The release of the specialized distribution Tails 6.11 (The Amnesic Incognito Live System) has been announced, developed as part of the Tor project. This distribution is based on the Debian 12 package base, comes with the GNOME 43 desktop, and is intended for anonymous web access using the Tor toolkit. All connections, except for traffic through the Tor network, are blocked by the packet filter by default. Encryption is used to store user data in persistent mode across sessions. An ISO image capable of running in Live mode, with a size of 1 GB, has been prepared for download.
In the new version, vulnerabilities identified during an external security audit have been fixed. To exploit these vulnerabilities, an attacker must gain access to the local environment, for example, by exploiting an unpatched vulnerability in one of the applications.
- A vulnerability in Tails Upgrader that can be used to install a modified update of the distribution, gaining persistent control over the system.
- Issues with individual applications that may lead to de-anonymization and tracking of user activity: information about connection chains in Tor can be obtained through the Onion Circuits application, the Unsafe Browser can connect to sites bypassing Tor, the Tor Browser can track user actions in the browser, and the Tor Connection can reconfigure connections.
- A problem related to the ability to change persistent storage settings.
Among the non-security-related changes:
- Updated versions of Tor Browser 14.0.4 and email client Thunderbird 128.5.0.
- Support for hardware wallets has been removed from the Electrum bitcoin client (Trezor wallets are no longer supported in Debian 10).
- The text editor GNOME Text Editor has disabled the reopening of the last file.
- A link to the application for establishing a connection through Tor (Tor Connection) has been added to the menu associated with the status icon.
- Damage detection for sections on USB drives has been ensured, which leads to errors when working with persistent storage or updating the system. Warnings about such errors are now displayed in advance, for example, when they are detected before connecting the persistent storage.
Source: opennet.ru
