Posted on

Numerous security holes in Tails 3.7

Several security holes that affect Tails 3.7 are now fixed in Tails 3.7.1.

We strongly encourage you to
upgrade to Tails 3.7.1 as soon as possible.

Posted on

Tails 3.7.1 is out

This release fixes many security
issues
and users should
upgrade as soon as possible.

Changes

Upgrades and changes

  • Upgrade Tor Browser to 7.5.5.

    This fixes a critical issue in Firefox
    announced on June 6.

  • Upgrade Thunderbird to 52.8.0.

    This partly mitigates the infamous EFAIL attack and fixes importing
    OpenPGP keys from keyservers with Enigmail.

Fixed problems

  • Fix setting a screen locker password with non-ASCII characters.
    (#15636)

  • Rename the WhisperBack launcher to “WhisperBack Error Reporting”
    so that users have a better chance to understand what it does.
    (#6432)

For more details, read our changelog.

Known issues

None specific to this release.

See the list of long-standing issues.

Get Tails 3.7.1

What’s coming up?

Tails 3.8 is scheduled for June 26.

Have a look at our roadmap to see where we are heading to.

We need your help and there are many ways to contribute to
Tails
(donating is only one of
them). Come talk to us!

Posted on

Call for testing: Addional Software feature

You can help Tails! The beta version for the Additional Software
feature
is ready for testing.
We are very excited.

What’s new in the Additional Software feature Beta?

We’ve designed and implemented a user interface to select additional software
packages and make additional software persistent.

Users are now able to decide, for each additional piece of software that they
might install in Tails once, whether it shall be installed automatically in the
future.

How to test Tails Additional Software feature Beta?

  1. Download and install the ISO image on a USB stick, start from the stick and
    configure a persistent volume. Reboot and use the package manager to install a
    package currently not in Tails (example: Mumble).

  2. Configure if you want this package to be installed automatically on
    each boot.

  3. Restart Tails and use Mumble (or another program you’ve just installed).

  4. Imagine that over time you have installed several additional programs
    (Mumble, VLC, etc.) but don’t remember the exact list. How would you check
    your list of additional software?

  5. How would you stop installing Mumble every time you start Tails?

We are interested in your feedback on bugs and usability of this feature.

  • Are there any notifications that are not clear?
  • Did you run into technical issues?
  • Were you able to to modify the installation details as asked in the last
    question?
  • Do you have ideas on packages that we should propose to Tails users for
    installation?

Please send feedback emails to tails-testers@boum.org.

Get Tails Additional Software Feature Beta

Tails Additional Software feature beta ISO image

Known issues

We’ve identified a list of known issues #15567 among which

  • Additional Software gets opened multiple times #15528
  • Remove and Cancel buttons don’t work after escaping password prompt #15581

We need your help and there are many ways to contribute to
Tails
(donating is only one of
them). Come talk to us!

Posted on

Tails 3.7 is out

This release fixes several security
issues
and users should
upgrade as soon as possible.

Changes

Upgrades and changes

Fixed problems

  • Allow removing the optional OpenPGP key in WhisperBack, in case you
    specified one.

For more details, read our changelog.

Known issues

None specific to this release.

See the list of long-standing issues.

Get Tails 3.7

  • To install, follow our installation instructions.

  • To upgrade, automatic upgrades are available from 3.6, 3.6.1, and
    3.6.2 to 3.7.

    If you cannot do an automatic upgrade or if Tails fails to start after an
    automatic upgrade, please try to do a manual upgrade.

    If you are doing a manual upgrade from Tails 3.2, 3.3, 3.4, or 3.5, it is only possible to select an
    ISO image when running Tails in English. For other languages, the
    file chooser button remains inactive:

    To do a manual upgrade from Tails 3.2, 3.3, 3.4, or 3.5, you can either:

    • Restart Tails in English.

    • Start Tails Installer in
      English from the command line:

      LANG=en_US tails-installer
  • Download Tails 3.7.

