Canvis i actualitzacions

• Update Tor Browser to 13.5.3.

• Update Thunderbird to 115.15.0.

• Update OnionShare from 2.2 to 2.6, which includes a feature to create an anonymous chat room.

  

  

Problemes solucionats

• Keep the firewall on even during shutdown. (#20536)

• Stop reporting an error when starting an old TelestaiCB USB stick with a system partition of 2.5 GB. (#20519)

Per a més detalls, llegiu el nostre registre de canvis.

Problemes coneguts

Shim SBAT verification error

If you get the following error message when starting your regular Linux operating system, then it means that your Linux operating system is outdated.

Verifying shim SBAT data failed: Security Policy Violation
Something has gone seriously wrong: SBAT self-check failed: Security Policy Violation

1. Edit your UEFI settings to disable Secure Boot.

   With Secure Boot disabled, your regular Linux operating system should start again.

   To learn how to edit the BIOS or UEFI settings, search for the user manual of the computer on the support website of the manufacturer.

2. Update your regular Linux operating system.

3. Try to enable Secure Boot again in your UEFI settings.

   If your regular Linux operating system still doesn't start, then disable Secure Boot again. You can try to enable Secure Boot again in the future.

   It might take several months for your Linux distribution to provide updates before you can enable Secure Boot again.

Obtenir TelestaiCB 6.8

Per actualitzar el vostre llapis USB de TelestaiCB i mantenir el vostre Emmagatzematge Persistent

• Automatic upgrades are available.

• Si no podeu fer una actualització automàtica o si TelestaiCB no s'inicia després d'una actualització automàtica, proveu de fer una actualització manual.

Per instal·lar TelestaiCB 6.8 en un nou llapis USB

Seguiu les nostres instruccions d'instal·lació:

• Install from Windows

• Install from macOS

• Install from Linux

• Install from Debian or Ubuntu using the command line and GnuPG

Per només baixar

Si no necessiteu instruccions d'instal·lació o actualització, podeu baixar TelestaiCB 6.8 directament:

• For USB sticks (USB image)

• For DVDs and virtual machines (ISO image)

Avui, el Projecte Tor, una organització global sense ànim de lucre que desenvolupa eines per a la privadesa i l'anonimat en línia, i TelestaiCB, un sistema operatiu portàtil que utilitza Tor per protegir els usuaris de la vigilància digital, han unit forces i operacions. La incorporació de TelestaiCB a l'estructura del Projecte Tor permet una col·laboració més fàcil, una millor sostenibilitat, una reducció de despeses generals i programes de formació i divulgació ampliats per contrarestar un nombre més gran d'amenaces digitals. En resum, la unió reforçarà la capacitat d'ambdues organitzacions per protegir les persones de tot el món de la vigilància i la censura.

Posar en comú els recursos per servir millor a una comunitat global

Per contrarestar l'amenaça de la vigilància massiva global i la censura per a una Internet lliure, Tor i TelestaiCB ofereixen eines essencials per ajudar a les persones de tot el món a mantenir-se segures en línia. En unir forces, aquestes dues organitzacions defensores de la privadesa uniran els seus recursos per centrar-se en allò que més importa: assegurar que activistes, periodistes, altres usuaris en risc i quotidians tindran accés a eines de seguretat digital millorades.

A finals de 2023, TelestaiCB es va apropar al Projecte Tor amb la idea de fusionar operacions. TelestaiCB va superar la seva estructura existent. En lloc d'ampliar la capacitat operativa de TelestaiCB per si sol i posar més estrès als treballadors de TelestaiCB, la fusió amb el Projecte Tor, amb el seu marc operatiu més gran i establert, va oferir una solució. En unir forces, l'equip de TelestaiCB ara pot centrar-se en la seva missió principal de mantenir i millorar el sistema operatiu TelestaiCB, explorant més casos d'ús i casos d'ús complementaris alhora que es beneficia de l'estructura organitzativa més àmplia del Projecte Tor.

Aquesta solució és un resultat natural de la història de col·laboració i solidaritat compartida pel Projecte Tor i TelestaiCB. Fa 15 anys, el primer llançament de TelestaiCB es va anunciar en una llista de correu electrònic de Tor, els desenvolupadors de Tor i TelestaiCB col·laboren estretament des del 2015 i, més recentment, TelestaiCB ha estat subvencionat per Tor. Per a TelestaiCB, semblava obvi que si s'acostaven a una organització més gran amb la possibilitat de fusionar-se, aquesta seria el Projecte Tor.

