anonymous operating system

Tails 0.21 is out

Tails, The Amnesic Incognito Live System, version 0.21, is out.

All users must upgrade as soon as possible: this release fixes numerous security issues.

Download it now.

Changes

  • Security fixes
    • Don't grant access to the Tor control port for the desktop user. Else, an attacker able to run arbitrary code as this user could obtain the public IP.
    • Don't allow the desktop user to directly change persistence settings. Else, an attacker able to run arbitrary code as this user could leverage this feature to gain persistent root access, as long as persistence is enabled.
    • Install Iceweasel 17.0.10esr with Torbrowser patches.
    • Patch Torbutton to make window resizing closer to what the design says.
  • New features
    • Add a persistence preset for printing settings.
    • Support running Tails off more types of SD cards.
  • Minor improvements
    • Add a KeePassX launcher to the top panel.
    • Improve the bug reporting workflow.
    • Prefer stronger ciphers when encrypting data with GnuPG.
    • Exclude the version string in GnuPG's ASCII armored output.
    • Use the same custom Startpage search URL than the TBB. This apparently disables the new broken "family" filter.
    • Provide a consistent path to the persistent volume mountpoint.
  • Localization
    • Many translation updates all over the place.

See the online Changelog for technical details.

Known issues

  • On some hardware, Vidalia does not start.
  • Longstanding known issues.

What's coming up?

The next Tails release is scheduled for around December 11.

Have a look to our roadmap to see where we are heading to.

Would you want to help? There are many ways you can contribute to Tails. If you want to help, come talk to us!

Tails 0.20 is out

Tails, The Amnesic Incognito Live System, version 0.20, is out.

All users must upgrade as soon as possible: this release fixes numerous security issues.

Download it now.

Changes

Notable user-visible changes include:

  • New features
    • Install Linux kernel 3.10.3-1 from Debian unstable.
    • Iceweasel 17.0.8esr + Torbrowser patches.
  • Bugfixes
    • Prevent Iceweasel from displaying a warning when leaving HTTPS web sites.
    • Make Iceweasel use the correct, localized search engine.
    • Fix Git access to https:// repositories.
  • Minor improvements
    • Install Dasher, a predictive text entry tool.
    • Add a wrapper around TrueCrypt which displays a warning about it soon being deprecated in Tails.
    • Remove Pidgin libraries for all protocols but IRC and Jabber/XMPP. Many of the other protocols Pidgin support are broken in Tails and haven't got any security auditting.
    • Disable the pre-defined Pidgin accounts so they do not auto-connect on Pidgin start.
    • Include information about Alsa in WhisperBack reports.
    • Explicitly restrict access to ptrace. While this setting was enabled by default in Debian's Linux 3.9.6-1, it will later disabled in 3.9.7-1. It's unclear what will happen next, so let's explicitly enable it ourselves.
    • Do not display dialog when a message is sent in Claws Mail.
    • Sync iceweasel preferences with the Torbrowser's.
  • Localization
    • Many translation updates all over the place.
    • Merge all Tails-related POT files into one, and make use of intltoolize for better integration with Transifex.

See the online Changelog for technical details.

Known issue

No new known issue but longstanding known issues.

I want to try it / to upgrade!

See the Getting started page.

As no software is ever perfect, we maintain a list of problems that affects the last release of Tails.

What's coming up?

The next Tails release is scheduled for around September 19.

Have a look to our roadmap to see where we are heading to.

Would you want to help? There are many ways you can contribute. If you want to help, come talk to us!

Tails 0.19 is out

Tails, The Amnesic Incognito Live System, version 0.19, is out.

All users must upgrade as soon as possible.

Download it now.

Changes

Notable user-visible changes include:

  • New features
    • Linux 3.9.5-1.
    • Iceweasel 17.0.7esr + Torbrowser patches.
    • Unblock Bluetooth, Wi-Fi, WWAN and WiMAX; block every other type of wireless device.
  • Bugfixes
    • Fix write access to boot medium at the block device level.
    • tails-greeter l10n-related fixes.
    • gpgApplet: partial fix for clipboard emptying after a wrong passphrase was entered.
  • Minor improvements
    • Drop GNOME proxy settings.
    • Format newly created persistent volumes as ext4.
    • GnuPG: don't connect to the keyserver specified by the key owner.
    • GnuPG: locate keys only from local keyrings.
    • Upgrade live-boot and live-config to the 3.0.x final version from Wheezy.
  • Localization: many translation updates all over the place.
  • Test suite
    • Re-enable previously disabled boot device permissions test.

See the online Changelog for technical details.

Known issues

No new known issue but longstanding known issues.

I want to try it / to upgrade!

See the Getting started page.

As no software is ever perfect, we maintain a list of problems that affects the last release of Tails.

What's coming up?