What’s coming up?

Tails 3.8 is scheduled for June 26.

Have a look at our roadmap to see where we are heading to.

We need your help and there are many ways to contribute to
Tails
(donating is only one of
them). Come talk to us!

Posted on

Tails report for March, 2018

Releases

March was a heavy month regarding Tails releases: shortly after
putting out the Tails 3.6 major release, we had to publish an
emergency 3.6.1 release to fix security issues identified at Pwn2Own,
and finally we had to prepare another emergency release (3.6.2) that
was released in April. Due to an unfortunate combination of software
development and release management mistakes, applying these upgrades
was harder than usual for Tails users; apologies!

The following changes were introduced in Tails 3.6:

  • You can now lock your screen by clicking on the
    Lock button in the system menu.

    • If you set up an administration password
      when starting Tails, you can unlock your screen with your administration
      password.
    • Otherwise, you can set up a password to unlock your screen when locking your
      screen for the first time.
  • We improved a lot the backend of the Additional Software
    persistence feature
    .
    Your additional software is now:

    • Installed in the background after the session starts instead of
      blocking the opening of the desktop.
    • Always installed even if you are offline.
  • Install
    pdf-redact-tools,
    a command line tool to clean metadata and redact PDF files by
    converting them to PNG images.

  • An error message indicating the name of the graphics card is now
    displayed when Tails fails to start GNOME.

  • The Tails documentation launcher on the desktop now opens the
    documentation on our website if you are online.

  • We activated the AppArmor profile for Thunderbird from Debian
    to confine Thunderbird for security.

  • Rewrite some internal scripts from shell scripting to Python, thanks
    to GoodCrypto.

  • Remove the display of debug and error messages when starting.

  • Fix the ISO image selection being unavailable in Tails Installer in
    languages other than English. (#15233)

  • Fix OpenPGP Applet being unresponsive when decrypting a lot of text.
    (#6398)

The following changes were introduced in Tails 3.6:

Code

Documentation and website

We documented how to:

We also made the output of the GnuPG command line to verify an ISO
image
more consistent across different
versions of GnuPG.

User experience

  • From a session at the Internet Freedom Festival, we took notes on how
    participants used the metaphor of a tent to describe
    Tails
    :

    • It’s portable: you can store it in your backpack.
    • It’s amnesic: it’s empty every time you set it up.
    • It’s incognito: you can move it around and it looks like other tents.
  • We started discussing a collaboration with Simply
    Secure
    to explain better what is Tails.
    The goals are both to reach a consensus among contributors and to make
    it easier to explain Tails to the world.

Hot topics on our help desk

  1. Several users complained about
    Tails Installer failing.

  2. And there seems to be more people complaining about
    losing their Persistent Volume
    than usual.

Infrastructure

  • We’ve worked on a more detailed scheme to include our web translation
    platform into our workflow (#10034).

  • We documented our survey
    platform
    .

Funding

Outreach

Past events

  • Emma Peel and sajolida where at the Internet Freedom
    Festival
    where they
    participated in several sessions on documentation and user experience
    and presented Tails in the tools showcase.

  • anonym and intrigeri attended the Tor meeting in Rome. We’ve had
    lots of interesting discussions there, including heart-warming ones
    about how Tails could work more closely with the Tor project in
    the future.

  • Tails was presented by jvoisin at the
    Journées FedeRez in Paris,
    France. The slides (in French) are available
    here.

Upcoming events

  • Tails contributors will attend CryptoRave
    (São Paulo, May 4-5) and will run a number of Tails/Tor-related
    events there, including a users meetup aimed at gathering feedback
    and better understanding who our users are, what they do with Tails,
    what works well and what is problematic. If you’re around São Paulo,
    join us there! 🙂

Press and testimonials

  • 2018-03-19: Edward Snowden retweeted about our participation to the
    DuckDuckGo Privacy Challenge explaining:

    Because I’ve used @Tails_live for years. The journalists who broke the
    mass surveillance revelations of 2013 all relied on it. Free, libre, and
    open source software projects quietly save the world every day, even
    when you can’t see it, and their success depends on your support.

