4
edits
Difference between revisions of "Tails"
Jump to navigation
Jump to search
no edit summary
| Line 22: | Line 22: | ||
Tails is by design amnesic. It lives in RAM and does not write to any other drive unless strictly specified. However, it is possible to set up an encrypted persistence volume (for example, within the USB Drive where Tails is installed) to save user data. It is also possible to instruct Tails to automatically install some additional software from the persistence drive, to load bookmarks for the Tor Browser, keep GPG keys or to keep configurations data for other applications. It is important to note, that the encrypted space could be detected by forensic analysis and is not hidden like in the case of [[VeraCrypt]] which offers [[plausible deniability]] and therefore should not be distinguishable from random data.<ref>https://tails.boum.org/doc/first_steps/persistence/configure/index.en.html</ref> | Tails is by design amnesic. It lives in RAM and does not write to any other drive unless strictly specified. However, it is possible to set up an encrypted persistence volume (for example, within the USB Drive where Tails is installed) to save user data. It is also possible to instruct Tails to automatically install some additional software from the persistence drive, to load bookmarks for the Tor Browser, keep GPG keys or to keep configurations data for other applications. It is important to note, that the encrypted space could be detected by forensic analysis and is not hidden like in the case of [[VeraCrypt]] which offers [[plausible deniability]] and therefore should not be distinguishable from random data.<ref>https://tails.boum.org/doc/first_steps/persistence/configure/index.en.html</ref> | ||
=== Flaw in Tails’ video player to reveal the real IP address === | |||
* Facebook Helped the FBI Hack a Child Predator | |||
Facebook paid a cybersecurity firm six figures to develop a zero-day in Tails to identify a man who extorted and threatened girls. | |||
June 10, 2020, 2:57pm | |||
For years, a California man systematically harassed and terrorized young girls using chat apps, email, and Facebook. He extorted them for their nude pictures and videos, and threatened to kill and rape them. He also sent graphic and specific threats to carry out mass shootings and bombings at the girls' schools if they didn't send him sexually explicit photos and videos. | |||
Buster Hernandez, who was known as “Brian Kil” online, was such a persistent threat and was so adept at hiding his real identity that Facebook took the unprecedented step of helping the FBI hack him to gather evidence that led to his arrest and conviction, Motherboard has learned. | |||
The FBI and Facebook used a so-called zero-day exploit in the privacy-focused operating system Tails, which automatically routes all of a user's internet traffic through the Tor anonymity network, to unmask Hernandez's real IP address, which ultimately led to his arrest. | |||
Hernandez was so notorious within Facebook that employees considered him the worst criminal to ever use the platform, two former employees told Motherboard. According to these sources, Facebook assigned a dedicated employee to track him for around two years and developed a new machine learning system designed to detect users creating new accounts and reaching out to kids in an attempt to exploit them. That system was able to detect Hernandez and tie different pseudonymous accounts and their respective victims to him, two former Facebook employees said. | |||
The firm worked with a Facebook engineer and wrote a program that would attach an exploit taking advantage of a flaw in Tails’ video player to reveal the real IP address of the person viewing the video. | |||
The FBI then got a warrant and the help of a victim who sent a booby-trapped video to Hernandez, as Motherboard previously reported. | |||
https://www.vice.com/en_us/article/v7gd9b/facebook-helped-fbi-hack-child-predator-buster-hernandez | |||
== Installation == | == Installation == | ||
| Line 554: | Line 575: | ||
* [[I2P]] | * [[I2P]] | ||
* [https://deeponion.org DeepOnion] | * [https://deeponion.org DeepOnion] | ||
* [[The Tor Project, Inc | * [[The Tor Project, Inc]] ([[Tor]]) | ||
== See also == | == See also == | ||