Commit 1e4e5c85 authored by intrigeri's avatar intrigeri
Browse files

Merge remote-tracking branch 'origin/master' into devel

parents 0a4dd67c a1f80934
......@@ -147,69 +147,8 @@ Seeing that:
- Tails is running more or less on this devices.
- There are a limited number of different models.
We suggest to maintain a list of the state of Tails compatibility on
these computers. In the router of the web assistant, a potential user
could know if Tails works on her computer and on which media (DVD or
USB) before she tries to install it.
### Data type
The data could be stored in a YAML file, in the git repo.
### Data content
Something like:
model / part of the serial number
Tails version | working? | boot on USB? | boot on DVD? | comments
* In we want to keep history of compatibility (with older Tails
versions) in this file, maybe we will have to show to the user only
the last relevant informations.
* "Tails version" can be useful to:
- Have a better view of how the support Mac evolves.
- Let the user or frontdesk know when the compatibility got broken.
* "Comments" is raw information on Wi-Fi support, graphic support, etc.
### How to feed the list
- Call to heavily test sometimes
- Ask to people doing Tails trainings
- Update from frontdesk
- Maybe something editable by users
### Implementation
In the Mac page of the router, we could implement this in two ways, that
could be two iterations.
#### All information (without form)
- Raw data is transformed server-side into an HTML table with links to
the available scenarios for each model (maybe using
<https://ikiwiki.info/plugins/contrib/ymlfront/>).
- The full list is included in the HTML page sent to the user by hidden
in toggle by default.
- Some information is displayed to help the user identify his type of
Mac (maybe simplifying <https://fr.ifixit.com/Info/ID-your-Mac>).
- The user can toggle to display the sublist corresponding to her type
of Mac (iMac, Macbook, MacBook Air, etc.)
- If JavaScript is disabled, the full list is displayed.
#### Only relevant information (with form)
- Some information is displayed to know easily what kind of mac is
working
- The user types in a form the serial number of her Mac or clicks in a
dedicated tiny wizard like <https://fr.ifixit.com/Info/ID-your-Mac>.
- Some server-side code (Ruby?) or client-side code (JavaScript) gets
the relevant model and displays the possible scenarios.
- If implemented in JavaScript, it would fallback on the "without form"
version described earlier.
### Redmine
This tickets wants to fix the same problem : [[!tails_ticket 9150]]
We want to maintain a list of the state of Tails compatibility on
these computers. [[More details here.|mac]]
<a id="overview"></a>
......
Global process:
- First step (simple solution):
- Generic instructions that would work in most of the case.
- Second step (difficult solution):
- Maintain a list of Macs and their compatibility
Generic instructions that would work in most of the case
========================================================
Implementation is happening there : [[!tails_ticket 9316]]
Truths about Mac:
- DVD
- No DVD on some model
- DVD works on 32-bit UEFI
- Reported to fail very rarely (cf. known issues)
- MacBookPro (early 2011) fails to boot from DVD since Tails 1.1
- dd
- Not working on:
- Macbook Air 1.1: 32-bit UEFI
- Macbook Air 3.1: 64-bit UEFI
- 32-bit might work with next version (#8471)
- Test Tails 1.5 with dd :mercedes:tchou:
- Tails Installer
- 32-bit doesn't work with Tails Installer
- 64-bit work sometimes yes and sometimes no
- Test Tails 1.5 with Installer on Macbook Air 1.1 :mercedes:
- rEFInd
- Don't ask people to do that
- Bootcamp
- No good
Algorithm:
- if have a friend
- clone
- if works → happy
- if fails
- DVD
- dd
- if works → stay on DVD or dd
- if fails → sad
- else
- DVD
- dd
- another computer (different Mac, different OS)
- if fails → sad
- if DVD or dd works
- clone
- if works → happy
- else → stay on DVD or dd
- if another computer works until full-feature Tails
- if works → happy
- else → try temporary Tails
List of compatibility with Mac
==============================
Seeing that:
- A lot of current and potential users are Mac users.
- Tails is running more or less on this devices.
- There are a limited number of different models.
We will maintain the state of Tails compatibility on these computers.
Roadmap
-------
1 Bootstrap
-----------
- Specifing the data type.
