Tails 7.4 x64

Теперь решил изучить Debian, на основе которого сделан Tails. Windows 10 - помойный отстой!

tails (2.10) unstable; urgency=medium

* Major new features and changes
- Upgrade the Linux kernel to 4.8.0-0.bpo.2 (Closes: #11886).
- Install OnionShare from jessie-backports. Also install
python3-stem from jessie-backports to allow the use of ephemeral
onion services (Closes: #7870).
- Completely rewrite tor-controlport-filter. Now we can safely
support OnionShare, Tor Browser's per-tab circuit view and
similar.
* Port to python3.
* Handle multiple sessions simultaneously.
* Separate data (filters) from code.
* Use python3-stem to allow our filter to be a lot more
oblivious of the control language (Closes: #6788).
* Allow restricting STREAM events to only those generated by the
subscribed client application.
* Allow rewriting commands and responses arbitrarily.
* Make tor-controlport-filter reusable for others by e.g. making
it possible to pass the listen port, and Tor control
cookie/socket paths as arguments (Closes: #6742). We hear
Whonix plan to use it! :)
- Upgrade Tor to 0.2.9.9-1~d80.jessie+1, the new stable series
(Closes: #12012).

* Security fixes
- Upgrade Tor Browser to 6.5 based on Firefox 45.7 (Closes: #12159)
- Upgrade Icedove to 1:45.6.0-1~deb8u1+tail1s.
- Upgrade bind9-packages to 1:9.9.5.dfsg-9+deb8u9.
- Upgrade pcscd to 1.8.13-1+deb8u1.
- Upgrade libgd3 to 2.1.0-5+deb8u8.
- Upgrade libxml2 to 2.9.1+dfsg1-5+deb8u4.
- Upgrade tor to 0.2.9.9-1~d80.jessie+1.
- Upgrade samba-libs to 2:4.2.14+dfsg-0+deb8u2.

* Minor improvements
- Enable and use the Debian Jessie proposed-updates APT
repository, anticipating on the Jessie 8.7 point-release
(Closes: #12124).
- Enable the per-tab circuit view in Tor Browser (Closes: #9365).
- Change syslinux menu entries from "Live" to "Tails" (Closes:
#11975). Also replace the confusing "failsafe" wording with
"Troubleshooting Mode" (Closes: #11365).
- Make OnionCircuits use the filtered control port (Closes:
#9001).
- Make tor-launcher use the filtered control port.
- Run OnionCircuits directly as the Live user, instead of a
separate user. This will make it compatible with the Orca screen
reader (Closes: #11197).
- Run tor-controlport-filter on port 9051, and the unfiltered one
on 9052. This simplifies client configurations and assumptions
made in many applications that use Tor's ControlPort. It's the
exception that we connect to the unfiltered version, so this
seems like the more sane approach.
- Remove tor-arm (Nyx) (Closes: #9811).
- Remove AddTrust_External_Root.pem from our website CA bundle. We
now only use Let's Encrypt (Closes: #11811).
- Configure APT to use Debian's Onion services instead of the
clearnet ones (Closes: #11556).
- Replaced AdBlock Plus with uBlock Origin (Closes: #9833). This
incidentally also makes our filter lists lighter by
de-duplicating common patterns among the EasyList filters
(Closes: #6908). Thanks to spriver for this first major code
contribution!
- Install OpenPGP Applet 1.0 (and libgtk3-simplelist-perl) from
Jessie backports (Closes: #11899).
- Add support for exFAT (Closes: #9659).
- Disable unprivileged BPF. Since upgrading to kernel 4.6,
unprivileged users can use the bpf() syscall, which is a
security concern, even with JIT disabled. So we disable that.
This feature wasn't available before Linux 4.6, so disabling it
should not cause any regressions (Closes: #11827).
- Add and enable AppArmor profiles for OnionCircuits and OnoinShare.
- Raise the maximum number of loop devices to 32 (Closes: #12065).
- Drop kernel.dmesg_restrict customization: it's enabled by
default since 4.8.4-1~exp1 (Closes: #11886).
- Upgrade Electrum to 2.7.9-1.
- Make the Electrum proxy configuration apply after upgrading to
2.7.9-1. These changes incidentally makes Electrum behave nicer:
users will now not be presented the network configuration part
of the setup wizard -- a server will be picked randomly, and
Electrum will auto-connect. The automated test suite is adjusted
accordingly (Closes: #12140).
- Remove unused Browser profile seed file localstore.rdf which was
made obsolete in Firefox 34.
- Tor Browser: switch from pt-PT to pt-BR langpack. The upstream
Tor Browser did this in version 6.5 (Refs: #12159).

