Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 17 submissions in the queue.
posted by martyb on Thursday April 20 2017, @09:04PM   Printer-friendly
from the choose-your-headphones-wisely dept.

The Tails project announced the release of version 2.12 of the operating system which focuses on "privacy and anonymity."

The new version includes Gnome Sound Recorder, removes I2P, runs on version 4.9.13 of the Linux kernel, and as per usual remedies "numerous security holes" in the previous release. Distro Watch has additional coverage.

Related story:
TAILS 2.11: The Last Release to Support the I2P Anonymizing Network


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2, Interesting) by Anonymous Coward on Thursday April 20 2017, @09:19PM (10 children)

    by Anonymous Coward on Thursday April 20 2017, @09:19PM (#497065)

    What about the (confirmed from CIA leaks) security hole known as "systemd"?
    Oh mention that and you get banned from their IRC.

    Starting Score:    0  points
    Moderation   +2  
       Offtopic=1, Interesting=3, Total=4
    Extra 'Interesting' Modifier   0  

    Total Score:   2  
  • (Score: 0) by Anonymous Coward on Thursday April 20 2017, @09:21PM

    by Anonymous Coward on Thursday April 20 2017, @09:21PM (#497067)

    I get banned from IRC for mentioning I use xrdp because "it's not Linux enough."

  • (Score: 1, Interesting) by Anonymous Coward on Thursday April 20 2017, @09:25PM (2 children)

    by Anonymous Coward on Thursday April 20 2017, @09:25PM (#497072)

    There were two separate projects to either get in i2pd (c++ variant) or update the java i2p (same that has been in since pre-Snowden) both of which got shot down by the Tails project managers.

    At this point there have been discussions about instead creating a new darknet 'tails-like' distro to both replace it and provide both Tor and I2P network support without reliance on a probably compromised 'privacy' distribution.

    • (Score: 2) by butthurt on Friday April 21 2017, @12:29AM (1 child)

      by butthurt (6141) on Friday April 21 2017, @12:29AM (#497140) Journal

      > [...] two separate projects [...] got shot down [...]

      Where may we can read more about this?

      > [...] a new darknet 'tails-like' distro [...]

      A good starting point may be Whonix running within Qubes OS. You'd need to integrate I2P.

      https://www.qubes-os.org/doc/whonix/ [qubes-os.org]

      • (Score: 2) by Scruffy Beard 2 on Friday April 21 2017, @05:37AM

        by Scruffy Beard 2 (6030) on Friday April 21 2017, @05:37AM (#497255)

        Found an e-mail thread saying the was concern about undiscovered 0-days in the I2p software. Not entirely clear why I2P would get singled out though.

        [Tails-dev] What to do about I2P in Tails? [boum.org]

        So, the main goals I have in mind are:

          1. making it harder, for an attacker who compromises I2P running in
                Tails, to upgrade their attack to anything non-I2P;

          2. making it harder, for someone attacking a Tails user's web
                browsing over Tor, to take advantage of bugs in the I2P router
                console;

          3. protecting the Tails users who don't intend to use I2P at all,
                from vulnerabilities in I2P, by making it harder, for an attacker,
                to start I2P in Tails, or to trick a user into doing it.

  • (Score: 0) by Anonymous Coward on Thursday April 20 2017, @09:25PM (5 children)

    by Anonymous Coward on Thursday April 20 2017, @09:25PM (#497073)

    Would love a source on that.

    • (Score: 1, Funny) by Scruffy Beard 2 on Thursday April 20 2017, @10:04PM (4 children)

      by Scruffy Beard 2 (6030) on Thursday April 20 2017, @10:04PM (#497087)

      In my brief searching, it looks like all of the publicly-available information is speculation.

      I guess systemd is so bad [agwa.name] that people are wondering if it is malice, rather than incompetence.

      • (Score: 0) by Anonymous Coward on Friday April 21 2017, @02:37AM (3 children)

        by Anonymous Coward on Friday April 21 2017, @02:37AM (#497189)

        Given the rapid scope creep and the rapid widespread adoption that is exactly what it seems like. Seems like a massively successful campaign, it won over the majority of users who don't see a problem. The lies about modularity (technically possible but practically not) and just about every weird core system replacement just scream takeover. I do hope I'm wrong, but for now I'm gonna do my best to avoid it.

        • (Score: 2) by Scruffy Beard 2 on Friday April 21 2017, @02:52AM (2 children)

          by Scruffy Beard 2 (6030) on Friday April 21 2017, @02:52AM (#497194)

          Even more creepy is Firefox requiring PulseAudio [mozilla.org] starting with version 52. Pulseaudio of course pulls in systemd.

          • (Score: 0) by Anonymous Coward on Friday April 21 2017, @05:28AM

            by Anonymous Coward on Friday April 21 2017, @05:28AM (#497251)

            On one hand it is creepy, on another hand Linux suffers from a fractured ecosystem that makes it hard for software to support. Firefox made a decision to bake DRM into their browser to support businesses like Netflix etc. who rely on securing content. So, is it all about making life easier for developers which incidentally makes it easier to compromise systems? Etc. etc. It is a tangled web (haha) and I sure wish we had some clarity.

            Ah well, I'll stick to my soap box and the marginal efforts to avoid the worst of it.

          • (Score: 0) by Anonymous Coward on Friday April 21 2017, @10:11AM

            by Anonymous Coward on Friday April 21 2017, @10:11AM (#497324)

            That "accidentally" is created by Poettered too.. just as that other CIA trojan called system'd according to the latest wiki something with holes ;)

            Maybe it's just so that if( any_stuff == Poettered ) { printf("You are compromised!\n"); }
            Which means Red Hat is also in the sphere of influence.
            And guess what.. the Chairman of Red Hat is a former Chairman of the Joint Chiefs of Staff.
            Bingo!

            And for Google..
            Google is owned by Alphabet Inc.
            That is chaired by Eric Schmidt since 2011.
            United States Secretary of Defense appointed Schmidt as DoD Innovation Advisory Board in 2016.
            And Schmidt has invested in The Groundwork and Timshel which in turn is associated with Hillary Clinton.
            Bingo!

            Accidentally NIST happens to get their elliptic curve wrong in 2004, hmm!

            See any trend here?