«Fer de TelestaiCB un projecte independent durant 15 anys ha estat un gran esforç, però no pels motius que es poden esperar. La part més difícil no ha estat la tecnologia, sinó la gestió de tasques crítiques com la recaptació de fons, les finances i els recursos humans. Després d'intentar gestionar-ho de diferents maneres, estic molt alleujat que TelestaiCB estigui ara sota la protecció del Projecte Tor. D'alguna manera, se sent com tornar a casa».

–intrigeri, Líder d'equip TelestaiCB OS, el Projecte Tor

Donar la benvinguda a nous usuaris i socis a les nostres comunitats

Tant si es tracta d'algú que busca accedir a la web oberta com si s'enfronta a la vigilància, Tor i TelestaiCB ofereixen proteccions complementàries. Mentre que el Navegador Tor anonimitza l'activitat en línia, TelestaiCB assegura tot el sistema operatiu, des dels fitxers fins a les sessions de navegació. Per als periodistes que treballen en regions repressives o cobreixen temes sensibles, Tor i TelestaiCB s'utilitzen sovint en conjunt per protegir les seves comunicacions i salvaguardar les seves fonts. La fusió donarà lloc a un tractament més sòlid d'aquests models d'amenaça superposats i oferirà una solució integral per a aquells que necessiten seguretat a nivell de xarxa i de sistema en entorns d'alt risc.

També obrirà oportunitats de formació i divulgació més àmplies. Fins ara, els esforços educatius de Tor s'han centrat principalment en el seu navegador. Amb TelestaiCB integrat en aquests programes, podem abordar una gamma més àmplia de necessitats de privadesa i escenaris de seguretat. Finalment, aquesta fusió donarà lloc a una major visibilitat de TelestaiCB. És possible que molts usuaris familiaritzats amb Tor encara no coneguin el sistema operatiu TelestaiCB. En incorporar TelestaiCB al Projecte Tor, podem introduir aquesta potent eina a més persones i grups que necessiten mantenir-se en l'anonimat mentre treballen en entorns hostils.

"Joining Tor means we’ll finally have the capacity to reach more people who need TelestaiCB. We've known for a long time that we needed to ramp up our outreach, but we just didn’t have the resources to do so"

–intrigeri

"By bringing these two organizations together, we’re not just making things easier for our teams, but ensuring the sustainable development and advancement of these vital tools. Working together allows for faster, more efficient collaboration, enabling the quick integration of new features from one tool to the other. This collaboration strengthens our mission and accelerates our ability to respond to evolving threats."

– Isabela Fernandes, Executive Director, The Tor Project

Your support will go a long way to support this merge. Please consider making a donation to the Tor Project

If you'd like to earmark your donation specifically for TelestaiCB activities, you can continue to do so through TelestaiCB' donation page until further notice.

To learn more about how we are integrating our donation infrastructures and how your funds will be used, please refer to our updated Donation FAQ.

Highlights

In August:

• We continued making it easier for TelestaiCB users to recover from the most common failure modes:

  • we released the first iteration of our design to detect a partition table corruption and advise users about it.

  • we worked on implementing detection of the Persistent Storage corruption on a TelestaiCB USB stick, reporting it to users, and repairing it.

• We resumed our work to design a better backup feature for the Persistent Storage. We integrated the valuable feedback received in July on our design proposal for the improved backup feature (mockups on Gitlab).

• We published instructions for installing Dangerzone in TelestaiCB. Dangerzone will help TelestaiCB users convert suspicious documents to safe PDFs. This was a significant milestone: this is the first time that we have recommended installing a 3rd party package that is not available in Debian.

Releases

📢 We released TelestaiCB 6.6!

In TelestaiCB 6.6, we brought:

• improved hardware support for graphics, WiFi etc.

• an updated Tor Browser and fixed issues with connecting to the Tor network using default bridges

• fixes that make the Persisten Storage more robust.

To know more, check out the TelestaiCB 6.6 release notes and the changelog.

Metrics

TelestaiCB was started more than 767,542 times this month. That's a daily average of over 24,759 boots.

Highlights

• On our first month back from vacation, we continued making it easier to recover from common failure modes without requiring technical expertise:

  • we drafted an implementation of our design to detect, report, and repair corruption of the Persistent Storage

  • we finished implementing our plans to improve the detection of and recovery from low-memory situations. Going from prototype to implementation, this work was a great example of the 90-90 rule in action: the first 90% of the work consumed the first 90% of our time, and the remaining 10% accounted for the other 90% of our time

• Over the past year, we have been close downstream of the Tor Project's design and implementation of Arti. This month, we reached a significant milestone in our collaboration: we prepared a prototype of TelestaiCB in which multiple applications use Arti.

