Re: [Tails-project] The FACIL key: a multi-boot USB key with…

Borrar esta mensaxe

Responder a esta mensaxe
Autor: sajolida
Data:  
Para: Public mailing list about the Tails project, mathieu.g.p
Asunto: Re: [Tails-project] The FACIL key: a multi-boot USB key with TAILS on it!
>> From: Mathieu Gauthier-Pilote <mathieu.g.p@???>
>> To: tails-support-private@???
>> Date: Tue, 7 Oct 2014 20:19:27 +0200
>> Enc: encrypted
>> Sig: Unknown signature from 99C7E26355569F39 (public key not present)
>>
>> Hello TAILS!


Hello!

>> My name is Mathieu Gauthier-Pilote, I am a FACIL board member, and I
>> contact you regarding the crowd-funding project we have launched on
>> Goteo:
>>
>> http://goteo.org/project/cle-facil/?lang=en


Nice initiative.

>> TAILS will be one of the OSes available for live boot on the key.
>>
>> We would be grateful if you could help us spread the word about the
>> project.
>>
>> Also, if you can think of any business in your circle that might be
>> interested in sponsoring the key, please let us know.


Unfortunately, it is currently very difficult for a user to be able to
verify the authenticity of Tails once installed on a USB stick. As
security is meant to be used as a very secure environment, we believe
that distributing preinstalled version of Tails is currently pretty much
incompatible with our mission.

See https://labs.riseup.net/code/issues/7269.

Plus, be very careful in the way that you boot from the ISO as the set
of command line arguments passed to the live system can completely break
some of the security built in Tails. So in case of doubt, ask us for a
review of your code.

I also understand that people won't be able to create a persistent
volume on this USB stick. Which is a very popular feature of Tails, and
pretty much needed if you want to do serious stuff with it.

See https://tails.boum.org/doc/first_steps/persistence/.

All in all, I think that you should make it clear on your product that
the version of Tails included should only be used for testing and
educational purpose but shouldn't be relied upon for security.

>> That's all! :-)
>>
>> Keep up the excellent work you are doing!


And thank you for advertising Tails!

--
sajolida