[Tails-dev] Reviewing doc/cold-boot-attack

2013-09-16 Thread sajolida
I had a look at the work done on the doc/cold-boot-attack branch. I'm
very happy to see new people taking initiatives regarding the
documentation lately. I pushed it to the main repo.

Regarding the structure, I felt that it was talking about two things
that could be better separated or advertised:

  - memory wipe on shutdown
  - emergency shutdown

I'd be tempted to move the emergency shutdown to the "First steps"
section. And rename that page "Memory wipe on shutdown" and still have
it in the "Advanced topics" section. What do you think?

Regarding formatting:

  - The link to cold-boot attack on Wikipedia is broken.
  - I'd add a link to Wikipedia on the first occurrence of "RAM".
  - I'd use a class="bug" section when mentioning the emergency
shutdown bug after using Tails USB Installer.

Regarding terminology:

  - I'd say "RAM" instead of "the RAM".
  - Don't use "junk", "random data" might do the trick instead.
  - Please use a spell checker on your pages before pushing them!
with Vim do `:set spell spelllang=en`.

Does that make sense?



signature.asc
Description: OpenPGP digital signature
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


Re: [Tails-dev] Reviewing doc/cold-boot-attack

2013-09-19 Thread sajolida
I sent this to tails-dev, but forgot to put you in Cc.

On 16/09/13 21:27, sajol...@pimienta.org wrote:
> I had a look at the work done on the doc/cold-boot-attack branch. I'm
> very happy to see new people taking initiatives regarding the
> documentation lately. I pushed it to the main repo.
> 
> Regarding the structure, I felt that it was talking about two things
> that could be better separated or advertised:
> 
>   - memory wipe on shutdown
>   - emergency shutdown
> 
> I'd be tempted to move the emergency shutdown to the "First steps"
> section. And rename that page "Memory wipe on shutdown" and still have
> it in the "Advanced topics" section. What do you think?
> 
> Regarding formatting:
> 
>   - The link to cold-boot attack on Wikipedia is broken.
>   - I'd add a link to Wikipedia on the first occurrence of "RAM".
>   - I'd use a class="bug" section when mentioning the emergency
> shutdown bug after using Tails USB Installer.
> 
> Regarding terminology:
> 
>   - I'd say "RAM" instead of "the RAM".
>   - Don't use "junk", "random data" might do the trick instead.
>   - Please use a spell checker on your pages before pushing them!
> with Vim do `:set spell spelllang=en`.
> 
> Does that make sense?




signature.asc
Description: OpenPGP digital signature
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


Re: [Tails-dev] Reviewing doc/cold-boot-attack

2013-09-21 Thread sajolida
I reviewed the new batch of changes on the cold boot attack
documentation. We're almost there!

That's still in doc/cold-boot-attack.

A few comments on what I did:

- « When using a computer, everything done during a session is stored in
RAM ». I find the use of "everything" and "stored" very ambiguous here.
I tried to find a more precise expression with « all the data
manipulated is written temporarily in RAM »

- I felt your doc was missing a sentence to explain that the data in RAM
always disappears automatically after several minutes. You took that for
granted I think. So I added:

« After a computer is powered off, the information in RAM disappears
rapidly, but it can remain in RAM up to several minutes after shutdown.»

- Use "may" to denote permission, and "might" to denote uncertainty.
From the Chicago Manual of Style:

« May denotes permission {you may go to the movies}. May sometimes
connotes an uncertain possibility {you may find that assignment too
difficult} and often becomes might {you might find that assignment too
difficult}. »in

- I flipped around the two sentences describing attacks, and made them
more active by including the figure of the attacker. There is no cold
boot attack without attacker so let's make this explicit.

« A physical access to the computer you used may enable to recover
everything you've been achieving during the session. » becomes « An
attacker having access to a computer before it disappears could recover
important data from your session. »

« Moreover, a physical access to the computer you're using Tails on,
enable as well recovering data from RAM. » becomes « Moreover, an
attacker having physical access to the computer *while Tails is running*
can recover data from RAM as well. »

- I used "data in RAM" instead of just "RAM" in several places: the RAM
itself is not erased (hopefully) but the data in it.

- I use '-' instead of '*' for list because it wraps better with vi :)

- I used a bullet list to list the two bugs that affect this feature.
And added a  to make it clear that this should be
worked on.

- I'm not sure about the use of "standard" in "standard procedure for
data recovery", shall we use "common" instead?




signature.asc
Description: OpenPGP digital signature
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev


Re: [Tails-dev] Reviewing doc/cold-boot-attack

2013-09-23 Thread sajolida
> - I'm not sure about the use of "standard" in "standard procedure for
> data recovery", shall we use "common" instead?

Done that, merged into master, pushed, closed #6008.

Nice job mercedes508!




signature.asc
Description: OpenPGP digital signature
___
tails-dev mailing list
tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev