report_2013_12.mdwn 8.77 KB
Newer Older
Tails developers's avatar
Tails developers committed
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96
[[!meta title="Tails report for December, 2013"]]

Releases
========

Tails 0.22 was released on December 11.

Tails 0.22.1 is scheduled for January 21. The schedule for the next
releases is on our [[contribute/calendar]].

Metrics
=======

- Tails has been started more than 218 512 times in December.
  This make 7 049 boots a day in average.
- 17 791 downloads of the OpenPGP signature of Tails ISO.
- 103 reports were received through WhisperBack.

Code
====

New features:

- Huge progress was made on the [[!tails_gitweb_branch
  feature/spoof-mac desc="MAC spoofing feature"]], that [[can now be
  tested|news/spoof-mac]] ([[!tails_ticket 5421]]).
- Experimental UEFI support was completed and is been tested. A bit
  more work [[!tails_ticket 5739 desc="is needed"]], though.
- The last mile was basically [[!tails_gitweb_branch
  feature/incremental-upgrades-integration desc="completed"]]
  regarding incremental upgrades, that will be enabled by default
  starting with Tails 0.22.1 ([[!tails_ticket 6014]]).

Work in progress:

- David Wolinsky has [started
  porting](https://mailman.boum.org/pipermail/tails-dev/2013-December/004517.html)
  the WiNoN design to Tails: multiple, independent VMs connected to
  independent paths through the Tor network in order to wear multiple
  hats. Also, as David put it: "There are other benefits of using VMs
  as the Whonix folks have recognized" ([[!tails_ticket 5748]]).
- We have struggled against a [[!tails_ticket 6460 desc="memory wipe
  regression"]] on some hardware with recent Linux kernels. No success
  so far.
- Some progress was made towards the [[!tails_gitweb_branch
  feature/wheezy desc="migration to Wheezy"]] (Tails 1.1).
- Early support for
  [Monkeysign](http://web.monkeysphere.info/monkeysign/) was
  [[!tails_gitweb_branch feature/monkeysign desc="merged"]]
  ([[!tails_ticket 6455]]), but [[!tails_ticket 6515 desc="more work
  is needed"]].

Bug and regression fixes:

- [[!tails_gitweb_branch bugfix/6468-disable-webrtc desc="Disable
  WebRTC"]] ([[!tails_ticket 6468]]).
- [[!tails_gitweb_branch bugfix/6478 desc="Fix keyboard shortcuts"]]
  ([[!tails_ticket 6478).
- [[!tails_gitweb_branch bugfix/6477-htpdate-user-agent desc="Use the
  same User-Agent in htpdate as in the Tor Browser"]] ([[!tails_ticket
  6477]]).
- [[!tails_gitweb_branch bugfix/unsafe-browser-vs.-FF24 desc="Fix the
  Unsafe Browser configuration"]] ([[!tails_ticket 6479]]).
- [[!tails_gitweb_branch
  bugfix/6536-IE-icon-in-Windows-camouflage-mode desc="Set the browser
  icon to IE's one in Windows camouflage mode"]].

Branches pending review:

- [[!tails_gitweb_branch feature/amd64-kernel desc="Install a 64-bit
  kernel"]].
- [[!tails_gitweb_branch feature/poedit-from-backports desc="Install
  poedit from official backports"]] was proposed ([[!tails_ticket
  6456]]).
- [[!tails_gitweb_branch 5588-no-autologin-consoles desc="Do not
  create auto-login text consoles"]] ([[!tails_ticket 5588]]).

And also:

- [[!tails_gitweb_branch bugfix/tor-0.2.4-is-stable desc="Tor 0.2.4 is
  now stable!"]]
- The Persistent Volume Assistant now [[!tails_ticket 5311
  desc="displays nicer paths"]]. Thanks to Andres Gomez!
- Torbutton was [[!tails_gitweb_branch feature/torbutton-1.6.5.3
  desc="upgraded"]] to 1.6.5.3 ([[!tails_ticket 6566]]).
- Our Tor Browser build and runtime dependencies
  [[!tails_gitweb_branch feature/torbrowser-24.2.0esr-1+tails1
  desc="were updated"]].
- We have fixed various NSS security issues in squeeze-backports
  ([[!tails_ticket 6497]]).

Documentation and website
=========================

- A branch to [[!tails_gitweb_branch feature/cleanup-ikiwiki-setup
  "clean up our ikiwiki configuration"]] was started.
sajolida's avatar
sajolida committed
97 98
- The Mac installation
  instructions were made
Tails developers's avatar
Tails developers committed
99 100
  a bit safer.
- The links to files and branches in cgit were fixed.
101
- The tails-support mailing list is now mentioned on [[Help other
Tails developers's avatar
Tails developers committed
102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212
  Tails users|contribute/how/help]].
- The documentation for incremental upgrades was written.
- The documentation for MAC spoofing was drafted.
- The [[draft FAQ|blueprint/faq]] has now more content.

