Hi folks,

The current Tails FAQ states that only compromised hardware could render
a system unsafe to use Tails:

https://tails.boum.org/support/faq/index.en.html#index30h2

This is not true because malicious firmware can render a system unsafe
to use Tails.

Relevant paper that explicitly mentions this re: Tails:

http://legbacore.com/News_files/HowManyMillionBIOSesWouldYouLikeToInfect_Whitepaper_v1.pdf

I would suggest modifying the FAQ language to clarify. One example:

"""
Is it safe to use Tails on a compromised system?

Tails runs independently from the operating system installed on the
computer. So, if your regular operating system has been compromised by
malware (virus, trojan, etc.), it may be safe to use Tails on that
computer.

However, if the firmware of the computer has been compromised, or
untrusted hardware has been added by someone with physical access to the
computer, it may not be safe to use Tails.
"""

Thanks,
Michael

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.

Reply via email to