A. Wheeler" [email protected] > > To: The Tails public development discussion list [email protected] > > Cc: GreyFedora [email protected] > > Subject: Re: [Tails-dev] No data masking tools included? > Message-ID: [email protected] > > Content-Type: text/plain; charset=us-ascii > > > On Apr 19, 2025, at 3:20 PM, GreyFedora via Tails-dev [email protected] > > wrote: > > > > How come no tools included in Tails to remove PII from database files or > > data masking software to protect confidential sources in whistleblowing or > > leaking? > > > Hi! I'm not a Tails maintainer, but I can take a stab at answering this > question > based on observations of this mailing list. A real Tails maintainer can give > you > a more definitive answer. > > 1. Generally the Tails maintainers want to only add software that is already > packaged in Debian. Thankfully, metadata-cleaner meets this requirement. > 2. That software must be maintained. That's a problem. On 2025-01-23 in > message "Metadata Cleaner is looking for a new co-maintainer" it was noted > that > "Unfortunately, the future of Metadata Cleaner is compromised: it has > no active maintainer anymore." > 3. Generally the Tails maintainers are trying to strike a balance. They want > to provide > enough 'general use" functionality so you don't have to install anything > else, but each > package they add potentially adds new attacks, so they don't want to add too > much. > > Details below. I hope that helps. > > --- David A. Wheeler > > === Details === > > Currently you can get this functionality by installing the package > metadata-cleaner, which is a GTK GUI frontend for mat2. > I've never used it, and I have no idea how good it is. A few comments here: > https://www.omglinux.com/metadata-cleaner-app-for-linux/ > I suggest you investigate it, examining its results, and report back on > how well it works. It'd be great if you could find or create a test suite > to see how well it really does remove metadata. That would address point 1. > > I don't know if anyone has stepped up to implement point 2. That > matters obviously :-). > > You could also investigate how much more code it adds & whether or not > this is widely-needed functionality, meeting point 3. I could see this > software > meeting the bar for point 3 ("it is widely useful for intended users"). > Reporters would often need this in particular to justify claims while > shielding sources. > > I could especially see an argument for it if the > Tails developers take additional steps to harden the software > (e.g., implement bubblewrap on some of the lower-level functions and/or > recompile some C code with hardened options like those identified by > OpenSSF). > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > Tails-dev mailing list > [email protected] > https://www.autistici.org/mailman/listinfo/tails-dev > > > ------------------------------ > > End of Tails-dev Digest, Vol 179, Issue 10 > ****************************************** _______________________________________________ Tails-dev mailing list [email protected] https://www.autistici.org/mailman/listinfo/tails-dev To unsubscribe from this list, send an empty email to [email protected].