Infrastructure
==============

Test suite
----------

- The Tails automated test suite [[!tails_gitweb_branch
  test/rjb-migration desc="can now be run"]] on pure Debian Wheezy
  with backports ([[!tails_ticket 6399]]). This allowed us to update
  the test suite to match current code, fix many bugs in it, and
  improve style a bit. Most of this was merged, but a few more
  branches are pending review: [[!tails_ticket 5959]], [[!tails_ticket
  5465]], and [[!tails_ticket 6544]].
- Our automated test suite was [[!tails_gitweb_branch feature/wheezy
  desc="partially ported to the feature/wheezy branch"]].

Build system
------------

- Thanks to David Wolinsky and others, our Vagrant setup
  [[!tails_gitweb_branch bugfix/6221-support-newer-vagrant desc="was
  updated"]] to work with newer Vagrant ([[!tails_ticket 6221]]), and
  the corresponding basebox updated to include up-to-date Debian
  archive keys. While we were at it, a few lurking bugs were fixed.
- Thanks to WinterFairy, [it is now
  easy](https://git-tails.immerda.ch/winterfairy/tails/log/?h=feature/import-translations-extern)
  to import translations from Transifex into our various
  Git repositories.

On-going discussions
====================

- [Tor Browser branding in Tails?](https://mailman.boum.org/pipermail/tails-dev/2013-December/004362.html)
- [Risks of enabled/disabled TCP
  timestamps?](https://mailman.boum.org/pipermail/tails-dev/2013-December/004520.html)
  ([[!tails_ticket 6579]])

Funding
=======

- The Freedom of the Press Foundation launched a [campaign to support
  encryption tools for
  journalists](https://pressfreedomfoundation.org/). Tails is among
  the projects this campaign gathers fund for.
- The proposal we have sent to sponsor Echo was accepted.
- Our grant proposal with sponsor Charlie was rejected.
- We are slowly making progress on our grant proposal with
  sponsor Golf.
- We have almost completed a proposal to be sent to sponsor Lima.
- Our contract with sponsor Bravo is now finished.
- Tails will soon accept donations in currencies other than Bitcoin.
- We are now very likely to create a non-profit organization dedicated
  to Tails.
- We have almost wrapped-up our bounties program. A report will be
  published soonish.

Outreach
========

Tails participated in the [30th Chaos Communication
Congress](https://events.ccc.de/congress/2013/wiki/Main_Page). It was
a great opportunity to meet, in person, a few existing and new
contributors, as well as many people we are working with.

A self-organized event called *Tails needs your help* was organized
([slides](https://tails.boum.org/promote/slides/2013-12-29_-_Tails_needs_your_help.shtml)).
It was a success considering the late notice.

See you next year, probably with more space and events dedicated
to Tails!

Press and testimonials
======================

* 2013-12: Bruce Schneier
  [answered](http://www.reddit.com/r/IAmA/comments/1r8ibh/iama_security_technologist_and_author_bruce/cdknf7a)
  to someone asking him what Linux distribution is its favorite: "I don't
  use Linux. (Shhh. Don't tell anyone.) Although I have started using Tails".
* 2013-12-12: In [A conversation with Bruce
  Schneier](http://boingboing.net/2013/12/15/bruce-schneier-and-eben-moglen-2.html),
  as part of the "Snowden, the NSA and free software" cycle at
  Columbia Law School NYC, Bruce Schneier says:
  - "I think most of the public domain privacy tools are going to be
    safe, yes. I think GPG is going to be safe. I think OTR is going
    to be safe. I think that Tails is going to be safe. I do think
    that these systems, because they were not -- you know, the NSA has
    a big lever when a tool is written closed-source by a for-profit
    corporation. There are levers they have that they don't have in
    the open source international, altruistic community. And these are
    generally written by crypto-paranoids, they're pretty well
    designed. We make mistakes, but we find them and we correct them,
    and we're getting good at that. I think that if the NSA is going
    after these tools, they're going after implementations."
  - "What do I trust? I trust, I trust Tails, I trust GPG [...]"
  - "We can make it harder, we can make it more expensive, we can make
    it more risky. And yes, every time we do something to increase one
    of those, we're making ourselves safer. [...] There are tools we
    are deploying in countries all over the world, that are keeping
    people alive. Tor is one of them. I mean, Tor saves lives. [...]
    And every time you use Tor [...] provides cover for everyone else
    who uses Tor [...]"
* Jacob Appelbaum stated at the [Chaos Communication
  Congress](https://events.ccc.de/congress/2013/Fahrplan/events/5713.html):
  "if you are a journalist and you are not using Tails, you should
  probably be using Tails, unless you *really* know what
  you're doing".