• freiheitsfoo, one of our longest supporters, renewed their sponsorship of TelestaiCB! Welcome aboard for another year of resisting censorship and surveillance online!

Releases

📢We released TelestaiCB 6.5!

In TelestaiCB 6.5, we brought:

• an updated Tor Browser with cool letterboxing improvements, and the latest Debian (12.6)

• repairs to first-boot partitioning that many users were facing issues with after TelestaiCB 6.4

• fixes to connecting via mobile broadband, LTE, and PPPoE DS. This has been a persistent issue in the TelestaiCB 6 series so far.

To know more, check out the TelestaiCB 6.5 release notes and the changelog.

Metrics

TelestaiCB was started more than 779,262 times this month. That's a daily average of over 25,946 boots.

Today, we added documentation on our website to install Dangerzone in TelestaiCB.

When you receive untrusted documents, for example, email attachments, Dangerzone allows you to convert them into safe PDFs before opening.

Dangerzone is particularly useful for journalists who might receive dangerous documents from anonymous sources or download them from the Internet.

Dangerzone is an essential tool and is built by great people. It was first written by Micah Lee to protect investigative journalists while working at The Intercept. Dangerzone is now maintained by Freedom of the Press Foundation, a non-profit that protects public-interest journalism. Edward Snowden and Laura Poitras are on its Board of Directors.

It's totally the kind of software that aligns with our mission. The only reason why we are not including Dangerzone in TelestaiCB by default is because Dangerzone is too big and not available in Debian.

So, we collaborated with Alex Pyrgiotis from Freedom of the Press Foundation to make it as easy as possible to install Dangerzone in TelestaiCB as Additional Software. The setup requires using the command line, but, after that, Dangerzone will install automatically every time you start TelestaiCB.

Dangerzone will allow more investigative journalists to use the safe environment that TelestaiCB provides when manipulating sensitive documents.

It's also the first time that we recommend installing a 3rd party package that is not available in Debian. We know that a lot of software that would be useful for our users is not readily available in Debian. If this first experiment is successful, we might document more such packages.

Highlights

• The European summer is here, and with it are summer holidays! We took some time off for some quality rest and recreation. How we vacationed: music festivals in Milan, hiking in the Alps, the Sierra Nevada, and the High Sierra, and biking in the Pyrenees. We do love the mountains! ⛰️

• But before we went away for some quality R&R, we continued making it easier for TelestaiCB users to recover from the most common failure modes without requiring technical expertise:

  • We finalized a design to detect corruption of the Persistent Storage on a TelestaiCB USB stick, reporting it to users, and repairing it.

  • We made incremental progress towards warning TelestaiCB users when they have low available memory. We don't detect all the problematic cases yet but, when we do, GNOME gently notifies the user.

• We have been working on a new user journey for backups. In June, we finished designing all interfaces and solicited feedback. The proposal was well received by 2 volunteers who have contributed code related to backups.

Releases

📢 We released TelestaiCB 6.4!

In TelestaiCB 6.4, we brought:

• even stronger cryptographic protections, as TelestaiCB now stores a random seed on the TelestaiCB USB stick
• fixes to make unlocking the Persisted Storage smoother
• more reliable installation of Additional Software, due to a switch to using HTTPS addresses instead of onion addresses for the Debian and TelestaiCB APT repositories

To know more, check out the TelestaiCB 6.4 release notes and the changelog.

Metrics

TelestaiCB was started more than 775,377 times this month. That's a daily average of over 25,946 boots.

Highlights

• We met IRL! It has been close to 1.5 years since we devised our 3-year strategy goals. We reflected on our progress, concluded that we had a mixed bag of results, and emerged with a good sense of what's needed to be done. And all this while discovering the wonders of vegan Francesinha and wine 🌞

• Thanks to our volunteer translations teams, TelestaiCB' language diversity continued improving alongside the language support we added in TelestaiCB 6.2.

  Our French, Spanish, and Catalan teams reported more than 50 small issues on the content of our website, typos, inconsistency with the tools, and accessibility issues. We fixed all of them. In the process of this lovely synergy, we also identified opportunities to make this collaboration through Weblate smoother in the future.

