News for hackers. Stuff that matters.
Re:Tails 3.0 Released by d33 on Tuesday June 13, 2017 @04:55PM (#14548570)
Those two changes seem particularly important:

* Tails 3.0 works on 64-bit computers only and not on 32-bit computers anymore. Dropping hardware support, even for a small portion of our user base, is always a hard decision to make but being 64-bit only has important security and reliability benefits. For example, to protect against some types of security exploits, support for the NX bit is compulsory and most binaries are hardened with PIE which allows ASLR.

* Update Tor Browser to 7.0 (based on Firefox 52 ESR) which is multiprocess and paves the way to content sandboxing. This should make it harder to exploit security vulnerabilities in the browser.

What do you guys think about dropping 32-bit?

Re:Tails 3.0 Released by nickpsecurity on Tuesday June 13, 2017 @09:10PM (#14550058)
The 32-bit computers are the only thing available to lots of poor people or those just relying on other people's computers. People's teenagers, people using libraries, workers with legacy systems, and Internet cafes come to mind. Dropping it is a mistake if both could be supported. If it was lack of contributions or funding, I can understand the perspective of focusing on most secure one.

EDIT to add: Always remember with solutions like this that the adversary isn't always the NSA and so on. The Tor users' page lists all kinds of people who need help against foes with limited budgets or knowledge who might not be able to break Linux or Tor.

https://www.torproject.org/about/torusers.html.en

Re:Tails 3.0 Released by skraelingjar on Tuesday June 13, 2017 @05:25PM (#14548791)
I wonder if this will effect journalists and activists in parts of the world where old machines are still used (Africa, Middle East, parts of Asia). Not being able to make use of newer browser versions (without updating every time or taking the risk of using a persistent volume) could put them at greater risk.
Re:Tails 3.0 Released by Laforet on Tuesday June 13, 2017 @07:22PM (#14549523)
I don't think it is unreasonable to assume everyone already has a 64-bit capable PC considering the most recent mainstream 32-bit only CPU is 2004's first gen Prescott Pentium 4.
Re:Tails 3.0 Released by dogma1138 on Tuesday June 13, 2017 @08:22PM (#14549848)
Intel early centrinos are not 64bit (Dothan / Banias) so are the initial Core / Core Duo CPUs (Yona).

Intel didn't release a mobile 64bit CPU until 2006/7 with Core 2 Duo.

Also the initial implementations of Intel64/EMT64 lack certain functions so even tho they technically support 64bit they might lack certain other features that are required by modern operating systems.

So overall if you have a 10 year old laptop you might not be able to use Tails 3.0.

Re:Tails 3.0 Released by boondaburrah on Tuesday June 13, 2017 @09:22PM (#14550089)
not even. If you have a netbook from 2009 the ubiquitous Intel Atom N270 that powered all of those was a single-core 32-bit CPU.
Re:Tails 3.0 Released by dogma1138 on Wednesday June 14, 2017 @11:30AM (#14553443)
I forgot about the Atoms completely, are they even 64bit now?
Re:Tails 3.0 Released by Sir_Substance on Wednesday June 14, 2017 @03:49AM (#14551256)
My thought as well. Those things are everywhere like rats.
Re:Tails 3.0 Released by jwilk on Tuesday June 13, 2017 @05:53PM (#14548993)
Previous versions of Tails already had exuberant hardware requirements.

I guess privacy is only for the rich.

