| I appreciate a lot of the work that the Tails guys do - but for a privacy and security focused distribution there are far too many included apps for my liking[1], which increases the attack surface. LibreOffice, Gimp and Audacity are just some of the apps - and many have a horrible history of vulnerabilities[2]. When Tails has had vulnerabilities it is often with one of these included apps[6]. The browser isn't sanboxed (it's in progress[3]), and the machine is still directly connected to the internet, so you're a single Firefox vulnerability and a drive-by download away from being deanonymized. It is also a shame that both OS X and Windows make it difficult to write an OS to an USB stick and boot from it - the install requires an intermediary Linux OS either on DVD or USB, which a lot of users won't get by. For a different approach, see Whonix[4] - a virtual machine based approach with an isolating proxy (very popular setup amongst black hats) and Qubes OS[4] which is built on Xen and runs processes in separate VM's [1] https://tails.boum.org/doc/about/features/index.en.html [2] https://www.cvedetails.com/vulnerability-list/vendor_id-1143... [3] https://wiki.mozilla.org/Security/Sandbox [4] https://www.whonix.org/ [5] https://www.qubes-os.org/ [6] https://blog.exodusintel.com/2014/07/23/silverbullets_and_fa... |
https://www.whonix.org/wiki/Qubes