Live data from Hacker News

Tails is a portable OS that protects against surveillance and censorship

tails.net

111–120 of 192 posts

Re: Tails is a portable OS that protects against surveillance and censorship

#111

Love Tails, but I haven't used it in ten years. I have had Tails and Qubes disposable VMs on my mind though. I switched off of Qubes last year to my own Alpine chroot with a hand crafted kernel and initrd that lives only in memory. I find turning off the computer when I'm finished and having it forget everything to be a very peaceful way to compute. I owe the internet a write up. I feel like ramfs for root filesystem…

> I owe the internet a write up. I would definitely be interested in reading more about this. I love the idea of being able to prevent an application from writing all over my disk to random places. If I can't prevent it, I can at least remedy it by having all those changes go away with a reboot. One of the things I love about Docker containers is that they can be ephemeral or persistent, short or long term, have full…

Typically they can only write to home and temp. That can be improved via sandboxing, and there’s Little/Open Snitch as well.

Re: Tails is a portable OS that protects against surveillance and censorship

#113
post #95
post #53

Earlier quoted context omitted.

As one of the comments mentioned below, easy for someone to get your IP with an attack on the Tor browser. (Which was actually utilized by law enforcement to catch somebody iirc.) Anecdotal evidence, but I've heard numerous complaints from other users about telemetry settings being enabled in the browser and locked. But worst of all, it uses GNOME.

You may be thinking of the case where a video file was specially crafted to cause the media player on Tails to make a direct connection? https://www.schneier.com/blog/archives/2020/06/facebook_help...

I believe that is what I was thinking of.

Re: Tails is a portable OS that protects against surveillance and censorship

#115

It seems like a growing number of things once referred to as Linux distributions are now referring to themselves as operating systems. If the kernel is Linux, and the user-space is GNU, what makes this a distinct operating system from, say, SUSE, or Arch?

I'd say the reason for that is marketing, or branding, or positioning the product, which are, as you wrote, essentially Linux distributions.

I find that even combinations that are supposed to be very similar (Linux kernel, same DE, same repos) can behave differently, and I guess this is because of how the distro maintainers set up the different parts and integrations in the system. So in this way, my MX Linux box is different from my Debian+KDE box.

Re: Tails is a portable OS that protects against surveillance and censorship

#119

The fact that it still does not support an incredibly popular portable computer like the raspberry pi (or anything that ins't intel) saddens me.

I'd guess it is a matter of priorities (do you want the safest, best-tested environment, or something less tested?).

However, assuming the source is easily bootstrappable, someone should try producing an unofficial port to Arm and Risc V. I'm sure it would reveal some security holes, even if it isn't appropriate (yet) for tails' target audience.

Re: Tails is a portable OS that protects against surveillance and censorship

#120

Earlier quoted context omitted.

Wouldn't that be security through obscurity? Which is bad security and a good way to be exploited. I thought that having more eyes on a system made it more secure because people find the exploits.

Also if you’re rolling your own, you’re way more likely to not keep updates perfectly and patch everything that comes up.

Depends how you roll your own; something lightly modified from a "normal" distro can just take upstream package updates and so put you in a good spot.
Post reply on HN