None

Changes committed

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
Changes committed 14 hours ago
xin

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
[[!tag security/audit]]
[[!tag security/audit]]
15 hours ago
xin

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
[[!tag announce]]
[[!tag announce]]
15 hours ago
None

Changes committed

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
Changes committed 18 hours ago
xin

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
[[!pagetemplate template="news.tmpl"]]
[[!pagetemplate template="news.tmpl"]]
19 hours ago
xin

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
[[!meta date="Fri, 16 May 2025 17:39:24 +0000"]]
[[!meta date="Fri, 16 May 2025 17:39:24 +0000"]]
19 hours ago
xin

Contributor joined

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
Contributor joined 19 hours ago
None

Resource updated

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
File wiki/src/news/audit_by_ROS_2024.de.po was added. yesterday
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
We will communicate about security issues more broadly within our team when we discover them so that every team member can learn along the way.
 
yesterday
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
When changing security-sensitive code, such as our `sudo` configuration or any code that elevates privileges, we now require an extra review focused on security.
 
yesterday
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
While refactoring is necessary for a healthy software
development process, this postmortem showed that large refactoring can
also introduce security vulnerabilities.
 
yesterday
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
We will be more intentional about when it's worth the effort and risk to do large code refactoring.
 
yesterday
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
To have better guidelines for confidentiality and disclosure, we created our [[security issue response
policy|contribute/security_policy]], based on the policy of the Tor
Project's Network Team.
 
yesterday
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
Different team members were working with different assumptions, which caused communication issues.
 
yesterday
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
As a temporary measure, this protected our users by erring on the safe
side. But, without a disclosure process, we were not meeting our own
standards for transparency and openness to third-party reviews.
 
yesterday
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
We have sometimes been too secretive.
 
yesterday
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
This was problematic because:
 
yesterday
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
During the audit, we noticed that we lacked a policy about when we should make confidential security issues public.
 
yesterday
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
Policy and culture improvements
 
yesterday
None

String updated in the repository

  1. Tails
  2. wiki/src/news/audit_by_ROS_2024.*.po
  3. German
We will also periodically audit the configuration of `onion-grater`, our
firewall for the Tor control port. ([[!tails_ticket 20821]])
 
yesterday

Search