Silk Road forums
Discussion => Security => Topic started by: invisibleman_007 on October 28, 2011, 01:13 pm
-
Ok, on my usb I used the tor browser it asked me to update tor. No problem, so that's what I did. However when I use tails it tells me to update the tor browser but obviously it's Tails so that's not possible, AND there is no update (yet) for tails.
I'm sure there will be an update soon, but I prefer to use my tails, and now I'm SLIGHTLY concerned. Thoughts?
-
i also saw that pop up which told there was a new update, funny thing was that it was a pop up....anyways, i re downloaded tails(not becuase of this)....and the pop up never came and on the tor check it doesnt say anything about updates...i dunno...tails will probably come up with a new release soon,i dont think there will be much of a threat using it for now...just not sure tbh...on the forum it has been voiced so you can bet they are working on it
-
so now my Linux box cant use Tor with the new updates, what are the new browser settings I need to enter for my computer to work with Tor
-
However when I use tails it tells me to update the tor browser but obviously it's Tails so that's not possible
Actually, it's simple as shit to keep Tails updated. The Debian repositories contain all the security updates you need, and they should be applied every time you boot Tails.
Every time you start Tails, simply type in:
sudo apt-get update && sudo apt-get upgrade
You MUST do this every time you boot tails. The Tails live CD is configured to use the 'stable' packaging list when you run update, and there are constantly new component updates. Like everything else when you use Tails, those updates are lost when you shut down your Tails session.
Every Tails user needs to do this EVERY TIME they start Tails. You should have already been doing this, so now you can start getting in this habit.
This cannot be stressed enough!
Boot Tails.
Type in: sudo apt-get update && sudo apt-get upgrade [Enter]
EVERY SINGLE TIME!
If you do not do this, you are not running as secure as you think you are.
Edited to add that your first visit after you boot should ALWAYS be to https://tails.boum.org/ to check for news, security warnings, or a new release.
-
However when I use tails it tells me to update the tor browser but obviously it's Tails so that's not possible
Actually, it's simple as shit to keep Tails updated. The Debian repositories contain all the security updates you need, and they should be applied every time you boot Tails.
Boot Tails.
Type in: sudo apt-get update && sudo apt-get upgrade [Enter]
EVERY SINGLE TIME!
Ok, so where do I type the above information in tails? Is there an option to get to some sort of DOS prompt? (I know it's not actually a dos prompt because it's unix and not windows)
Do you have a link to show how this is done? I didn't find that on the tails website. I'm currently using the usb version of tor, (the updated version) until I can fix/update tails.
Thanks!
-
i haven't used tails so i'm not sure how their GUI is setup (or I'd tell you where to go to start the terminal app), but if you press Ctrl-Alt-F1 that will take you to a command prompt. You can get back into x-windows (the gui) by pressing Ctrl-Alt-F7.
-
well I'm using tails now, and for whatever reason it appears to run normal. No error/update msg's anymore? I'd still like to know how to run the command prompt
**edit**
ok, I'm running that script now, please tell me why this needs to be done everytime I run tails, and what is it doing exactly?
-
The command prompt is called Terminal.
I haven't used Tails in a coons age, but I think it's located at: Applications -> Accessories -> Terminal
If that isn't it, let me know and I'll d/l an ISO and see what's the what.
-
Ah, you snuck an edit in there while I was posting.
Tails uses the Debian flavor of linux, which uses what's called a package manager. Basically what this does is keeps track of what you have installed on your system.
When you run update, it gets a list of any updates for all the packages that you have on your system. Then when you run upgrade, it goes out and fetches any updates your system needs, and installs them.
You need to run it every time because Tails is on a CD, and so it doesn't 'remember' the updates, so they need to be installed on the running system every time. If you don't do this, then you risk running obsolete programs.
Is it all clear now?
-
Ah, you snuck an edit in there while I was posting.
Tails uses the Debian flavor of linux, which uses what's called a package manager. Basically what this does is keeps track of what you have installed on your system.
When you run update, it gets a list of any updates for all the packages that you have on your system. Then when you run upgrade, it goes out and fetches any updates your system needs, and installs them.
You need to run it every time because Tails is on a CD, and so it doesn't 'remember' the updates, so they need to be installed on the running system every time. If you don't do this, then you risk running obsolete programs.
Is it all clear now?
yes it's becomming more clear, however it just knocked me offline/tor. I have tails installed on a usb, and while I know it's not saving the information why did it knock me offline? humm... gonna run the update again and see what happens... watch for any edits as i perform this lol :p
-
If you leave your Tor browser running during the process, it needs to update the Tor bundle, so it shuts down the service service in order to install the update, which would knock you offline.
To make sure it all goes smoothly, you should boot up, open Terminal and run the update / upgrade command, and only once that's done should you open the browser / start Tor.
Edit because I accidentally a word.
-
the browser opens automatically when tails is launched. I wrote down the script, closed the tor browser and let it update then launched Tor seems to be ok, and that sounds very similar to what you seem to be saying. I love SR for all the information on this site.. Thanks so much !!!
-
OK, I didn't know Tails launched the browser on boot.
Yeah, you seem to have it now.
For clarity, for anyone else facing the same scenario:
Boot Tails.
When the browser opens, close it.
Launch a Terminal (command prompt) window by navigating to: Applications -> Accessories -> Terminal
Type in: sudo apt-get update && sudo apt-get upgrade [Enter]
Wait for it to finish running, and close the Terminal window.
Fire up the Tor browser.
Party!
-
there needs to be a rep system here, you sir DESERVE IT!