- Know the precise models. #9322
- Setup a git repo.
2 Start to fill it
------------------
- Frontdesk starts to fill it
3 Have it on the website
------------------------
- Full list in markdown thanks to a routine
- In the web installation assistant
- In/linked in the troubleshooting section
- Maybe later an interactive app in the assistant
### Data type
The data could be stored in a YAML file, in the git repo. See [[!tails_ticket 9892]] for work in progress.
### Data content
- Fields ("strings", boolean?):
"model id"
- "Tails version" | DVD? | dd ? | tails installer? | SD? | wifi? | gaphic card? | mac address?
- ... (an other user reports on this model)
Writing the report after the summit, I would add :
- Anonymised uniq identifier per users
- Timestemp
- Comments (if there is non anticipated things to keep)
- Explicit say if the device type and if it boot or not (I feel it's easiest to write and read)
Trying a yaml type (optional or not):
model_id: (required)
reports:
- date: (required)
user: (optional)
tails: (required)
media: (required)
boot: (required)
install: (required)
wifi: (optional)
mac_address (optional)
graphic_card (optional)
comments: (optional)
And some samples :
model_id: MacBookAir3.2
reports:
- date: 2012-08-06
user: Oothai1iu6iefaiy
tails: 1.5
media: usb
boot: true
install: tails_installer
comments:
Touchpad not working.
- date: 2012-07-26
user: seyuo4daiChei3Oo
tails: 1.4
media: sd
boot: true
install: tails_installer
wifi: true
mac_spoofing: false
- date: 2012-06-12
user: aif0ueveeb0Ahkii
tails: 1.2
media: dvd
boot: false
comments:
Tried to boot on external DVD. Tails is on not on the Mac boot menu.
* "model id" : #9322. For one model id, there is one or several reports. (note that there is not realy the "state" for one model : the is different reports who can help to guess the state.)
* "Tails version" : can be useful to:
- Have a better view of how the support Mac evolves.
- Let the user or frontdesk know when the compatibility got broken.
* We want to keep history of compatibility (with older Tails
versions) in this file, maybe we will have to show to the user only
the last relevant informations.
* "Comments" is raw information on harward issues (touchpad, bluetooth). The most common issues are fields (wifi, mac spoofing, graphic card)
### How to feed the list
- Call to heavily test sometimes
- Ask to people doing Tails trainings
- Update from frontdesk
- Maybe something editable by users
### Later implementation
In the Mac page of the router, we could implement this in two ways, that
could be two iterations.
#### All information (without form)
- Raw data is transformed server-side into an HTML table with links to
the available scenarios for each model (maybe using
<https://ikiwiki.info/plugins/contrib/ymlfront/>).
- The full list is included in the HTML page sent to the user by hidden
in toggle by default.
- Some information is displayed to help the user identify his type of
Mac (maybe simplifying <https://fr.ifixit.com/Info/ID-your-Mac>).
- The user can toggle to display the sublist corresponding to her type
of Mac (iMac, Macbook, MacBook Air, etc.)
- If JavaScript is disabled, the full list is displayed.
#### Only relevant information (with form)
- Some information is displayed to know easily what kind of mac is
working
- The user types in a form the serial number of her Mac or clicks in a
dedicated tiny wizard like <https://fr.ifixit.com/Info/ID-your-Mac>.
- Some server-side code (Ruby?) or client-side code (JavaScript) gets
the relevant model and displays the possible scenarios.
- If implemented in JavaScript, it would fallback on the "without form"
version described earlier.
### Redmine
This tickets wants to fix the same problem : [[!tails_ticket 9150]]
......@@ -191,22 +191,22 @@ We are not considering an attacker who can:
on a native interface accessible from the add-ons menu.
- [I] Provide a malicious extension in the same browser as this would
have similar effects than attack [F].
have similar effects to attack [F].
