[Script Info] Title: [Events] Format: Layer, Start, End, Style, Name, MarginL, MarginR, MarginV, Effect, Text Dialogue: 0,0:00:04.49,0:00:07.30,Default,,0000,0000,0000,,Hello, Thank you for coming Dialogue: 0,0:00:07.48,0:00:13.78,Default,,0000,0000,0000,,We're gonna give a talk about and \Ngonna give a technical overview of Tails. Dialogue: 0,0:00:15.72,0:00:20.48,Default,,0000,0000,0000,,That's kurono, intrigeri \Nand I am BitingBird. Dialogue: 0,0:00:30.50,0:00:35.26,Default,,0000,0000,0000,,We are all Tails contributors\Nin different fields. Dialogue: 0,0:00:37.73,0:00:41.63,Default,,0000,0000,0000,,I don't do technical things, Dialogue: 0,0:00:41.76,0:00:47.74,Default,,0000,0000,0000,,intrigeri is one of the \Noldest tails contributors Dialogue: 0,0:00:47.74,0:00:54.50,Default,,0000,0000,0000,,and kurono contributes \Nsince two years now. Dialogue: 0,0:00:56.40,0:01:01.74,Default,,0000,0000,0000,,Tails is the acronym of\NThe Amnesic Incognito Live System Dialogue: 0,0:01:02.07,0:01:06.94,Default,,0000,0000,0000,,And here is the nice url, \Nwhere you can have all the information. Dialogue: 0,0:01:08.62,0:01:10.53,Default,,0000,0000,0000,,It's a live operating system. Dialogue: 0,0:01:10.73,0:01:15.46,Default,,0000,0000,0000,,It works on almost any computer -\Nexcept ARM Dialogue: 0,0:01:16.48,0:01:20.83,Default,,0000,0000,0000,,And it boots from a dvd or a usb stick Dialogue: 0,0:01:20.83,0:01:25.28,Default,,0000,0000,0000,,and theoretically from sdcard too, \Nbut it doesn't work very well. Dialogue: 0,0:01:28.97,0:01:34.59,Default,,0000,0000,0000,,The focus of our distribution \Nis privacy and anonymity. Dialogue: 0,0:01:35.47,0:01:40.49,Default,,0000,0000,0000,,It allows the user \Nto use the internet anonymously. Dialogue: 0,0:01:43.04,0:01:47.48,Default,,0000,0000,0000,,And also, when there is censorship,\Nto circumvent it. Dialogue: 0,0:01:48.93,0:01:52.11,Default,,0000,0000,0000,,All the connections to \Nthe internet go with tor, Dialogue: 0,0:01:52.46,0:01:56.04,Default,,0000,0000,0000,,which is an anonymization network. Dialogue: 0,0:01:57.72,0:02:02.20,Default,,0000,0000,0000,,That's the first big feature of tails. Dialogue: 0,0:02:02.20,0:02:03.69,Default,,0000,0000,0000,,And the second one is Dialogue: 0,0:02:03.69,0:02:06.20,Default,,0000,0000,0000,,that there is no trace \Non the computer you are using Dialogue: 0,0:02:06.20,0:02:13.99,Default,,0000,0000,0000,,so after you used it nobody can see\Nthat you've used the computer. Dialogue: 0,0:02:15.93,0:02:20.60,Default,,0000,0000,0000,,If somebody would grab your computer \Nand search files Dialogue: 0,0:02:20.60,0:02:23.55,Default,,0000,0000,0000,,they would not know, \Nwhat you have done. Dialogue: 0,0:02:25.25,0:02:29.10,Default,,0000,0000,0000,,Unless you ask for it explicitly Dialogue: 0,0:02:29.72,0:02:36.72,Default,,0000,0000,0000,,We have also a lot of data producing tools Dialogue: 0,0:02:38.00,0:02:47.76,Default,,0000,0000,0000,,because some users use it to write books,\Narticles, video and such things. Dialogue: 0,0:02:48.65,0:02:54.41,Default,,0000,0000,0000,,They