-
I usually spend about 5 minutes upon first boot of Tails, getting everything ready, put a command line link on Desktop, open my wuala/swissDisk first, in a separate browser, and get my download ready, mostly just the bookmarks, passwords, pgp keys I'll need. Wouldn't be that hard to set up a linux package, that does all this for me auto, but it's cool to do it anyway, make sure everything's working.
Again, liberte linux has the persistence, but I'm just used to Tails, and as the guy said, Tails has good english support at website, keep u uptodate on what's happening, what new dangers may have arisen...
-
Thanks phubaiblues and Variety, stuff like this is gold for newbies (me)
-
well I looked into this ap-get and there doesn't seem to be a unanimous opinion, in fact it has been said using that update can compromise your idenity?
https://tails.boum.org/todo/Temporarily_disable_Tor/
https://tails.boum.org/forum/Security_Updates:_apt-get_Sufficient__63__/
Tails is working on a way to provide updates for there system. So I probably will refrain from using ap-get until then. Nevertheless everyones help here is greatly appreciated.
-
Yeah, the discussion there about apt-get had to do with whether or not it was a good idea to use apt-get to keep Tails up to date, INSTEAD OF d/l and burning a newer version. In other words, when a new version of Tails comes out, don't bother to get it, just use the update facility. They were saying you are probably better off getting the current version, in that particular case.
The concern was the theoretical possibility that something would change in the Debian tree that would break some Tails functionality in an old version of Tails. Note that this has never happened, it was presented in a scenario where you never upgrade your Tails ISO.
So you should always use apt-get to keep the version of Tails you are running current, and then update to the newest version as they are released.
Finally, after running apt-get on every boot, your first visit should always be to the page:
https://tails.boum.org/
If there are any security concerns with Tails, including apt-get breaking any previous versions, that news will be on that page.
tl;dr: You will always be more secure running apt-get every boot using the latest available version of Tails. The theoretical problem discussed with apt-get involved using it INSTEAD OF the most recent ISO.
-
I decided to quit bouncing between the different distros a couple days ago, and just stick with Tails. I have the latest version...I think it's 8.01...the version that came out middle of October. It still says I'm outdated, but anyway, I presume that will always be the case, since w'eve no persistence. First thing I do is get the updates, u know, open the root terminal, then run:
apt-get update && apt-get install tor && service tor start
the I do an:
apt-get update keypassx
I keep my keypassx file (.*.kmd ) stashed online, and get that right away, seems to make things go speedier, and I can put anything I need there. I've also put my passwords, usernames , and needed onion addresses in my keypass file, but I've also used in the past, an html file, which I could make with the keypass (not keypassx) app, on windows, but the kmd files are fine, and it doesn't take but a few xtra seconds to install keypassx...
I like the other distros--liberte and privatix--but I don't think we'll ever be totally sure where our efforts need to be directed, but we do what we can...also good, once you have it set up, to encrypt within encryptions, but, well, might have to study that on our own....
-
I HAD to delete my original tor directory and reinstall with updated file.
Peace 8)
-
As soon as it came out, removed old distro, and installed latest (8.01)
I keep my keepassx (*.kdb ) and my pgp public keys, and my one private key, stashed online.) as soon as I boot Tails, I have a few things I do immediately:
1) Open Wireless Connections, log into router.
2) open a root terminal, then paste this in terminal:
apt-get update && apt-get install keepassx && apt-get upgrade && apt-get install tor && service tor start
--While it's getting updates and such:
-I open and setup any linux/browser stuff I will be needing: need to go to 'Mouse' and make sure I can use keypad, and slow down and set up cursor the way I want.
-Go to my online storage site: recommend wuala or swissdisk,(dropbox is 'o.k.' but too friendly to 'outsiders')
-Open the debian Passwords and encrypted files setup (forget name, I'm not in linux right now) and copy/install my pgp keys. I have this file online,
3) Takes 5-10 minutes get it all up to speed, then I exit tor, then open vidalia again. Set it up how I want.
4) Now keypassx is installed, I get that kdb file (stored in same place as my pgp file) which has all my silkroad urls and pswds .... put correct bookmarks for main site and forums on my browser toolbar, as I open themr.
5) Done.
-
Ive just started using Tails and like it better than a ubuntu virtual box inside a truecrypt thingamabob
its easier and quicker to get up and running but my question is how do the 2 compare in terms of anonaminity
can I use Tails in a library? plug in the usb, turn off/on the computer and your good to go?
am I correct in thinking that you cant store anything in your Tails usb, like passwords or new programs
-
Ive just started using Tails and like it better than a ubuntu virtual box inside a truecrypt thingamabob
its easier and quicker to get up and running but my question is how do the 2 compare in terms of anonaminity
can I use Tails in a library? plug in the usb, turn off/on the computer and your good to go?
am I correct in thinking that you cant store anything in your Tails usb, like passwords or new programs
I think tails is mostly better because it leave no evidence around: it is all loaded in memory, and when you exit, memory is erased. I actually think all libraries are set up different: if you can reboot, and plug in usb, you should be able to use it, but I wouldn't be surprised if they made it tricky. On windows7/xp--which most libraries have, I think, you'd have to be sure to go into bios and setup to boot from flash/usb drive. One way or the other, you'll have to put flash first in bios...I'll check on my library once holidays are over.
Also, *no* you cannot save anything on tails at this time: it is designed that way, and is for people--like me--who want to be kept honest. I keep whatever I need in a couple of files in an online storage site: wuala or swissdisk or dropbox, and also on another flash drive. You might want to at least try out liberte linux if you want 'persistent' data storage, as they have an encrypted folder that keeps anything else you need to save. Also, privatix, where everything is encrypted.
I cannot get onto site with tails today, for some reason...keep getting SOCKS error: TTL expired. But I've no problems with regular TOR app...weird...