Re: [Tails-dev] Hacking Team looking at Tails

Delete this message

Reply to this message
Author: intrigeri
Date:  
To: The Tails public development discussion list
Old-Topics: Re: [Tails-dev] Hacking Team looking at Tails
Subject: Re: [Tails-dev] Hacking Team looking at Tails
Hi,

intrigeri wrote (13 Jul 2015 08:24:36 GMT) :
>> o   Infecting USB device which appears to be a bootable disk (Antonio +
>>     Giovanni)§ It will drop (release) the scout, then it will run
>>     a wipe.


> Seems to be the same, but from a running and already infected
> non-Tails OS, when a Tails USB stick is plugged in it. That's more
> concerning. We should check if we're communicating clearly enough
> that:


> * the OS used to install or upgrade a Tails device can corrupt it
> * plugging one's Tails device in an untrusted OS is dangerous


I don't think this has been checked. This thread teaches us that such
targetted attacks against Tails are not theoretical, so I think we
should warn our users against it ⇒ I've created
https://labs.riseup.net/code/issues/11102 so it's tracked somewhat
better than in our inboxes.

Cheers,
--
intrigeri