Live data from Hacker News

Tails is a portable OS that protects against surveillance and censorship

tails.net

161–170 of 192 posts

Re: Tails is a portable OS that protects against surveillance and censorship

#161

Tails has a very specific use case, very few people need anti-forensics. I suggest looking into Whonix[1] if you want something that you can truly use for privacy. It is also much more secure than Tails by design, and does not have any limitations like locking down the root user account. Summary from GitHub: "Whonix is an operating system focused on anonymity, privacy and security. It's based on the Tor anonymity net…

What isn't secure about Tails? Its been recommended by so many InfoSec podcasts that I've been poking around in it on a USB stick

Re: Tails is a portable OS that protects against surveillance and censorship

#162

I know it sounds weird, but unless you reviewed the source code AND built the binary from it, no open source software is to be trusted. The versions ready for download may be based on code slightly different than the one in the repo -either deliberetely, or because the NSA managed to redirect the download link to its' servers. There is always a probability that an anonymity product will be proved to be a honeypot. Ev…

> I know it sounds weird, but unless you reviewed the source code AND built the binary from it, no open source software is to be trusted.

Why specify "open source software"? Is it not true of ALL software?

"Unless you reviewed the source code AND built the binary from it, no software is to be trusted."

That seems to be more accurate. Am I missing something?

Re: Tails is a portable OS that protects against surveillance and censorship

#163
post #141
post #89

Earlier quoted context omitted.

Sure, but that's not what parent said. He said it only runs on "intel macOS", which is false. It works on non-Apple computers as well. But I understand the miscommunication, parent meant to say "of the Apple computers, it only runs on Intel ones". There is a world outside of Apple, you know :-)

It's an emphasis thing. You can't tell in text where the emphasis is. In this case it was super clear that it was " intel macOS", but yea, it should have been "intel macs".

The conflation of "MacOS" with "Apple computer" is a problem that should be addressed.

Tails works on Intel arch. It does not work on ARM arch.

This has nothing to do with an Apple branded computer.

Re: Tails is a portable OS that protects against surveillance and censorship

#164
post #52

Love Tails, but I haven't used it in ten years. I have had Tails and Qubes disposable VMs on my mind though. I switched off of Qubes last year to my own Alpine chroot with a hand crafted kernel and initrd that lives only in memory. I find turning off the computer when I'm finished and having it forget everything to be a very peaceful way to compute. I owe the internet a write up. I feel like ramfs for root filesystem…

Same here. Dont understand why not more ppl switched to alpine on the desktop. It is my daily driver. Plus LXD for stuff I must do (typically spawn ubuntu, etc.) my whole PDE (Personal Developer Environment) is within a container. Need python? Shell into (via dmenu) python container. All with complete neovim setup. Need a GUI? No problem. Spawn a container. My lxd profile is set up for this. Use chezmoi for heavy aut…

> Dont understand why not more ppl switched to alpine on the desktop.

Same. When I was looking for a minimalistic distro, while unorthodox it seemed better than the alternatives. My next choice would be Void but I ran into some issues with it, and Alpine worked much more flawlessly.

Re: Tails is a portable OS that protects against surveillance and censorship

#165

Tails has a very specific use case, very few people need anti-forensics. I suggest looking into Whonix[1] if you want something that you can truly use for privacy. It is also much more secure than Tails by design, and does not have any limitations like locking down the root user account. Summary from GitHub: "Whonix is an operating system focused on anonymity, privacy and security. It's based on the Tor anonymity net…

Doesn’t seem to work on ARM though? So if you have a M1/M2 mac, even running a hypervisor, you are SOL…

Re: Tails is a portable OS that protects against surveillance and censorship

#166

Tails is great. I am using it for several years now. Other related projects are whonix ( https://www.whonix.org ), which consists of two virtual machines: A workstation to work on and a gateway, which torifies all traffic from the workstation VM. Whonix is also integrated in Qubes OS ( https://www.qubes-os.org ), which allows you to easily work with multiple seperate whonix VMs. There is also the possibility to tunne…

Tried to use it on my M1 MBA but it barfed. So I guess it is only for x86/64 architectures.

Re: Tails is a portable OS that protects against surveillance and censorship

#167

Could any HN users speak about their experience and rationale for using Tails? My outsiders’ perspective is that the threat model for these kinds of surveillance resistant tools is somewhat perverse: they trade indistinguishability (being lost in the crowd) for a nominally more anonymous but extremely unusual datapoint (a host/browser/etc. that basically looks like no other normal machine.) Put another way: without a…

You put the stick in, access forbidden web site (for example, Instagram). Take the stick out, police searches your computer, there are no traces. If you were using a regular OS, even through Tor, there are some incriminating traces left, in browser cache, in MFT, in pagefile etc. that can be recovered.

Huh? This sounds like fear mongering…

Re: Tails is a portable OS that protects against surveillance and censorship

#168
post #63

Earlier quoted context omitted.

>why not more ppl switched to alpine I think one reason might be musl and its compatibility.

What's so bad about musl? Everything works fine for me on Alpine. My desktop is FreeBSD but I have a few alpine servers for docker and other Linux specific stuff. And FreeBSD is even less Gnu-Linux compatible than Alpine yet everything works fine. Thanks to an army of port maintainers of course.

Works fine after a lot of work. Sometimes.

Re: Tails is a portable OS that protects against surveillance and censorship

#169

Hi. We're building The Nose ( https://thenose.cc ), a safe haven for training data that can't be taken down with DMCA. Since this involves copyright infringement, strong anonymity is a requirement. I wrote up our security procedures here: https://news.ycombinator.com/item?id=37346620 The reason Tails isn't an option is because, as others have mentioned, there have been Tor browser exploits which reveal the IP address…

Other thoughts: Day to day browsing is a pain. I use a VNC client to remote into our server, which is running a desktop environment with a regular browser. That way you can use apps (gmail, discord, etc) from outside the Tor network. But since you're tunneling through Tor, this is painfully slow. You'll likely want to type out long messages in Whonix, then copy-paste into your remote session. Each keystroke can somet…

I like the way you describe your process. As the person who made the stylometry thing that made the rounds a while back, I would say the best thing you can do on that front is to either get a "paraphraser" like ChatGPT/translators or just write less. Also, there's a site called smspva.com and a lot of sites like it where you can rent "real" phone numbers and they take every payment method under the sun. Depending on the country a phone number to receive an OpenAI confirmation code is about $0.50, most less popular services are like $0.10-$0.20.

Re: Tails is a portable OS that protects against surveillance and censorship

#170

There have been quite a few exploits in tails. I suspect you're better off with a more obscure project, because then your adversary is less likely to have a 'ready to go' exploit.

This has been argued before: https://medium.com/@thegrugq/tor-and-its-discontents-ef51648...

I think this is somewhat sarcastic but the article goes as far as saying "[Tor Browser Bundle] is the only reason that FireFox is a valuable target." Firefox has improved sandboxing now though I don't think it's as good as Chromium.

Post reply on HN