* Bugfixes
- Tails Greeter:
* use gdm-password instead of gdm-autologin, to fix switching to
the VT where the desktop session lives on Stretch (Closes:
#11694)
* Fix more options scrolledwindow size in Stretch (Closes:
#11919)
- Tails Installer: remove unused code warning about missing
extlinux in Tails Installer (Closes: #11196).
- Update APT pinning to cover all binary packages built from
src:mesa so we ensure installing mesa from jessie-backports
(Closes: #11853).
- Install xserver-xorg-video-amdgpu. This should help supporting
newer AMD graphics adapters. (Closes #11850)
- Fix firewall startup during early boot, by referring to the
"amnesia" user via its UID (Closes: #7018).
- Include all amd64-microcodes.
- refresh-translations: ignore
config/chroot_local-includes/usr/share/doc/tails/website/.
Otherwise, if the website has been built already, PO tools
complain that there are files with translatable strings in
there, which are not listed in POTFILES.in.
- Make uBlock Origin's button appear on first run. Otherwise it
will only appear on browser runs after the first one. This bug
also affected Adblock Plus (Closes: #12145).

* Build system
- Be more careful when unmounting the tmpfs used as workspace
during builds, fixing an issue that made Jenkins' ISO builders
prone to failures (Closes: #12009).
- Upgrade the Vagrant basebox to 20170105. The only big change is
that we now install the backported kernel in the builder VM, to
make building possible on Debian Sid (Closes: #12081).
- Ensure the VirtualBox guest DKMS modules are built for the
kernel we want them for. In some situations, depending on the
version of the running kernel, the modules would not be built
for the 686 kernel, which is the one that needs the VirtualBox
guest modules. This commit ensures the VirtualBox guest modules
are built and installed regardless of the how the build
environment looks like (Closes: #12139).

* Test suite
- Replace the filesystem shares support with a helper for easily
sharing files from the host to the guest using virtual disks
(Closes: #5571).
- Do not test sending email when testing POP3. We cannot clean
that email up (easily) since when we use POP3 deletions won't
affect the remote inbox, only our local one, resulting in the
quota being reached eventually (Closes: #12006).
- Have APT tests configure APT to use non-onion sources. Our test
suite uses Chutney to create a virtual, private Tor network, and
thus doesn't support connections to Onion services running in
the real Tor network (Refs: #11556).
- Allow connections to Tor's control port during stream isolation
tests, but only for those applications where we expect that.
- Fix Electrum tests after upgrading to 2.7.9-1.
- Make encryption.feature pass for Tails 2.10~rc1.
- Adapt tests after the Donation campaign was disabled (Refs:
#12134).
- Fix 'The "Tails documentation" link on the Desktop works'
scenario. The TailsOfflineDocHomepage.png image doesn't match
what we see any more (I have no clue why), so let's use Dogtail
and solve this once and for all, hopefully.
- Work around Tails freezing during memory wiping. These
workarounds should be reverted once #11786 is fixed
properly. (Refs: #10776, #11786)
- Support both xtigervncviewer and xtightvncviewer for --view.
xtightvncviewer is a transitional package in Sid, which depends
on tigervnc-viewer (which ships xtigervncviewer), so by keeping
the dep and supporting both binaries, --view will work on both
Sid and Jessie (Closes: #12129).
- Test suite: bump image after upgrading to Tor Browser 6.5 (Refs:
#12159).
- Add debugging info for when PacketFu misbehaves, and be more
careful when to save pcap artifacts (Refs: #11508).