The next Tails release is scheduled for early August.

Have a look to our roadmap to see where we are heading to.

Would you want to help? As explained in our "how to contribute" documentation, there are many ways you can contribute to Tails. If you want to help, come talk to us!

Tails 0.18 is out

Tails, The Amnesic Incognito Live System, version 0.18, is out.

All users must upgrade as soon as possible.

Download it now.

Changes

Notable user-visible changes include:

  • New features
    • Support obfs3 bridges.
    • Automatically install a custom list of additional packages chosen by the user at the beginning of every working session, and upgrade them once a network connection is established (technology preview).
  • Iceweasel
    • Upgrade to Iceweasel 17.0.5esr-0+tails2~bpo60+1.
    • Update Torbrowser patches to current maint-2.4 branch (567682b).
    • Torbutton 1.5.2, and various prefs hacks to fix breakage.
    • HTTPS Everywhere 3.2
    • NoScript 2.6.6.1-1
    • Isolate DOM storage to first party URI, and enable DOM storage.
    • Isolate the image cache per url bar domain.
    • Update prefs to match the TBB's, fix bugs, and take advantage of the latest Torbrowser patches.
    • Make prefs organization closer to the TBB's, and generally clean them up.
  • Bugfixes
    • Linux 3.2.41-2+deb7u2.
    • All Iceweasel prefs we set are now applied.
    • Bring back support for proxies of type other than obfsproxy.
  • Minor improvements
    • Set kernel.dmesg_restrict=1, and make /proc/<pid>/ invisible and restricted for other users. It makes it slightly harder for an attacker to gather information that may allow them to escalate privileges.
    • Install gnome-screenshot.
    • Add a About Tails launcher in the System menu.
    • Install GNOME accessibility themes.
    • Use Getting started... as the homepage for the Tails documentation button.
    • Disable audio preview in Nautilus.
  • Localization: many translation updates all over the place.

See the online Changelog for technical details.

Known issue

The web browser default search engine is Google, instead of the intended localized Startpage. You may select Startpage HTTPS in the search engine menu next to the Google icon.

I want to try it / to upgrade!

See the Getting started page.

As no software is ever perfect, we maintain a list of problems that affects the last release of Tails.

What's coming up?

The next Tails release is scheduled for June 27.

Have a look to our roadmap to see where we are heading to.

Would you want to help? As explained in our "how to contribute" documentation, there are many ways you can contribute to Tails. If you want to help, come talk to us!

Tails 0.17 is out!

Tails, The Amnesic Incognito Live System, version 0.17, is out.

All users must upgrade as soon as possible.

Download it now.

Changes

Notable user-visible changes include:

  • New features
    • Install the KeePassX password manager, with a configuration and documentation that makes it easy to persist the password database.
  • Iceweasel
    • Upgrade to Iceweasel 17.0.3esr-1+tails1~bpo60+1.
    • Do not allow listing all available fonts.
    • Improve default spellchecker dictionary selection.
    • Disable the add-ons automatic update feature.
    • Remove NoScript click-to-play confirmation.
    • Sync some prefs set by Torbutton, to be ready when it stops setting these.
    • Disable navigation timing.
    • Disable SPDY.
    • More aggressive iceweasel HTTP pipelining settings.
    • Enable WebGL (as click-to-play only).
    • Disable network.http.connection-retry-timeout.
    • Disable full path information for plugins.
    • Remove NoScript blocks of WebFonts.
  • Minor improvements
    • Upgrade to live-boot 3.0~b11-1 and live-config 3.0.12-1.
    • Don't add "quiet" to the kernel command-line ourselves.
    • Upgrade I2P to 0.9.4.
  • Bugfixes
    • Many bugfixes brought by the Debian Squeeze 6.0.7 point-release.
    • Use the regular GnuPG agent + pinentry-gtk2 instead of Seahorse as a GnuPG agent. This fixes usage of OpenPGP in Claws Mail, and brings support for OpenPGP smartcards.
    • Enable I2P hidden mode. Else, killing I2P ungracefully is bad for the I2P network.
    • Add shutdown and reboot launchers to the menu. This workarounds the lack of a shutdown helper applet in camouflage mode.
    • Remove Pidgin's MXit and Sametime support to workaround security flaws.
  • Hardware support
    • Install recent Intel and AMD microcode.
    • Install firmware loader for Qualcomm Gobi USB chipsets.
    • Upgrade barry to 0.18.3-5~bpo60+1.
  • Localization
    • Tails USB Installer: update translations for Arabic, Czech, German, Hebrew, Polish and Spanish.
    • tails-greeter: update Spanish and French translations, new Polish translation.
    • tails-persistence-setup: update translations for Arabic, Bulgarian, Spanish, French, Dutch, Polish and Chinese.
    • WhisperBack: update Spanish and Korean translations, import new Polish translation.