<a id="inside_the_browser"></a>
Security inside the browser
---------------------------
The thread described as [H] is taken care of by the internals of the
The threat described as [H] is taken care of by the internals of the
browser (and the proper coding of the extension). Web pages from a
different origin cannot interfere in any way with the result of the
verification performed by the extension. Only tabs from the same origin,
or if the content of the other tab opts-in for some form of cross-domain
communication, or it's been opened with window.open() by a script in
communication, or it's been opened with `window.open()` by a script in
this tab or vice-versa (in the latter cases it has a handle to the
window of the other tab, either as the return value of window.open() or
as the window.opener property, but it cannot actually touch the content
window of the other tab, either as the return value of `window.open()` or
as the `window.opener` property, but it cannot actually touch the content
unless it's same domain).
Of course, any tab can open an alert box saying "Verification
......@@ -217,7 +217,7 @@ instead modifies the content of the page.
Bugs in the browser itself that could temper with the verification
mechanism would need to be of the "remote code execution vulnerability"
and would represent a thread in many more use cases than when verifying
and would represent a threat in many more use cases than when verifying
an ISO image.
Open questions
......
......@@ -4,6 +4,13 @@
<http://tp.linux.it/glossario.html>
# Info
Qualche informazione sui file po:
<http://tp.linux.it/guida-po/index.html>
# Repository GIT
Accesso: send {username, SSH pubkey} tuples to <intrigeri@boum.org>.
......@@ -16,11 +23,130 @@ to add it, run:
... in an existing clone of our Git repo.
# info
# Come configurare il workflow git sul vostro pc
NOTA:
tutte le righe che iniziano con $ sono da digitare nel terminale, a volte sotto c'è la risposta del terminale, oppure niente. In generale nei sistemi unix-like se il terminale dopo aver dato un comando non vi risponde niente, vuol dire che tutto è andato bene.
1) Creata una cartella con TRADUZIONI:
$ mkdir TRADUZIONI
2) Entrata nella cartella:
$ cd TRADUZIONI
3) Clonato i file per il mio uso locale nella cartella mytails (indicata
in fondo al comando):
$ git clone https://git-tails.immerda.ch/l10n-italian/tails/ mytails
Cloning into 'mytails'...
remote: Counting objects: 184366, done.
remote: Compressing objects: 100% (48007/48007), done.
remote: Total 184366 (delta 121678), reused 184279 (delta 121629)
Ricezione degli oggetti: 100% (184366/184366), 49.13 MiB | 892.00 KiB/s,
done.
Risoluzione dei delta: 100% (121678/121678), done.
Checking connectivity... fatto.
qualche informazione sui file po:
4)Entro nell cartella mytails e controllo che mi dice git:
$ git status
Sul branch master
Your branch is up-to-date with 'origin/master'.
nothing to commit, working directory clean
5)Aggiungo il repository remoto:
$ git remote add l10n-italian tails@git.tails.boum.org:l10n-italian/tails
6)Controllo che funzioni:
$ git remote -v
l10n-italian tails@git.tails.boum.org:l10n-italian/tails (fetch)
l10n-italian tails@git.tails.boum.org:l10n-italian/tails (push)
tails https://git-tails.immerda.ch/l10n-italian/tails/ (fetch)
tails https://git-tails.immerda.ch/l10n-italian/tails/ (push)
7)Modifico dei file, aggiungo traduzioni, etc.. poi torno al terminale.
8)Aggiungo due file che ho creato e modificato:
$ git add wiki/src/doc/about/license.it.po
$ git add wiki/src/doc/about/requirements.it.po
$ git status
Sul branch master
Your branch is up-to-date with 'origin/master'.
Changes to be committed:
(use "git reset HEAD <file>..." to unstage)
new file: wiki/src/doc/about/license.it.po
new file: wiki/src/doc/about/requirements.it.po
9) Faccio il commit locale
$ git commit -m "primi file tradotti"
[master c149e1b] primi file tradotti
Committer: cri <cri@localhost.lan>
Il tuo nome e l'indirizzo email sono stati configurati automaticamente usando
il tuo nome utente ed il nome host. Per favore, verifica che siano esatti.