want to be able to create such documents without being traced. Dialogue: 0,0:02:58.46,0:03:01.64,Default,,0000,0000,0000,,Does it work ? Dialogue: 0,0:03:01.64,0:03:04.89,Default,,0000,0000,0000,,We have a very good report, Dialogue: 0,0:03:04.89,0:03:06.90,Default,,0000,0000,0000,,not from our users, Dialogue: 0,0:03:06.90,0:03:11.84,Default,,0000,0000,0000,,actually from the people \Nwe are supposed to protect them against. Dialogue: 0,0:03:11.84,0:03:16.26,Default,,0000,0000,0000,,The NSA says, that it's a pain in the ass. Dialogue: 0,0:03:16.48,0:03:22.75,Default,,0000,0000,0000,,When the NSA says \Nyou're making their life harder Dialogue: 0,0:03:22.75,0:03:26.23,Default,,0000,0000,0000,,somehow you're doing something right. Dialogue: 0,0:03:26.23,0:03:31.49,Default,,0000,0000,0000,,[klapping, laughing] Dialogue: 0,0:03:31.50,0:03:37.49,Default,,0000,0000,0000,,I guess you can imagine who's \Nthe famous tails user Dialogue: 0,0:03:37.49,0:03:41.60,Default,,0000,0000,0000,,who gave us access to the documents where\Nthey say that Dialogue: 0,0:03:42.79,0:03:48.53,Default,,0000,0000,0000,,There is also Bruce Schneier\Nwho says he uses Tails Dialogue: 0,0:03:49.23,0:03:53.68,Default,,0000,0000,0000,,so, not bad. Dialogue: 0,0:03:54.60,0:03:57.35,Default,,0000,0000,0000,,So, what are our goals? Dialogue: 0,0:03:57.48,0:04:01.69,Default,,0000,0000,0000,,We took a stance in the beginning of Tails Dialogue: 0,0:04:01.69,0:04:04.51,Default,,0000,0000,0000,,that it was not really common back then Dialogue: 0,0:04:04.51,0:04:08.11,Default,,0000,0000,0000,,to have usability as a security feature Dialogue: 0,0:04:08.11,0:04:13.54,Default,,0000,0000,0000,,because "ubergeeks" where already able\Nto have secure communication. Dialogue: 0,0:04:15.22,0:04:18.53,Default,,0000,0000,0000,,The thing is privacy \Nis not an individual matter. Dialogue: 0,0:04:18.53,0:04:19.94,Default,,0000,0000,0000,,It's a collective matter. Dialogue: 0,0:04:19.94,0:04:22.80,Default,,0000,0000,0000,,Everybody needs to have privacy Dialogue: 0,0:04:22.80,0:04:32.50,Default,,0000,0000,0000,,and new users and non geek users \Nhad no way to get access to this. Dialogue: 0,0:04:32.50,0:04:36.53,Default,,0000,0000,0000,,The tools existed but they had \Nno user interface Dialogue: 0,0:04:36.53,0:04:39.73,Default,,0000,0000,0000,,or they where really hard to configure. Dialogue: 0,0:04:39.73,0:04:45.74,Default,,0000,0000,0000,,So, we designed a system that gives \Na quite good level of security Dialogue: 0,0:04:45.74,0:04:49.03,Default,,0000,0000,0000,,with a quite good level of usability. Dialogue: 0,0:04:49.48,0:04:54.76,Default,,0000,0000,0000,,Lots of the time people ask us, why we \Ndon't include more security features. Dialogue: 0,0:04:54.76,0:04:58.61,Default,,0000,0000,0000,,We have to make a balance between security and usability. Dialogue: 0,0:04:58.61,0:05:02.23,Default,,0000,0000,0000,,Because if it's really secure\Nbut nobody can use it Dialogue: 0,0:05:02.23,0:05:05.93,Default,,0000,0000,0000,,then it doesn't bring