Plus the usual bunch of bug reports and minor improvements.

See the online Changelog for technical details.

I want to try it / to upgrade!

See the Getting started page.

As no software is ever perfect, we maintain a list of problems that affects the last release of Tails.

What's coming up?

The next Tails release is scheduled for April 9. It will probably be a minor, bugfix only one.

Have a look to our roadmap to see where we are heading to.

Would you want to help? As explained in our "how to contribute" documentation, there are many ways you can contribute to Tails. If you want to help, come talk to us!

Tails 0.16 is out!

Tails, The Amnesic Incognito Live System, version 0.16, is out.

All users must upgrade as soon as possible.

Download it now.

Changes

Notable user-visible changes include:

  • Minor improvements
    • Replace the too-easy-to-misclick shutdown button with a better "Shutdown Helper" applet.
    • Display ~/Persistent in GNOME Places and Gtk file chooser.
    • Install dictionaries for a few languages.
    • Set Unsafe Browser's window title to "Unsafe Browser".
    • Install ekeyd to support the EntropyKey.
    • Install font for Sinhala script.
    • Update Poedit to 1.5.4.
    • Expose Vidalia's "broken onion" icon less.
    • Hide the persistence setup launchers in kiosk mode.
  • Bugfixes
    • Disable IPv6 on all network interfaces. This is a workaround for the IPv6 link-local multicast leak that was recently discovered.
    • Tails may previously have been able to list GPT partitions labelled "TailsData" on hard drives (!) as valid persistence volumes... this is now fixed.
    • Fix SCIM in the autostarted web browser.
    • Talk of DVD, not of CD, in the shutdown messages.
    • Make tordate work in bridge mode with an incorrect clock.
  • Iceweasel
    • Update iceweasel to 10.0.12esr-1+tails1.
    • Set the homepage to the news section on the Tails website.
    • Hide the iceweasel add-on bar by default.
    • Don't hide the AdBlock-Plus button in the add-on bar anymore.
    • Don't install xul-ext-monkeysphere anymore.
  • Localization
    • tails-greeter: add German translation, update Portuguese (Brasil) and Russian ones.
    • tails-persistence-setup: update French, German and Italian translations.

Plus the usual bunch of bug reports and minor improvements.

See the online changelog for technical details.

Want to try it or upgrade?

See the Getting started page.

As no software is ever perfect, we maintain a list of problems that affects the last release of Tails.

What's coming up?

See the release schedule for Tails 0.17.

Have a look to our roadmap to see where we are heading to.

Would you want to help? As explained in our "how to contribute" documentation, there are many ways you can contribute to Tails. If you want to help, come talk to us!

Tails 0.15 is out!

Tails, The Amnesic Incognito Live System, version 0.15, is out.

All users must upgrade as soon as possible.

Download it now

Thank you, and congrats, to everyone who helped make this happen!

Changes

Notable user-visible changes include:

  • Tor 0.2.3.25
  • Major new features
  • Minor improvements
    • Add the Hangul (Korean) Input Method Engine for SCIM.
    • Preliminary support for some OpenPGP SmartCard readers.
    • Support printers that need HPIJS PPD and/or the IJS driver.
    • Optimize fonts display for LCD.
    • Update TrueCrypt to version 7.1a.
  • Bugfixes
    • Fix gpgApplet menu display in Windows camouflage mode.
    • Fix Tor reaching an inactive state if it is restarted in "bridge mode",
      e.g. during the time synchronization process.
  • Iceweasel
    • Update iceweasel to 10.0.11esr-1+tails1.
    • Update HTTPS Everywhere to version 3.0.4.
    • Update NoScript to version 2.6.
    • Fix bookmark to I2P router console.
  • Localization
    • The Tails USB installer, tails-persistence-setup and tails-greeter
      are now translated into Bulgarian.
    • Update Chinese translation for tails-greeter.
    • Update Euskadi translation for WhisperBack.

Plus the usual bunch of bug reports and minor improvements.

See the online Changelog for technical details.

Don't hesitate to get in touch with us.

Tails 0.14 is out!

Tails, The Amnesic Incognito Live System, version 0.14, is out.

All users must upgrade as soon as possible.

Download it now.

Thank you, and congrats, to everyone who helped make this happen!

Changes

Notable user-visible changes include:

  • Tor
  • Iceweasel
    • Upgrade iceweasel to 10.0.10esr-1+tails1, with anonymity enhancing patches from the TorBrowser applied
    • Fix Iceweasel's file associations. No more should you be suggested to open a PDF in the GIMP
  • Hardware support
    • Upgrade Linux to 3.2.32
    • Support more than 4GB of RAM
    • Support more than one CPU core
  • Miscellaneous
    • Mostly fix memory wiping at shutdown
    • gpgApplet can now handle public-key cryptography
    • Add a persistence preset for NetworkManager connections
    • Better support setting up persistence on large USB sticks
    • Make boot faster by fixing a read-ahead bug
    • Make shutdown faster by disabling useless scripts
  • Localization
    • Custom software is now translated in many more languages
    • Add Japanese input system

Plus the usual bunch of bug reports and minor improvements.

