Skip to content
GitLab
  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • T tails
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 920
    • Issues 920
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 21
    • Merge requests 21
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • tails
  • tails
  • Issues
  • #7269
Closed
Open
Created May 20, 2014 by sajolida@sajolidaMaintainer

Explain why it is complicated to propose Tails devices for sale

Originally created by @sajolida on #7269 (Redmine)

If burn on DVD, then the DVD gets outdated after 6 weeks at most.

If installed onto a USB stick, then:

  • People would not be able to verify that the Tails on the USB stick
    is genuine. Trusting a certain Tails is a genuine one is either based
    on cryptographic verification, or on personal trust (someone you
    trust cloning a Tails for you). But one Tails is installed on a USB
    stick it is not possible to use our recommended verification
    techniques anymore. Being able of trusting the Tails you use is
    something we really care about, so customers would have to be warned
    out that.
  • We release a new version every 6 weeks. Given that schedule, it
    would not be possible to get Tails preinstalled from factory and the
    stock of USB stick would have to be upgraded every 6 weeks.
  • Possibly even worse, distributing cloned Tails USB sticks, would sabotage the plausible deniability feature we want to add (#5929) regarding the persistent volume. See https://lists.torproject.org/pipermail/tor-talk/2013-November/031095.html for details.

Related issues

  • Related to #5929
  • Related to #7270 (closed)
  • Related to #7496
Edited May 15, 2020 by sajolida
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking