Feeds

New secure OS will put Tails between NSA's legs

Debian-derived OS funnels everything through Tor and HTTPS

Providing a secure and efficient Helpdesk

Secure Linux distribution Tails has reached the milestone of a version 1.0 release, after its developers crushed a laundry list of bugs.

The Debian-based operating system is a “live OS” - it boots from removable media rather than a hard disk. It also funnels all data through Tor and uses a smattering of cryptography and anonymising tools to help users circumvent censorship and lock out snoops and spooks. For example, Tails encrypts storage devices using the Linux Unified Key Setup, uses the HTTPS Everywhere tool to encrypt web traffic, and locks down emails with OpenPGP and protects instant messages with Off The Record.

Version 1.0 status is apt because the release quashes numerous nasty flaws. Detailed here, the fixes include client-side blacklists for Tor directory authority keys vulnerable to the headline-grabbing Heartbleed bug that mean Tails 1.0 clients will be protected even if attackers compromised a majority of authority signing and identity keys.

Other fixes include an upgrade to Mozilla Firefox ESR portable version 24.5.0, plus repairs to ensure I2P connections remain safe and to an Open Java Development Kit flaw that allowed execution of arbitrary code.

Tor is a significant irritant to law enforcement authorities: US agencies have labelled it “the King of high secure, low latency Internet Anonymity” and suggested it has no likely heir.

Tails' reliance on Tor means that opinion holds true, but with the new OS now available here, the NSA et al look to have another type of entity to crown or damn. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
SMASH the Bash bug! Apple and Red Hat scramble for patch batches
'Applying multiple security updates is extremely difficult'
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
prev story

Whitepapers

A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.