6 ms·

This is why, if you can, the best thing you can do is have a Tor computer. Have it run a live CD of some sort with Tor built-in, and only use it for Tor. Of co

This is why, if you can, the best thing you can do is have a Tor computer. Have it run a live CD of some sort with Tor built-in, and only use it for Tor. Of course, this is not perfect, and still allows for breaking some of the recommendations in the article, but it's a good start. Not to mention it's easy to switch compartments: restart the computer (still not perfect, but there's really no such thing as perfection here).

kpcyrd 11y ago
If you use a live CD you're most likely running outdated software unless you burn a new CD for each update.
- puppetmaster3 11y ago
  Old software = good. Newly patched software = who was it patched by exactly?
  - ggeorgovassilis 11y ago
    I suspect kpcyrd's point is that by not auto-updating, you stick out like a fly in the milk. Software versions (like browser versions, plugin versions) can be queried [1] and used to almost uniquely identify you. [1] http://detectmybrowser.com/ http://detectmybrowser.com/
    - michaelt 11y ago
      Right - but if your browser and OS signature is "the latest version of tails" [1] then presumably you look identical to other users of the same live CD? [1] https://tails.boum.org/ https://tails.boum.org/
      - bartread 11y ago
        Yep, all four of them. I (probably) exaggerate, but the problem is that your anonymity pool is now very small.
  - JoshTriplett 11y ago
    Old software: which website that you just visited "patched" it to do things you don't want?
  - na85 11y ago
    One commonality among top security professionals is that they all update regularly (and they don't speak in platitudes like old = good)
- parent5446 11y ago
  Live USB :) Still have to update it, but shouldn't be as bad as burning a CD every time.
  - mtgx 11y ago
    The problem with live USB is that you'd be better off using Whonix instead TAILS at that point. The point of TAILS is to be "read-only". USBs can't really be read-only. I think TAILS should only be used in "one time/week only" situations, such as when you want to expose some information. It's not meant to be used on a regular basis. Qubes/Whonix, especially if you use it in a "disposable" (delete the VM) fashion should be generally more secure.
    - Forbo 11y ago
      The point of Tails is not to be read-only, hence all the work they have put in to enable persistent storage. USBs can be read only, especially when using a device such as a forensic write blocker. It all depends on how much you trust the manufacturer of the hardware you are using. Even then, if you are truly paranoid you can build your own write blocker using something like USBProxy.
- barbs 11y ago
  I believe Tails is able to update itself when it's a LiveCD[1]. I guess it's still not perfect (you need to run the older, less secure version of itself to update itself), but it's better than nothing. [1] https://tails.boum.org/doc/first_steps/upgrade/index.en.html#index1h1 https://tails.boum.org/doc/first_steps/upgrade/index.en.html...
deleted 11y ago
[deleted]

kpcyrd 11y ago

If you use a live CD you're most likely running outdated software unless you burn a new CD for each update.

puppetmaster3 11y ago
Old software = good. Newly patched software = who was it patched by exactly?
- ggeorgovassilis 11y ago
  I suspect kpcyrd's point is that by not auto-updating, you stick out like a fly in the milk. Software versions (like browser versions, plugin versions) can be queried [1] and used to almost uniquely identify you. [1] http://detectmybrowser.com/ http://detectmybrowser.com/
  - michaelt 11y ago
    Right - but if your browser and OS signature is "the latest version of tails" [1] then presumably you look identical to other users of the same live CD? [1] https://tails.boum.org/ https://tails.boum.org/
    - bartread 11y ago
      Yep, all four of them. I (probably) exaggerate, but the problem is that your anonymity pool is now very small.
- JoshTriplett 11y ago
  Old software: which website that you just visited "patched" it to do things you don't want?
- na85 11y ago
  One commonality among top security professionals is that they all update regularly (and they don't speak in platitudes like old = good)
parent5446 11y ago
Live USB :) Still have to update it, but shouldn't be as bad as burning a CD every time.
- mtgx 11y ago
  The problem with live USB is that you'd be better off using Whonix instead TAILS at that point. The point of TAILS is to be "read-only". USBs can't really be read-only. I think TAILS should only be used in "one time/week only" situations, such as when you want to expose some information. It's not meant to be used on a regular basis. Qubes/Whonix, especially if you use it in a "disposable" (delete the VM) fashion should be generally more secure.
  - Forbo 11y ago
    The point of Tails is not to be read-only, hence all the work they have put in to enable persistent storage. USBs can be read only, especially when using a device such as a forensic write blocker. It all depends on how much you trust the manufacturer of the hardware you are using. Even then, if you are truly paranoid you can build your own write blocker using something like USBProxy.
barbs 11y ago
I believe Tails is able to update itself when it's a LiveCD[1]. I guess it's still not perfect (you need to run the older, less secure version of itself to update itself), but it's better than nothing. [1] https://tails.boum.org/doc/first_steps/upgrade/index.en.html#index1h1 https://tails.boum.org/doc/first_steps/upgrade/index.en.html...

deleted 11y ago

[deleted]