[Tails-dev] Please review removal of duplicate quiet boot parameter

2013-01-09 Thread intrigeri
Hi,

we had a bug report asking to avoid adding quiet twice on the kernel
command-line, so:

commit 4d466017ec4a20369e9846a6e86975b6b77853d0
Author: Tails developers amne...@boum.org
Date:   Wed Jan 9 16:07:00 2013 +0100

Simplify documentation of kernel command-line parameters for debugging.

Now that quiet is only set once, no need to be that verbose.

commit bbabba7bad40c6caeb9867fe81eb7ff2eeb57803
Author: Tails developers amne...@boum.org
Date:   Wed Jan 9 16:04:03 2013 +0100

Don't add quiet to the kernel command-line ourselves.

Else, it appears twice as live-build's lb_binary_syslinux adds it too.

Historically, we've been adding it ourselves on top of that because some 
other
live-build's bootloader config handling scripts (such as lb_binary_yaboot) 
do
not add it, but since we gave up the PowerPC support attempt, we're now only
interested in syslinux, so let's make it easier for the general case, e.g.
when one wants to remove the quiet parameter as suggested by our faulty
startup debugging documentation.

Given the 0.17 freeze is still pretty far away, we'll have plenty of
time to spot any regression caused by these seemingly trivial commits,
I took the liberty to avoid some overhead and push them directly into
devel. Please review if you care :)

Cheers,
-- 
  intrigeri
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


Re: [Tails-dev] Idea: document creating Tails USB thumb drive via VirtualBox

2013-01-09 Thread intrigeri
Hi,

Lukasz Dobrogowski wrote (08 Jan 2013 22:53:54 GMT) :
 However, this seems not true. If I understand
 https://www.virtualbox.org/manual/ch03.html#idp11494896 correctly,
 USB 1.0/1.1 (OHCI/UHCI) passthrough is implemented as free software

Great news!

 USB 1.1 is IMHO good enough for installing Tails on a pendrive,

Sure, agreed.

 so... who's up to writing a tutorial on this? ;-)

How about starting by trying to clone Tails onto a USB stick using
this USB 1.1 support, and in the process, quickly writing down every
step that's needed (including copy'n'pasting the exact error messages,
GUI elements phrasing)? This surely would make it a lot easier for
anyone who will want to write the tutorial :)

Cheers,
-- 
  intrigeri
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


[Tails-dev] Tails report for December, 2012

2013-01-09 Thread Tails folks

Releases


Tails 0.16~rc1 was released on December 14th.
https://tails.boum.org/news/test_0.16~rc1z

The Tails 0.16 release is scheduled for the first half of January.

People
==

We received 66 reports through Whisperback.

The forum activity has been steadily high:
1128 messages, 177 signed by Tails.

Some of us went to 29c3.
https://events.ccc.de/congress/2012/

Code


Many dictionaries for supported languages were installed.
http://git.immerda.ch/?p=amnesia.git;a=shortlog;h=refs/heads/feature/spell-checker

A bug concerning memlockd was fixed.
http://git.immerda.ch/?p=amnesia.git;a=shortlog;h=refs/heads/bugfix/only-one-memlockd

The regular GnuPG agent was added.
http://git.immerda.ch/?p=amnesia.git;a=shortlog;h=refs/heads/feature/regular-gnupg-agent

The automatic update feature of Iceweasel extensions was disabled.
http://git.immerda.ch/?p=amnesia.git;a=shortlog;h=refs/heads/bugfix/disable-iceweasel-extensions-auto-update

The move to using `live-boot` version 3 was worked on.
http://git.immerda.ch/?p=amnesia.git;a=shortlog;h=refs/heads/feature/live-boot-3.x

The Minitube Youtube client was installed.
http://flavio.tordini.org/minitube
http://git.immerda.ch/?p=amnesia.git;a=shortlog;h=refs/heads/feature/minitube

The Iceweasel Add-on bar was hidden by default.
http://git.immerda.ch/?p=amnesia.git;a=shortlog;h=refs/heads/feature/just_hide_iceweasel_add-on_bar

The work on a better power-off button was completed and merged.
http://git.immerda.ch/?p=amnesia.git;a=commit;h=0217cf30ad95efe798529aadcde952b49976c839

A bug concerning the `--media` option of live-persist was fixed.
http://git.immerda.ch/?p=amnesia.git;a=shortlog;h=refs/heads/bugfix/strict_live-persist_media

The `~/Persistent` directory was added to the *Places* menu of *GNOME*
and *GtkFileChooser*.
http://git.immerda.ch/?p=amnesia.git;a=shortlog;h=refs/heads/feature/persistent-directory-in-places

The `xul-ext-monkeysphere` extension was removed.
http://git.immerda.ch/?p=amnesia.git;a=shortlog;h=refs/heads/bugfix/disable-iceweasel-extensions-auto-update

The *News* section of the website was configured as the homepage of
Iceweasel.
http://git.immerda.ch/?p=amnesia.git;a=shortlog;h=refs/heads/feature/news-as-homepage
https://tails.boum.org/todo/set_iceweasel_homepage_to_Tails_news

The Entropy Key daemon `ekeyd` was installed.
http://git.immerda.ch/?p=amnesia.git;a=shortlog;h=refs/heads/bugfix/disable-iceweasel-extensions-auto-update

A new version of the MAT was announced.
https://mat.boum.org/
https://mailman.boum.org/pipermail/tails-dev/2012-December/002355.html

Documentation and website
=

Guidelines for writing documentation for Tails were written.
https://tails.boum.org/contribute/how/documentation/guidelines

The documentation of our release process was improved.
http://git.immerda.ch/?p=amnesia.git;a=commit;h=ef5f98e69e41794abcd8748529d81965d4aa8274

-- 
Tails folks

___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


[Tails-dev] Please review merge feature/install-password-manager

2013-01-09 Thread intrigeri
Hi,

please review  merge feature/install-password-manager.
ticket: todo/install_password_manager
candidate for 0.17

User and design doc are in the branch, merged into experimental.