-- Tails developers <tails@boum.org> Mon, 23 Jan 2017 1137 +0100

Почему до сих пор X64 не впилили?

Лучше просто скачать для windows браузер tor и спокойно сёрфить по интернету.

Ну что вы прям как дети малые. Tor давно и не единожды взломан, какое может быть анонимное сЁрфирование? Зарубите себе на носу и не парьте мозги. Как только в инете появляется популярный продукт такого рода, к нему сразу же начинают присматриваться спецы. Более того, чтобы облегчить себе задачу, они могут заниматься их разработкой самостоятельно и привлекать для этого "лояльных" людей со стороны. И "рыбка сама поплывет в сети", даже не подозревая, что они уже давно захлопнулись. Если вы не серьезный преступник, террорист или еще какой-нибудь перебежавший широкую дорогу государству человек, никто за вами принципиально охотиться не будет. По крайней мере, пока существующие системы сбора и обработки информации не будут способны в реал-тайм переваривать громадные объемы в отношении каждого пользователя. Если же использование таких программ,так сказать, имеет рабочий интерес - скрыть свои похождения от начальника, то есть программы и попроще. Но от толкового сисадмина и они спасут.
Лишь одна практическая ценность есть у продуктов на базе LiveCD - предохранить рабочую систему от различных зловредов. Опять же, если гарантировано отсутствие прямого доступа к BIOS компьютера, а то не заметите, как получите еще одного монстрика, но в другом обличье.

Записал образ Tails i386 2.0 на 4Г флешку с помощью Universal-USB-Installer.
Первая попытка запустить Tails i386 не удалась...
Со второй попытки на ноуте Asus K52N (WinXP) удалось загрузиться от Tails i386, но результат разочаровал: тормознутость и неудобства (по сравнению с Windows) в использовании. Видимо, мне не слишком нужна анонимность.
Поэтому соглашусь с оценками Pepperr-а и Artur Marmot-а одновременно.

с версии v2.6 немогу подключится к WIFI, а в v2.5 все нормально, кто-нибудь сталкивался с подобным? А так вещь хорошая.

хотел перейти на линукс - но так сильно привык к виндовс - что не смог понять линукс - где там что находится. как установить или запускать программы для винды...
многие именно по этой причине не переходят на линукс.
интерфейс бы припаяли на линукс от вин 8 или 10.
встречал информацию - что линукс используют в кино...

* Security fixes
- Upgrade Tor Browser to 6.0.7 (build3) based on Firefox 45.5.1.
- Upgrade gstreamer0.10-based packages to 0.10.31-3+nmu4+deb8u2.
- Upgrade imagemagick-based packages to 8:6.8.9.9-5+deb8u6.
- Upgrade libicu52 to 52.1-8+deb8u4.
- Upgrade vim-based packages to 2:7.4.488-7+deb8u1.

* Minor improvements
- Reserve 64 MiB for the kernel and 128 MiB for privileged
processes before the memory is wiped. We hope that this might
help (but not solve, sadly) some crashes experienced while
wiping the memory.