È possibile eliminare questo messaggio impostandoli esplicitamente:
git config --global user.name "Tuo Nome"
git config --global user.email tu@esempio.com
Dopo questa operazione, puoi ripristinare l'identità usata in questo commit con:
git commit --amend --reset-author
2 files changed, 203 insertions(+)
create mode 100644 wiki/src/doc/about/license.it.po
create mode 100644 wiki/src/doc/about/requirements.it.po
10)Configuro la mia identità (opzionale):
$ git config --global user.name "Tails Developer"
$ git config --global user.email "developer@blablabla.net"
11)Genero la chiave ssh, la invio agli sviluppatori TAILS(il file.pub) e l'associo per essere autenticato sul server:
ssh-keygen -t rsa -b 4096 -C "ignifugo@blablabla.net"
$ eval "$(ssh-agent -s)"
Agent pid 12534
$ ssh-add /home/cri/ignissh
Enter passphrase for /home/cri/ignissh:
Identity added: /home/cri/ignissh (/home/cri/ignissh)
12) Metto i file sul server:
$ git push l10n-italian master
The authenticity of host 'git.tails.boum.org (77.109.139.10)' can't be established.
RSA key fingerprint is ed:1b:5b:45:e4:9c:d6:8f:55:f3:5f:b7:44:30:42:17.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'git.tails.boum.org,77.109.139.10' (RSA) to the list of known hosts.
Counting objects: 8, done.
Delta compression using up to 2 threads.
Compressing objects: 100% (8/8), done.
Writing objects: 100% (8/8), 4.04 KiB | 0 bytes/s, done.
Total 8 (delta 4), reused 0 (delta 0)
To tails@git.tails.boum.org:l10n-italian/tails
42f6936..c149e1b master -> master
13) Controllo che ci sia, sul terminale:
$git log
Oppure in grafica dal browser:
<https://git-tails.immerda.ch/l10n-italian/tails/>
# Lavoro da affrontare
Attingere nuove pagine da tradurre dando precedenza a queste:
<https://tails.boum.org/contribute/l10n_tricks/core_po_files.txt>
<http://tp.linux.it/guida-po/index.html>
# Lavoro svolto
......
......@@ -16,3 +16,4 @@ Availability and plans for the next weeks
Discussions
===========
- [[!tails_ticket 7494 desc="https://labs.riseup.net/code/issues/7494"]]
......@@ -19,24 +19,29 @@ FIXME
Documentation and website
=========================
FIXME
* We documented how to [[reset a USB stick or SD card using Mac OS X|doc/first_steps/reset/mac]].
* [[FAQ: Should I manually update add-ons included in Tor Browser?|support/faq#add-ons_update]]
User experience
===============
FIXME
* We rediscussed the terminology around installation media and decided
to only advertise SD cards as a corner case.
* Clarified the thread model of the automatic ISO verification extension
regarding [[attacks inside the browser|blueprint/bootstrapping/extension#inside_the_browser]].
* XXX: Work on the Greeter
Infrastructure
==============
* Our test suite covers FIXME scenarios, FIXME more that in April.
* Our test suite covers 185 scenarios, 3 more that in April.
* FIXME more?
* We started a discussion about having a [[CRM to handle our user support requests|blueprint/CRM_for_frontdesk]].
Funding
=======
FIXME
* FIXME more?
Outreach
========
......@@ -46,9 +51,9 @@ FIXME
Upcoming events
---------------
* A talk about Tails will take place during [[DebConf15|http://debconf15.debconf.org/]] in Heidelberg, Germany, on August 15th.
* intrigeri and Andres Gomez will present [a technical overview of Tails](https://summit.debconf.org/debconf15/meeting/289/tails-a-technical-overview/) at [[DebConf15|http://debconf15.debconf.org/]] in Heidelberg, Germany, on August 15th.
* Some Tails contributors will be at the [[Chaos Communication Camp|https://events.ccc.de/camp/2015/wiki/Main_Page]] in Mildenberg, Germany, August 1317th.
* Some Tails contributors will be at the [[Chaos Communication Camp|https://events.ccc.de/camp/2015/wiki/Main_Page]] in Mildenberg, Germany, August 13&ndash;17th.
FIXME
......@@ -60,12 +65,36 @@ FIXME
Press and testimonials
======================
FIXME
* 2015-07-29: [Gut geschützt im Internetcafé](http://www.zeit.de/digital/datenschutz/2015-07/urlaub-internetcafe-mail-facebook) by Johannes Wendt in Zeit (in German).
* 2015-07-27: [מדריך: כך תתגוננו מפני מעקב ברשת](http://mekomit.co.il/%D7%94%D7%AA%D7%92%D7%95%D7%A0%D7%A0%D7%95%D7%AA-%D7%9E%D7%A4%D7%A0%D7%99-%D7%9E%D7%A2%D7%A7%D7%91-%D7%A8%D7%A9%D7%AA%D7%95%D7%AA-%D7%97%D7%91%D7%A8%D7%AA%D7%99%D7%95%D7%AA/) (in Hebrew).
* 2015-07-25: ['Tails' Bantu Amankan Aktivis Daring](http://www.pikiran-rakyat.com/horison/2015/07/25/335754/tails-bantu-amankan-aktivis-daring) in Pikiran Rakyat (in Indonesian).
* 2015-07-23: [Digital Solution Helps Shield Online Activists](http://www.voanews.com/content/digital-solution-helps-shield-online-activists/2873529.html) by Doug Bernard in Voice of America.
* 2015-07-14: [Chatting in Secret While We're All Being Watched](https://firstlook.org/theintercept/2015/07/14/communicating-secret-watched/) by Micah Lee in The Intercept.
Translation
===========
FIXME
All website PO files
--------------------
- de: 19% (1274) strings translated, 0% strings fuzzy, 17% words translated
- fr: 46% (3120) strings translated, 2% strings fuzzy, 43% words translated
- pt: 27% (1863) strings translated, 3% strings fuzzy, 26% words translated
Total original words: 76959
[[Core PO files|contribute/l10n_tricks/core_po_files.txt]]
--------------------------------------
- de: 60% (803) strings translated, 0% strings fuzzy, 68% words translated
- fr: 92% (1214) strings translated, 3% strings fuzzy, 92% words translated
- pt: 84% (1119) strings translated, 8% strings fuzzy, 87% words translated
Total original words: 14258
Metrics
=======
......@@ -74,6 +103,6 @@ Metrics
* FIXME downloads of the OpenPGP signature of Tails ISO from our website.
* FIXME bug reports were received through WhisperBack.
* 89 bug reports were received through WhisperBack.
-- Report by BitingBird for Tails folks
......@@ -43,6 +43,10 @@ FIXME
Outreach
========
* [We have Tails stickers again](http://t.co/AgtuTN0XmJ)! We'll share them during upcoming events, you can also [[make your own|contribute/how/promote/material/stickers]]...
* A talk about Tails took place during DebConf15 in Heidelberg, Germany, on August 15th.
FIXME
Upcoming events
......
[[!meta title="Calendar"]]
* 2015-07-31:
* 2015-08-05: anonym becomes RM
* 2015-08-05:
- Freeze Tails 1.5: all features targeting Tails 1.5 must be merged
into the `devel` branch by noon CEST. This hopefully includes
into the `devel` branch by 5pm CEST. This hopefully includes
a Tor Browser candidate based on the latest Firefox 38 ESR.
- Build and upload Tails 1.5~rc1
- Automatically test Tails 1.5~rc1
* 2015-08-01: Test and release Tails 1.5~rc1
* 2015-08-06: Release Tails 1.5~rc1
* 2015-08-03: [[Monthly meeting|contribute/meetings]]
* 2015-08-05: anonym becomes RM
* 2015-08-06 and 2015-08-07: Manually test Tails 1.5~rc1
* 2015-08-10:
- All branches targeting Tails 1.5 must be merged into the `testing`
......@@ -49,3 +50,4 @@
* 2016-05-31 (?): Release 1.12
* 2016-07-12 (?): Release 1.13
......@@ -99,7 +99,7 @@ sub-directories (such as
-------------------------
You need to set up a virtual host for dl.amnesia.boum.org, with indexing
enabled.
enabled and [[!wikipedia HTTP_ETag desc="ETags"]] disabled.
### Apache configuration example
......@@ -110,6 +110,7 @@ enabled.
DocumentRoot /var/www/THE_PLACE_WHERE_YOU_WANT_OUR_FILES_TO_LIVE/
<Directory /var/www/THE_PLACE_WHERE_YOU_WANT_OUR_FILES_TO_LIVE/>
Options Indexes
FileETag None