anything. Dialogue: 0,0:05:05.93,0:05:10.17,Default,,0000,0000,0000,,It makes security accessible\Nfor most people. Dialogue: 0,0:05:12.46,0:05:15.91,Default,,0000,0000,0000,,Another important point in our project Dialogue: 0,0:05:15.91,0:05:20.24,Default,,0000,0000,0000,,is to have a very small delta \Nto our upstream. Dialogue: 0,0:05:21.66,0:05:28.51,Default,,0000,0000,0000,,Our main upstream is Debian and we try \Nto not diverge too much from it. Dialogue: 0,0:05:30.50,0:05:34.10,Default,,0000,0000,0000,,Because the more you do things differently\N Dialogue: 0,0:05:34.10,0:05:37.50,Default,,0000,0000,0000,,the more work you have to maintain. Dialogue: 0,0:05:37.50,0:05:41.36,Default,,0000,0000,0000,,The work is not the work of \Nimplementing something once Dialogue: 0,0:05:41.36,0:05:44.66,Default,,0000,0000,0000,,it's the work of \Nmaintaining on the long term. Dialogue: 0,0:05:45.26,0:05:49.77,Default,,0000,0000,0000,,There where a lot of other \Nsecurity distributions Dialogue: 0,0:05:49.77,0:05:51.90,Default,,0000,0000,0000,,and there are still a few others Dialogue: 0,0:05:51.90,0:05:55.52,Default,,0000,0000,0000,,But most of them \Nhave a very short lifespan Dialogue: 0,0:05:57.81,0:06:02.02,Default,,0000,0000,0000,,because of maintenance. Dialogue: 0,0:06:02.02,0:06:04.76,Default,,0000,0000,0000,,It's a distribution and \N Dialogue: 0,0:06:04.76,0:06:07.63,Default,,0000,0000,0000,,we're a very tiny team compared to Debian Dialogue: 0,0:06:07.63,0:06:10.28,Default,,0000,0000,0000,,but we're a team. Dialogue: 0,0:06:10.28,0:06:15.29,Default,,0000,0000,0000,,Lots of other privacy distributions\Nwhere either one person Dialogue: 0,0:06:15.29,0:06:22.29,Default,,0000,0000,0000,,or very tiny teams and they didn't make \Noutrage to be joined by other people Dialogue: 0,0:06:24.44,0:06:32.75,Default,,0000,0000,0000,,Most other privacy distributions didn't \Ntake into account the maintenance work Dialogue: 0,0:06:32.75,0:06:35.50,Default,,0000,0000,0000,,and the user support because Dialogue: 0,0:06:35.50,0:06:37.76,Default,,0000,0000,0000,,even if we try to make it usable \N Dialogue: 0,0:06:37.76,0:06:43.00,Default,,0000,0000,0000,,it's still a lot of work to \Nteach the users how to use it Dialogue: 0,0:06:43.00,0:06:46.81,Default,,0000,0000,0000,,and to document how to use it. Dialogue: 0,0:06:46.81,0:06:49.27,Default,,0000,0000,0000,,Also if you want to start such a project Dialogue: 0,0:06:49.27,0:06:52.74,Default,,0000,0000,0000,,you need to have a long term commitment Dialogue: 0,0:06:52.74,0:06:57.30,Default,,0000,0000,0000,,and to remember to avoid the symptom of\N"not invented here". Dialogue: 0,0:06:57.69,0:07:03.39,Default,,0000,0000,0000,,It's quite common to try to do something \Nthat does exactly what you want Dialogue: 0,0:07:03.39,0:07:08.03,Default,,0000,0000,0000,,but sometimes it's best \Nto find an existing software Dialogue: 0,0:07:08.03,0:07:11.78,Default,,0000,0000,0000,,that does something close enough Dialogue: 0,0:07:11.78,0:07:18.25,Default,,0000,0000,0000,,to make the new features you want in