Re:Tails 3.0 Released by weberc2 on Tuesday June 13, 2017 @06:02PM (#14549037)
Yeah, this is a consequence of limited resources. In an ideal world, the good guys would have resources for all the things, I guess.
Re:Tails 3.0 Released by nextlevelwizard on Wednesday June 14, 2017 @12:37AM (#14550677)
Literally nothing is preventing you from creating your own secure Linux installation on any hardware you've got.
Re:Tails 3.0 Released by ViViDboarder on Wednesday June 14, 2017 @12:39AM (#14550686)
Besides ones technical skills. Not all activists are knowledgeable enough to just roll their own distro.
Re:Tails 3.0 Released by Sir_Substance on Wednesday June 14, 2017 @03:50AM (#14551258)
Beyond that, I thought it was now well understood that rolling ones own security software is a terrible idea. Many eyeballs etc. Activists with the technical skills /should not/ roll their own, they should definitely contribute to existing projects.
Re:Tails 3.0 Released by barbs on Tuesday June 13, 2017 @06:55PM (#14549359)
I understand thst 32-bit is inherently less secure than 64-bit but if you had no choice but to use a 32-bit computer, what would be the best way to provide yourself with similar security features?

I guess you could use an older version of Tails but I imagine this would become less and less secure as more and more vulnerabilities are found.

Re:Tails 3.0 Released by codewiz on Tuesday June 13, 2017 @05:13PM (#14548698)
What do you guys think about dropping 32-bit?

About time.

Re:Tails 3.0 Released by vbezhenar on Wednesday June 14, 2017 @03:54AM (#14551269)
> What do you guys think about dropping 32-bit?

If they don't have any usage data, I think, they should provide old version and support it with critical security updates. If they have usage data, it depends, I guess.

Re:Tails 3.0 Released by teekert on Wednesday June 14, 2017 @04:08AM (#14551322)
I still occasionally use My Asus 1000HE (early 2009) and my Sony Vaio FE11S (2006), both still run fine with Arch/Ubuntu and Mate. Getting more and more difficult to find distro's though.
Re:Tails 3.0 Released by akerro on Wednesday June 14, 2017 @04:26AM (#14551380)
freebsd, debian won't drop 32bit any time soon.
Re:Tails 3.0 Released by openmosix on Tuesday June 13, 2017 @05:26PM (#14548795)
You can run Tails on a supercheap chromebook. It seems a right product compromise.
Re:Tails 3.0 Released by kakarot on Tuesday June 13, 2017 @05:18PM (#14548734)
32-bit is insecure. There's no good reason to support it. Get a cheap old laptop if you have 32-bit machine for some reason, it's good to have separate hardware for this type of thing anyway.
Re:Tails 3.0 Released by DanBC on Wednesday June 14, 2017 @06:19AM (#14551713)
There are a bunch of new machines that have 64 bit processors but tiny amounts of RAM. The low ram makes 64 bit OSs unfun to use, and most recommendations (Microsoft, Arch, Debian, etc) are to avoid 64 bit OSs on these machines.

If you're someone buying burner laptops these machines, which are very cheap, are now probably not a good idea.

Re:Tails 3.0 Released by mrmondo on Tuesday June 13, 2017 @09:18PM (#14550077)
I can't honestly say I've seen a 32bit computer in what must be nearly a decade now?
Re:Tails 3.0 Released by stevekemp on Tuesday June 13, 2017 @10:38PM (#14550336)
A lot of hosting companies run KVM/qemu/Xen or even UML with 32-bit guests by default. But yeah in terms of physical computers 64-bit has long been the default.

I remember upgrading from 32-bit to 64-bit in-place a few times, which is a bit fiddly but not impossible with Debian. I wrote up a couple of guides once upon a time, but right now I can just find this old wiki-page discussing the process:

https://wiki.debian.org/Migrate32To64Bit

Re:Tails 3.0 Released by Tepix on Wednesday June 14, 2017 @09:58AM (#14552722)
Sure but cheap Intel Atom N270 netbooks are probably still being used in poor countries even though they were released around 2008/2009.
Re:Tails 3.0 Released by venomsnake on Tuesday June 13, 2017 @05:21PM (#14548754)
Has there been any pure x86 processor in the last 10 year at all?
Re:Tails 3.0 Released by jwilk on Tuesday June 13, 2017 @06:32PM (#14549240)
Early Intel Atom CPUs in 2008 were 32-bit only.