Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use Tails rather than Ubuntu #3

Open
ioerror opened this issue May 16, 2013 · 2 comments
Open

Use Tails rather than Ubuntu #3

ioerror opened this issue May 16, 2013 · 2 comments

Comments

@ioerror
Copy link

ioerror commented May 16, 2013

The Ubuntu Live CD is not really fit for the task described. I suggest the use of Tails - it supports encrypted volumes, may be burned to a CD/DVD, installed onto a USB disk, and so on. It is designed to ensure that the network fails closed, so if the system was accidentally online, it would only connect through Tor. This also gives you native Tor support without any configuration.

@dolanjs
Copy link
Member

dolanjs commented May 16, 2013

We have talked internally about using tails for the secure viewing station
and will probably make that change in the documentation. Though for the
newyorker installation the machine they are using does not have wireless or
network card. Thanks for the input. Also looking at other options for the
source interface server possibly using tor-ramdisk.

The Ubuntu Live CD is not really fit for the task described. I suggest the
use of Tails https://tails.boum.org/ - it supports encrypted volumes, may
be burned to a CD/DVD, installed onto a USB disk, and so on. It is designed
to ensure that the network fails closed, so if the system was accidentally
online, it would only connect through Tor. This also gives you native Tor
support without any configuration.


Reply to this email directly or view it on
GitHubhttps://github.com//issues/3
.

@ioerror
Copy link
Author

ioerror commented May 16, 2013

tor-ramdisk is probably a reasonable choice for the server - I bet they'd even be interested in adding DeadDrop as a package/feature.

If you need help with Tails, let me know - it is designed to do what you need, even without network cards. It also supports the use of GnuPG hardware tokens. This might be a useful compartmentalization depending on your threat model.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants