Releases March was a heavy month regarding Tails releases: shortly after putting out the Tails 3.6 major release, we had to publish an emergency 3.6.1 release to fix security issues identified at Pwn2Own, and finally we had to prepare another emergency release (3.6.2) that was released in April. Due to an unfortunate combination of software development and release management mistakes, applying these upgrades was harder than usual for Tails users; apologies! Tails 3.6 was released on March 13 (major release). Tails 3.7 is scheduled for May 8. The following changes were introduced in Tails 3.6: You can now lock your screen by clicking on the Lock button in the system menu. If you set up an administration password when starting Tails, you can unlock your screen with your administration password. Otherwise, you can set up a password to unlock your screen when locking your screen for the first time. We improved a lot the backend of the Additional Software persistence feature. Your additional software is now: Installed in the background after the session starts instead of blocking the opening of the desktop. Always installed even if you are offline. Install pdf-redact-tools, a command line tool to clean metadata and redact PDF files by converting them to PNG images. An error message indicating the name of the graphics card is now displayed when Tails fails to start GNOME. The Tails documentation launcher on the desktop now opens the documentation on our website if you are online. We activated the AppArmor profile for Thunderbird from Debian to confine Thunderbird for security. Rewrite some internal scripts from shell scripting to Python, thanks to GoodCrypto. Remove the display of debug and error messages when starting. Fix the ISO image selection being unavailable in Tails Installer in languages other than English. (#15233) Fix OpenPGP Applet being unresponsive when decrypting a lot of text. (#6398) The following changes were introduced in Tails 3.6: Update Tor Browser to 7.5.2. This fixes a critical issue in Firefox announced on March 16. This release is reproducible, unlike Tails 3.6. (#15400) Code The homepage for our OpenPGP Applet, previously hosted on Alioth has been moved to Alioth's successor, Salsa. The address is now https://openpgp-applet-team.pages.debian.net and the project (code repository and issue tracker) is reachable at https://salsa.debian.org/openpgp-applet-team/openpgp-applet, continuing the project of upstreaming this code so that you can use it outside of Tails. Also, version 1.1 as been released, fixing some long-standing bugs. We released Tails Verification 1.0 with some minor improvements from an expert review, updated jQuery and Forge libraries, and a fixed the download link on retry. We also documented the security aspects of Tails Verification. We have worked on a number of regressions that were introduced in Tails 3.6. Many fixes made their way into Tails 3.6.2 (#15434, #15437, #15433, #15400, #15449, #15371) but a few remaining issues require further investigation or have fixes waiting for review upstream. We made great progress on our SponsorW-funded project: Regarding adding VeraCrypt support to GNOME, the libblockdev bits were merged upstream and the udisks one are in good way to be merged as well, and we made progress on the GNOME Files side. Regarding Additional Software Packages, the backend and the GUI components are implemented; code review and implementation of automated tests have started. Documentation and website We documented how to: Save the configuration of your displays if you have more than one display (for example, two monitors or a projector). Reproduce a bug in Debian when reporting an error (for advanced users). Use Tails Installer to do a manual upgrade from 3.5 in languages other than English. We also made the output of the GnuPG command line to verify an ISO image more consistent across different versions of GnuPG. User experience From a session at the Internet Freedom Festival, we took notes on how participants used the metaphor of a tent to describe Tails: It's portable: you can store it in your backpack. It's amnesic: it's empty every time you set it up. It's incognito: you can move it around and it looks like other tents. We started discussing a collaboration with Simply Secure to explain better what is Tails. The goals are both to reach a consensus among contributors and to make it easier to explain Tails to the world. Hot topics on our help desk Several users complained about Tails Installer failing. And there seems to be more people complaining about losing their Persistent Volume than usual. Infrastructure We've worked on a more detailed scheme to include our web translation platform into our workflow (#10034). We documented our survey platform. Funding We submitted again our proposal for the work on distributing USB images to the NLnet call for funding. We participated in the DuckDuckGo Privacy Challenge. We raised $4 235 and rank 5th on March 28. Our fundraising team got a new member. Welcome aboard! Outreach Past events Emma Peel and sajolida where at the Internet Freedom Festival where they participated in several sessions on documentation and user experience and presented Tails in the tools showcase. anonym and intrigeri attended the Tor meeting in Rome. We've had lots of interesting discussions there, including heart-warming ones about how Tails could work more closely with the Tor project in the future. Tails was presented by jvoisin at the Journées FedeRez in Paris, France. The slides (in French) are available here. Upcoming events Tails contributors will attend CryptoRave (São Paulo, May 4-5) and will run a number of Tails/Tor-related events there, including a users meetup aimed at gathering feedback and better understanding who our users are, what they do with Tails, what works well and what is problematic. If you're around São Paulo, join us there! Press and testimonials 2018-03-19: Edward Snowden retweeted about our participation to the DuckDuckGo Privacy Challenge explaining: Because I've used @Tails_live for years. The journalists who broke the mass surveillance revelations of 2013 all relied on it. Free, libre, and open source software projects quietly save the world every day, even when you can't see it, and their success depends on your support. Translation All the website de: 52% (2837) strings translated, 7% strings fuzzy, 46% words translated fa: 38% (2074) strings translated, 10% strings fuzzy, 40% words translated fr: 92% (4963) strings translated, 0% strings fuzzy, 90% words translated it: 35% (1914) strings translated, 5% strings fuzzy, 31% words translated pt: 22% (1212) strings translated, 9% strings fuzzy, 19% words translated Total original words: 57621 Core pages of the website de: 76% (1447) strings translated, 13% strings fuzzy, 76% words translated fa: 33% (638) strings translated, 11% strings fuzzy, 33% words translated fr: 99% (1880) strings translated, 0% strings fuzzy, 99% words translated it: 70% (1336) strings translated, 14% strings fuzzy, 70% words translated pt: 41% (779) strings translated, 15% strings fuzzy, 41% words translated Total original words: 17290 Metrics Tails has been started more than 693 060 times this month. This makes 22 357 boots a day on average. 13 315 downloads of the OpenPGP signature of Tails ISO from our website. 139 bug reports were received through WhisperBack. How do we know this? Continue reading...