* Build system
- Make the wiki shipped inside Tails build deterministically
(Closes: #11966):
* Enable ikiwiki's "deterministic" option, and require it when
building.
* Use our custom backport of discount (2.2.1-1~bpo8+1~0.tails1),
to fix reproducibility issues (Debian#782315). This can be
dropped once our ISO builders use Stretch.
* Install ikiwiki from our builder-jessie APT suite, to make the
pagestats plugin output deterministic.
- refresh-translations: don't update PO files unless something
other than POT-Creation-Date was changed. (Closes: #11967)
- Fix Vagrant's is_release? check. Per auto/build, we consider it
a release when we build from detached head, and HEAD is tagged.
- Enforce `cleanall` when building a release. I.e. don't allow the
user supplied options to override this behaviour. This is
important since Vagrant caches wiki builds, and we do not want
leftovers from a previous builds ending up in a release. Also,
this is required for making Tails images build reproducibly.
- Make the build system's `cleanall` option really clean
everything. At the moment it doesn't clean the cached wiki
build (which basically was its only job).
- import-package: support contrib and non-free sections.

* Test suite
- Wait a bit between opening the shutdown applet menu, and
clicking one of its widgets. (Closes: #11616).
- Adapt Icedove test after removing the amnesia branding add-on.
(Closes: #11906)
- Replace --pause-on-fail with --interactive-debugging. It does
the same thing, but also offers an interactive Ruby shell, via
pry, with the Cucumber world context.

Спасибо за новость. Что-то закачка рвется ~ на 500Mb. Пришлось перейти на сайт https://tails.boum.org/install/download/index.en.html
Отдельное спасибо за " MD5: 8A58A6C9731E3889182D91DC4FF6552C ".

Upgrades and changes
Upgrade Tor to 0.2.8.9.

Upgrade Tor Browser to 6.0.6.

Upgrade to Linux 4.7.

Upgrade Icedove to 45.4.0.

Fixed problems
Synaptic installs packages with the correct architecture.
Set default spelling to en_US in Icedove.
Known issues
Users setting their Tor Browser security slider to High will have to click on a link to see the result of the search they done with the search box.

New features
We enabled address space layout randomization in the Linux kernel (kASLR) to improve protection from buffer overflow attacks.
We installed rngd to improve the entropy of the random numbers generated on computers that have a hardware random number generator.
Upgrades and changes
Upgrade Tor to 0.2.8.7.
Upgrade Tor Browser to 6.0.5.
Upgrade to Linux 4.6. This should improve the support for newer hardware (graphics, Wi-Fi, etc.)
Upgrade Icedove to 45.2.0.
Upgrade Tor Birdy to 0.2.0.
Upgrade Electrum to 2.6.4.
Install firmware for Intel SST sound cards (firmware-intel-sound).
Install firmware for Texas Instruments Wi-Fi interfaces (firmware-ti-connectivity).
Remove non-free APT repositories. We documented how to configure additional APT repositories using the persistent volume.
Use a dedicated page as the homepage of Tor Browser so we can customize it for our users.
Set up the trigger for RAM erasure on shutdown earlier in the boot process. This should speed up shutdown and make RAM erasure more robust.
Fixed problems
Disable the automatic configuration of Icedove when using OAuth.
This should fix the automatic configuration for GMail accounts. (#11536)
Make the Disable all networking and Tor bridge mode options of Tails Greeter more robust. (#11593)
For more details, read our changelog.
Known issues
For some users memory wiping fails more often than in Tails 2.5, and for some users it fails less often. Please report any such changes to #11786.
See the list of long-standing issues.

Пароли и другие нужные файлы храню в контейнере с двойным дном с ничем не примечательным расширением .mp3

* Major new features and changes
- Upgrade Icedove to 1:45.1.0-1~deb8u1+tails2. (Closes: #11530)
· Fix long delay causing bad UX in the autoconfig wizard,
when it does not manage to guess proper settings on some domains.
(Closes: #11486)
· Better support sending email through some ISPs, such as Riseup.
(Closes: #10933)
· Fix spurious error message when creating an account and providing
its password. (Closes: #11550)