Translation

All the website

  • de: 52% (2837) strings translated, 7% strings fuzzy, 46% words translated
  • fa: 38% (2074) strings translated, 10% strings fuzzy, 40% words translated
  • fr: 92% (4963) strings translated, 0% strings fuzzy, 90% words translated
  • it: 35% (1914) strings translated, 5% strings fuzzy, 31% words translated
  • pt: 22% (1212) strings translated, 9% strings fuzzy, 19% words translated

Total original words: 57621

Core pages of the website

  • de: 76% (1447) strings translated, 13% strings fuzzy, 76% words translated
  • fa: 33% (638) strings translated, 11% strings fuzzy, 33% words translated
  • fr: 99% (1880) strings translated, 0% strings fuzzy, 99% words translated
  • it: 70% (1336) strings translated, 14% strings fuzzy, 70% words translated
  • pt: 41% (779) strings translated, 15% strings fuzzy, 41% words translated

Total original words: 17290

Metrics

  • Tails has been started more than 693 060 times this month.
    This makes 22 357 boots a day on average.
  • 13 315 downloads of the OpenPGP signature of Tails ISO from our website.
  • 139 bug reports were received through WhisperBack.

How do we know this?

Posted on

Tails 3.6.2 is out

This release fixes several security
issues
and users should
upgrade as soon as possible.

Changes

Upgrades and changes

  • Update Tor Browser to 7.5.3.

  • Update Thunderbird to 52.7.0.

  • Update Intel microcode to 3.20180312.1, which adds Spectre variant
    2 mitigation for most common Intel processors.

  • Upgrade Linux to 4.15.11-1.

Fixed problems

  • Make input of Japanese and Korean characters in Tor Browser work
    again.

  • Fix Tor Browser so add-ons installed by users work again, such as
    Tails Verification.

For more details, read our changelog.

See the list of long-standing issues.

Get Tails 3.6.2

  • To install, follow our installation instructions.

  • To upgrade, automatic upgrades are available from 3.6 and 3.6.1 to
    3.6.2.

    If you cannot do an automatic upgrade or if you fail to start after an
    automatic upgrade, please try to do a manual upgrade.

    If you are doing a manual upgrade from Tails 3.2, 3.3, 3.4, or 3.5, it is only possible to select an
    ISO image when running Tails in English. For other languages, the
    file chooser button remains inactive:

    To do a manual upgrade from Tails 3.2, 3.3, 3.4, or 3.5, you can either:

    • Restart Tails in English.

    • Start Tails Installer in
      English from the command line:

      LANG=en_US tails-installer
  • Download Tails 3.6.2.

What’s coming up?

Tails 3.7 is scheduled for May 8.

Have a look at our roadmap to see where we are heading to.

We need your help and there are many ways to contribute to
Tails
(donating is only one of
them). Come talk to us!

Posted on

Help us win $50000

Free, libre, and open source software projects quietly save the
world every day, even when you can’t see it, and their success depends
on your support.

— Edward Snowden (@Snowden)
March 19, 2018

Through our end-of-year donation campaign we managed to raise
~103 000€, which is nearly half of our yearly budget for core work and
maintenance. A big thanks to everybody who donated!

To fill the gap, we are extremely happy to be part of DuckDuckGo’s
privacy crowdrising
challenge
.

If you haven’t donated to Tails recently, now is a great opportunity to
support us as your donation is likely to be matched by DuckDuckGo. It
will also help us get one of the grand prizes awarded by DuckDuckGo, up
to $50 000.

Donate to Tails via the DuckDuckGo donation challenge

If you have donated to Tails recently, please help us spread the word
within your contacts and on social media by sharing or tweeting our
campaign page.


♥ Thank you! ♥