Cheers,
-- 
  intrigeri
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


Re: [Tails-dev] Problems booting into tails on machines running osx mountain lion

2013-01-09 Thread intrigeri
Hi,

Jen Savage wrote (05 Jan 2013 21:22:25 GMT) :
 After creating a usb of the tails iso using unetbootin, and
 rebooting, I noticed refit wasn't recognizing the usb device.

It would be great to know the exact hardware model where
this happened.

 A bit of digging later, and it turns out that this has been a bug
 with refit for over a year now.

 Of course, the first instruction on the tails documentation for osx
 is to install refit (these instructions are just plain wrong,

After we discussed this on IRC, and I highlighted these instructions
apparently *do* work on *some* hardware, I've just emailed the person
who wrote this documentation to ask on what Mac models they work.

 but if they are going to be left up, can someone at least recommend
 making a backup before replacing the bootloader?).

I guess this would be a nice thing to do :)

 With previous versions of osx, you could boot from any bootable usb
 just by holding down the option key while starting up and then
 selecting the disk to boot from. So I tried to use the bootable usb
 on my mac, which does not have refit on it, and of course it did not
 recognize the usb drive.

Is this only related to the OSX version?
I thought some newer Apple hardware only boots with UEFI.

 A bit of digging later and I found out that apple has put in some sort of
 restrictions to prevent booting a non-osx os from usb as of Mountain Lion
 (and possibly with Lion as well, although I have not tried it).

Argh :(
Reference?

Anyway, please let us know what further progress you make on this! :)
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


Re: [Tails-dev] Please review merge feature/install-password-manager

2013-01-09 Thread Robert Ransom
On 1/9/13, intrigeri intrig...@boum.org wrote:
 Hi,

 please review  merge feature/install-password-manager.
 ticket: todo/install_password_manager
 candidate for 0.17

Some issues in keepassx 0.4.3-1ubuntu3 (according to the changelogs,
nothing I'm pointing out is fixed in Debian's 0.4.3-2):

* The icons in share/keepassx/icons/ appear to be from the Oxygen
theme, and appear to be missing both their copyright and license
information (Oxygen is LGPL) and their preferred form for modification
(especially clientic.png).

* src/lib/random.cpp will use fake entropy produced by a
non-cryptographic PRNG with a 32-bit seed if it fails to open or read
from /dev/urandom.

* src/dialogs/CollectEntropyDlg.cpp records the (low-entropy) sequence
of keys pressed by the user, and discards the keystroke event timings
which contain most of the entropy.

* It uses the Gladman implementation of AES, which makes no attempt to
resist timing side-channel attacks.  (It also supports using Twofish
to encrypt password databases; Twofish cannot be implemented
efficiently without side-channel leaks.)

* It also includes an RC4 implementation (RC4 also cannot be
implemented efficiently without side-channel leaks), and uses a single
global RC4 key to ‘encrypt’ multiple strings in memory (see
src/lib/SecString.[hc]) by XORing each of them with (part of) the same
sequence of keystream bytes.

The cryptography used on disk should be adequate, aside from the
side-channel leaks and the fake RNGs.  (It encrypts the whole file
using a block cipher in CBC mode with a random IV and mediocre
integrity protection.)


The other password managers you've considered are probably at least as
bad as this one.


Robert Ransom
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


[Tails-dev] Suggestion: ultimate anti-keylogger app for tails.

2013-01-09 Thread Gustavo Nascimento
Dear Developers,

I'd like to make a suggestion:

Wouldn't it be a nice addition to the Tails OS any real-effective
anti-keylogger application inspired on (that could be an open source
alternative to) Windows' OS app Neo Safe Keys:
http://www.aplin.com.au/neos-safekeys-v3/how-neos-safekeys-v3-works

Does anyone know if that open source alternative app already exists? Isn't
it being under development yet?

Ps.: I guess Florence is not that efficient as NSK.

Long Live Tails OS!

Best Regards,

Gus
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


Re: [Tails-dev] Please review merge feature/install-password-manager

2013-01-09 Thread Robert Ransom
On 1/9/13, Robert Ransom rransom.8...@gmail.com wrote:
 * The icons in share/keepassx/icons/ appear to be from the Oxygen
 theme, and appear to be missing both their copyright and license
 information (Oxygen is LGPL) and their preferred form for modification
 (especially clientic.png).

Some of them are from Nuvola (at least down.png (originally named
go-down.png) and newentry.png (originally named
document-import-key.png)).  Some of them are from Oxygen (at least
go-previous.png and go-next.png), and the lack of any obvious
attribution for those images in the tarball clearly violates the
license specified in oxygen-icon-theme's Debian copyright file.  The
bookmark-* icons look familiar to me, but were not copied from Nuvola,
Oxygen, or Crystal.

ftpmaster will not be pleased about this mess.


Robert Ransom
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev