Live data from Hacker News

Tails 3.0 Released

tails.boum.org

11–20 of 79 posts

Re: Tails 3.0 Released

#14
post #12

For the love of Christ don't use Tor Browser. Every other modern browser, including mainline Firefox, is safer.

From another comment elsewhere in this thread:

> Update Tor Browser to 7.0 (based on Firefox 52 ESR) which is multiprocess and paves the way to content sandboxing. This should make it harder to exploit security vulnerabilities in the browser.

Firefox 52 ESR sounds like mainline Firefox to me.

Re: Tails 3.0 Released

#15
post #10

https://tails.boum.org/news/version_3.0/index.en.html#news-v... says you should run "uname -m" under Tails to see if "your computer is 64-bit". How does that work? Does Tails automatically choose kernel version appropriate for your hardware, or what?

[deleted]

Re: Tails 3.0 Released

#17
post #2

Those two changes seem particularly important: * Tails 3.0 works on 64-bit computers only and not on 32-bit computers anymore. Dropping hardware support, even for a small portion of our user base, is always a hard decision to make but being 64-bit only has important security and reliability benefits. For example, to protect against some types of security exploits, support for the NX bit is compulsory and most binarie…

I wonder if this will effect journalists and activists in parts of the world where old machines are still used (Africa, Middle East, parts of Asia). Not being able to make use of newer browser versions (without updating every time or taking the risk of using a persistent volume) could put them at greater risk.

Previous versions of Tails already had exuberant hardware requirements.

I guess privacy is only for the rich.

Re: Tails 3.0 Released

#18
post #12

For the love of Christ don't use Tor Browser. Every other modern browser, including mainline Firefox, is safer.

do you suggest I should be running Firefox in Tails?

The safer solution is to run the modern browser of your choice (probably chrome) in an isolated VM routed through a torified gateway. Hardware isolation would of course be preferable.

If you're using Tails you'd probably be much better off using Whonix instead.

With Tails, an attacker capable of breaking your browser will m̶o̶s̶t̶ ̶l̶i̶k̶e̶l̶y̶ definitely also be capable of easily grabbing your IP address.

Re: Tails 3.0 Released

#19
post #17

Earlier quoted context omitted.

I wonder if this will effect journalists and activists in parts of the world where old machines are still used (Africa, Middle East, parts of Asia). Not being able to make use of newer browser versions (without updating every time or taking the risk of using a persistent volume) could put them at greater risk.

Previous versions of Tails already had exuberant hardware requirements. I guess privacy is only for the rich.

Yeah, this is a consequence of limited resources. In an ideal world, the good guys would have resources for all the things, I guess.

Re: Tails 3.0 Released

#20
post #12

For the love of Christ don't use Tor Browser. Every other modern browser, including mainline Firefox, is safer.

I'm not necessarily doubting you, but I wonder if you can say why you think the Tor project is distributing such an unsafe browser? If that's a very poor decision, does it call into question other decisions the project has made?
Post reply on HN