None

Resource updated

  1. Tails
  2. wiki/src/doc/anonymous_internet/Tor_Browser.*.po
  3. Polish
The "wiki/src/doc/anonymous_internet/Tor_Browser.pl.po" file was changed. 2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/doc/anonymous_internet/Tor_Browser.*.po
  3. Polish
<p>To prevent Tails from running out of memory and crashing, download
very big files to the <i>Persistent</i> folder.
The files that you download outside of the Persistent Storage are
stored in memory (RAM), which is more limited.</p>
 
2 weeks ago
None

Resource updated

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
The "wiki/src/news/audit_by_ROS_2024.pl.po" file was changed. 2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
We can now share with you the [final report](https://gitlab.tails.boum.org/-/project/2/uploads/8e2864e7271d1a34d4419f1cb70ebd18/tails-ros-penetration-test-report-2024.pdf).
 
2 weeks ago
None

Resource updated

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
File wiki/src/news/audit_by_ROS_2024.pl.po was added. 2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
We will communicate about security issues more broadly within our team when we discover them so that every team member can learn along the way.
 
2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
When changing security-sensitive code, such as our `sudo` configuration or any code that elevates privileges, we now require an extra review focused on security.
 
2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
While refactoring is necessary for a healthy software
development process, this postmortem showed that large refactoring can
also introduce security vulnerabilities.
 
2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
We will be more intentional about when it's worth the effort and risk to do large code refactoring.
 
2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
To have better guidelines for confidentiality and disclosure, we created our [[security issue response
policy|contribute/security_policy]], based on the policy of the Tor
Project's Network Team.
 
2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
Different team members were working with different assumptions, which caused communication issues.
 
2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
As a temporary measure, this protected our users by erring on the safe
side. But, without a disclosure process, we were not meeting our own
standards for transparency and openness to third-party reviews.
 
2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
We have sometimes been too secretive.
 
2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
This was problematic because:
 
2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
During the audit, we noticed that we lacked a policy about when we should make confidential security issues public.
 
2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
Policy and culture improvements
 
2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
We will also periodically audit the configuration of `onion-grater`, our
firewall for the Tor control port. ([[!tails_ticket 20821]])
 
2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
Our CI now ensures that we don't write software that does unsafe `.desktop`
file lookup.
 
2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
Postmortem of OTF-004 ([[!tails_ticket 20817]] and [[!tails_mr 2040]])
 
2 weeks ago
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. Polish
Our `sudo` configuration is now generated from a higher-level description,
which has safer defaults and demands explanations when diverging
from them.
 
2 weeks ago

Search