Re: [Tails-dev] Tails and forensics

Delete this message

Reply to this message
Author: str4d
Date:  
To: tails-dev
Subject: Re: [Tails-dev] Tails and forensics
Jacob Appelbaum wrote:
> Hi,
>
> I was recently asked to help someone verify a Tails disk. I decided
> to help make a list of hashes and to collect various files such as
> iso files, signatures, signing keys and so on:
>
> https://github.com/ioerror/tails-verifier
>
> At the moment, the project is just a dataset and a small one. I'm
> interested in creating a hash for every file ever released - is
> there an archive of old signature files and .iso files somewhere?


I don't know where to find archives of the old files, but you can find
the hashes for previous .iso files by looking at the git history of
the website. This file's history has all hashes from release 0.7.1 on:

https://git-tails.immerda.ch/tails/log/wiki/src/inc/stable_i386_hash.html

Before that, you'd need to hunt through the download page's history:

https://git-tails.immerda.ch/tails/log/wiki/src/download.html?id=7e6cfb7b827e7e0691454670a5f9b4a778a0d070

It's up to you to decide if you trust the git history more than
whatever source you use for the old .iso files :)

str4d