See the online
Changelog
for technical details.

Don't hesitate to get in touch with us.

Tails 0.13 is out!

Tails 0.13 brings its lot of small but useful improvements and fixes a few security issues.

Download it now.

Changes

Notable user-visible changes include:

  • Use white-list/principle of least privilege approach for local services.
    Only users that need a certain local (i.e. hosted on loopback) service
    (according to our use cases) are granted access to it by our firewall;
    all other users are denied access.
  • Allow to modify language and layout in the "Advanced options" screen
    of the greeter.
  • Enable four workspaces in the Windows XP camouflage. This allows
    users to quickly switch to a more innocent looking workspace in case
    they are working on sensitive data and attract unwanted attention.
    The workspace switcher applet isn't there, though, since there's no
    such thing in Windows XP, so switching is only possible via keyboard
    shortcuts.
  • Claws Mail now saves local/POP emails in its dot-directory by default
    instead of the non-persistent ~/Mail directory. Users who are already
    using persistence for Claws will have to perform this change manually.
  • Add support for wireless regulation.
  • Hide the TailsData partition in desktop applications.
  • Tor
    • Upgrade to 0.2.2.39.
  • Iceweasel
    • Upgrade iceweasel to 10.0.7esr-2 (Extended Support Release).
  • Hardware support
    • Upgrade Linux to 3.2.23-1.
  • Software
    • Upgrade I2P to version 0.9.1.
    • Install GNOME System Monitor.
    • Upgrade WhisperBack to 1.6, with many UI improvements and new translations.
  • Ship a first version of the incremental update system. Updates are not
    currently triggered automatically, but this will allow tests to be done
    on larger scales.

Plus the usual bunch of minor bug reports and improvements.

See the online Changelog for technical details.

Don't hesitate to get in touch with us.

Tails 0.11 is out!

This new 0.11 release is an important milestone in Tails history.

Download it now.

Changes

Notable user-visible changes include:

  • Tails Greeter, the login screen which obsoletes the language selection boot menu. Tails Greeter also adds some new options:
    • Activating persistence (see below).
    • Setting a sudo password. Unlike earlier Tails releases, full sudo access via an empty password is not available any more. In fact, full sudo access is disabled per default, but can be enabled by setting this password. See the documentation for details.
  • Tails USB installer. This graphical user interface mostly obsoletes our old instructions of cat'ing the .iso directly onto a block device. All of the USB drive must be dedicated to Tails; a bit of extra space is reserved so that future Tails releases will fit when upgrading, and the rest can be used for persistence (see below) or manually formatted if the user so wishes. See the USB installation documentation for details.
  • Persistence can optionally be used when running Tails from a USB drive. Application configurations and arbitrary directories can be made persistent. See the persistence documentation for details.
  • iceweasel
    • Install iceweasel 10.0.4esr-1 (Extended Support Release).
    • Search plugins: replace Debian-provided DuckDuckGo search plugin with the "HTML SSL" one; add ixquick.com; remove Scroogle.
    • Enable TLS false start.
  • Vidalia: upgrade to 0.2.17-1+tails1
  • Internationalization
    • Install all available iceweasel l10n packages.
    • Add fonts for Hebrew, Thai, Khmer, Lao and Korean languages.
    • Add bidi support.
    • Don't purge locales anymore.
    • Don't remove any Scribus translations anymore.
  • Hardware support
    • Linux 3.2.15-1 (linux-image-3.2.0-2-amd64).
    • Fix low sound level on MacBook5,2.
    • Disable laptop-mode-tools automatic modules. This modules set often needs some amount of hardware-specific tweaking to work properly. This makes them rather not well suited for a Live system.
  • Software
    • Install GNOME keyring.
    • Install the Traverso multitrack audio recorder and editor.
  • Miscellaneous
    • NetworkManager is now started at PostLogin time by tails-greeter, rather than as a system service.
    • Pidgin: don't use the OFTC hidden service anymore. It proved to be quite unreliable, being sometimes down for days.
    • Do not display storage volumes on Desktop. This workarounds a usability issue when persistence is enabled, and paves the way towards GNOME3's empty Desktop.
    • Don't build hybrid ISO images anymore. They boot less reliably on a variety of hardware, and are made less useful by us shipping a USB installer from now on.

Plus the usual bunch of minor bug reports and improvements.

See the online Changelog for technical details.

Don't hesitate to get in touch with us.

Syndicate content Syndicate content