* Security fixes
- Upgrade Tor Browser to 6.0.3 based on Firefox 45.3. (Closes: #11611)
- Upgrade GIMP to 2.8.14-1+deb8u1.
- Upgrade libav to 6:11.7-1~deb8u1.
- Upgrade expat to 2.1.0-6+deb8u3.
- Upgrade libgd3 to 2.1.0-5+deb8u6.
- Upgrade libmodule-build-perl to 0.421000-2+deb8u1.
- Upgrade perl to 5.20.2-3+deb8u6.
- Upgrade Pidgin to 2.11.0-0+deb8u1.
- Upgrade LibreOffice to 1:4.3.3-2+deb8u5.
- Upgrade libxslt1.1 to 1.1.28-2+deb8u1.
- Upgrade Linux to 3.16.7-ckt25-2+deb8u3.
- Upgrade OpenSSH to 1:6.7p1-5+deb8u3.
- Upgrade p7zip to 9.20.1~dfsg.1-4.1+deb8u2.

* Minor improvements
- htpdate: replace obsolete and unreliable URIs in HTP pools, and decrease
timeout for HTTP operations for more robust time synchronization.
(Closes: #11577)
- Hide settings panel for the Online Accounts component of GNOME,
that we don't support. (Closes: #11545)
- Vastly improve graphics performance in KVM guest with QXL driver.
(Closes: #11500)
- Fix graphics artifacts in Tor Browser in KVM guest with QXL driver.
(Closes: #11489)

* Build system
- Wrap Pidgin in a more maintainable way. (Closes: #11567)

* Test suite
- Add a test scenario for the persistence "dotfiles" feature.
(Closes: #10840)
- Improve robustness of most APT, Git, SFTP and SSH scenarios,
enough to enable them on Jenkins. (Closes: #10444, #10496, #10498)
- Improve robustness of checking for persistence partition. (Closes: #11558)
- Treat Tails booting from /dev/sda as OK, to support all cases
including a weird one caused by hybrid ISO images. (Closes: #10504)
- Bump a bunch of timeouts to cope with the occasional slowness on Jenkins.
- Only query A records when exercising DNS lookups, to improve robustness.

New features
We enabled the automatic account configuration of Icedove which discovers the correct parameters to connect to your email provider based on your email address. We improved it to rely only on secure protocol and we are working on sharing these improvements with Mozilla so that users of Thunderbird outside Tails can benefit from them as well.

?autoconfig.png

Upgrades and changes
Update Tor Browser to 6.0.1, based on Firefox 45.

Remove the preconfigured #tails IRC channel. Join us on XMPP instead!

Always display minimize and maximize buttons in titlebars. (#11270)

Remove GNOME Tweak Tool and hledger. You can add them back using the Additional software packages persistence feature.

Use secure HKPS OpenPGP key server in Enigmail.

Harden our firewall by rejecting RELATED packets and restricting Tor to only send NEW TCP syn packets. (#11391)

Harden our kernel by:

Setting various security-related kernel options: slab_nomerge slub_debug=FZ
mce=0 vsyscall=none. (#11143)
Removing the .map files of the kernel. (#10951)
Fixed problems
Update the DRM and Mesa graphical libraries. This should fix recent problems with starting Tails on some hardware. (#11303)

Some printers that stopped working in Tails 2.0 should work again. (#10965)

Enable Packetization Layer Path MTU Discovery for IPv4. This should make the connections to obfs4 Tor bridges more reliable. (#9268)

Remove our custom ciphers and MACs settings for SSH. This should fix connectivity issues with other distributions such as OpenBSD. (##7315)

Fix the translations of Tails Upgrader. (#10221)

Fix displaying the details of a circuit in Onion Circuits when using Tor bridges. (#11195)

For more details, read our changelog.

Known issues
The automatic account configuration of Icedove freezes when connecting to some email providers. (#11486)

In some cases sending an email with Icedove results in the error: "The message could not be sent using Outgoing server (SMTP) mail.riseup.net for an unknown reason." When this happens, simply click "Ok" and try again and it should work. (#10933)

The update of the Mesa graphical library introduce new problems at least on AMD HD 7770 and nVidia GT 930M.