it \Nor use it as it is. Dialogue: 0,0:07:20.97,0:07:23.77,Default,,0000,0000,0000,,We are trying to do most of our work,\N Dialogue: 0,0:07:23.77,0:07:26.79,Default,,0000,0000,0000,,at least a good part of our work upstream Dialogue: 0,0:07:26.79,0:07:30.01,Default,,0000,0000,0000,,so we did AppArmor Dialogue: 0,0:07:30.01,0:07:32.93,Default,,0000,0000,0000,,in Debian specifically there is \Nan AppArmor team, Dialogue: 0,0:07:32.93,0:07:37.36,Default,,0000,0000,0000,,an anonymity tools team and an OTR team Dialogue: 0,0:07:37.36,0:07:42.00,Default,,0000,0000,0000,,who work on things that we use in Tails Dialogue: 0,0:07:42.50,0:07:49.27,Default,,0000,0000,0000,,libvirt, Seahorse, Tor and Puppet \Nare other projects we contributed to Dialogue: 0,0:07:49.27,0:07:54.63,Default,,0000,0000,0000,,instead of implementing ourselves \Nwhat we need in Tails Dialogue: 0,0:07:54.63,0:08:01.51,Default,,0000,0000,0000,,we did it upstream \Nand it took longer to fall down to us\N Dialogue: 0,0:08:01.51,0:08:04.47,Default,,0000,0000,0000,,but it's maintainable. Dialogue: 0,0:08:04.47,0:08:07.55,Default,,0000,0000,0000,,When we finally have the new features Dialogue: 0,0:08:07.55,0:08:12.10,Default,,0000,0000,0000,,we have no work of keeping them. Dialogue: 0,0:08:13.49,0:08:17.59,Default,,0000,0000,0000,,As a result we have \Nreally little Tails specific code Dialogue: 0,0:08:17.59,0:08:20.64,Default,,0000,0000,0000,,we mostly do glue work between the code Dialogue: 0,0:08:20.64,0:08:23.77,Default,,0000,0000,0000,,we take from our upstreams Dialogue: 0,0:08:23.77,0:08:25.91,Default,,0000,0000,0000,,and we do a lot of social work Dialogue: 0,0:08:25.92,0:08:29.25,Default,,0000,0000,0000,,we talk to upstream, we spread the word Dialogue: 0,0:08:29.25,0:08:34.66,Default,,0000,0000,0000,,we say "Oh that would be great if somebody\Nwhere to work on that" Dialogue: 0,0:08:35.97,0:08:40.50,Default,,0000,0000,0000,,And we find the people that \Nhave the right skills \N Dialogue: 0,0:08:40.50,0:08:44.86,Default,,0000,0000,0000,,to do the work that should be done\Nwhen it's not in Tails Dialogue: 0,0:08:46.01,0:08:51.45,Default,,0000,0000,0000,,We have a very slow rythm \Nbecause we work in Debian Dialogue: 0,0:08:51.45,0:08:55.23,Default,,0000,0000,0000,,so we have to wait until the next Debian version is released Dialogue: 0,0:08:55.23,0:08:59.79,Default,,0000,0000,0000,,To see the work we have done in Tails \Nas AppArmor Dialogue: 0,0:08:59.79,0:09:02.83,Default,,0000,0000,0000,,I mentioned earlier, we did it in Debian Dialogue: 0,0:09:02.83,0:09:09.28,Default,,0000,0000,0000,,so for two years there was work going on\Nin Debian that was not visible in Tails Dialogue: 0,0:09:09.28,0:09:14.54,Default,,0000,0000,0000,,but we finally have it Dialogue: 0,0:09:16.48,0:09:21.10,Default,,0000,0000,0000,,Tails is still alive, \Nbecause it's maintainable Dialogue: 0,0:09:22.72,0:09:24.40,Default,,0000,0000,0000,,Implementation details - Dialogue: 0,0:09:24.40,0:09:30.70,Default,,0000,0000,0000,,That's where I give the micro.\N[gives micro to kurono]