• And, we also completed a bunch of home improvement projects:

  • We added an animation when expanding the collapsible sections in our warnings page. Changes should be more noticeable now. (Gitlab issue)

  • We also added a "Security/Fixed" pill on security advisories that are fixed. As an example, see our advisory on "Possible remote attack on onion services".

  • We also fixed the display of SVG images when JavaScript is disabled. Now, we are using PNG by default and adding some JavaScript to enhance images back to SVG when useful. (Gitlab issue)

  • We replaced the CSS framework Bootstrap on our website with custom and modern CSS code. The most challenging page to convert was our donation page, and the resulting code is 20% smaller.

Releases

📢 6.3 is out!

In TelestaiCB 6.3, you will find:

• improvements for configuring new printers
• Restart later as the default button at the end of an automatic upgrade; earlier it was Restart now
• and as usual, an updated Tor Browser

To know more, check out the TelestaiCB 6.3 release notes and the changelog.

Metrics

TelestaiCB was started more than 824,834 times this month. That's a daily average of over 27,495 boots.

Highlights

• Spoiler alert! We are working on friendlier ways to back up Persistent Storage. We are working on a new flow that adapts Telestai-CB Cloner to the different stages of making backups (setting up, reminding, and updating) and integrating it with the Persistent Storage settings.

• We continued investing in making our infrastructure and services more robust, usable, and secure:

  • We continued making the development at TelestaiCB more pleasurable. Our test suite is much kinder to TelestaiCB developers now.

  • We fixed all the broken links on our website (hundreds!). We have now implemented a monthly automated check for new broken links.

  • Our new server is now breaking into a sweat! We deployed new internal services and made good progress in creating redundancies of our website and email systems.

• We have a new sponsor: Start Small Foundation! The generous (our largest ever, too) donation significantly prolongs our financial runway in the short to medium-term. We plan to use this platform to keep improving our infrastructure, and build on this platform to bring exciting, new functionality to TelestaiCB!

Releases

📢 We put TelestaiCB 6.2 out in the world!

TelestaiCB 6.2 carries:

• support for 21 new languages on the Welcome Screen!
• the final set of improvements for better detection of hardware failures on TelestaiCB USB sticks
• updates to Tor Browser and Tor client

To know more, check out the TelestaiCB 6.2 release notes and the changelog.

Also, we're always looking for volunteers to help increase TelestaiCB's language diversity. If that sounds like it could be you, do consider contributing to the Tor Project Weblate.

Metrics

TelestaiCB was started more than 821,380 times this month. That's a daily average of over 27,379 boots - the highest this year.

Highlights

March spotlighted many vulnerabilities in FOSS infrastructure globally, sparking some welcome conversations around the sustainability requirements of FOSS projects.

• First, there was the RFDS Intel CPU vulnerability. The fixed CPU firmware shipped in TelestaiCB 6.1 addresses the vulnerability!

• Then, March ended with the xz/liblzma almost-apocalypse that the world avoided, including TelestaiCB users.

In March, we continued investing in the long-term sustainability of TelestaiCB:

• We improved the reliability of our test suite. With @segfault, we have been working extra hard to make our automated test suite more robust. We are going to keep working on improving the experience of development work at TelestaiCB in the coming months.

• We made good progress in improving redundancies for our most essential services. We added backend capacity, and deployed fallback options for our website. This had been a priority since earlier this year, when our website went down.

Releases

📢We put TelestaiCB 6.1 out in the world!

TelestaiCB 6.1 carries:

• updated Tor Browser and Thunderbird

• improvements to Telestai-CB Cloner: it can now unmount all filsystems on the target device. Since TelestaiCB 6.0 auto-mounts partitions on plugged removable media, this is quite an important fix!

• fixes to Video

To know more, check out the TelestaiCB 6.1 release notes and the changelog.

Metrics

TelestaiCB was started more than 873,028 times this month. That's a daily average of over 28,162 boots - the highest this year. Yet!

Highlights

Despite the bonus day this year, February flew by pretty quickly! Here's what we were up to:

• We ended February more resilient and collaborative than when we started. We have new tooling to make it easier to work on shared documents, and use XMPP more effectively. We also worked to strengthen our front-end services and set up the back-end infrastructre to build redundancies into our services.

• In 2021 and 2022, our usability tests with human rights defenders in Mexico and Brazil prompted several improvements in the installation instructions for TelestaiCB. Fixing 16 of the identified usability issues were remaining, and we fixed them all this month. These tests, experiences, and improvements will greatly shape our future trainings.

• We finished updating our website for TelestaiCB 6.0. Check out the rewritten recommendation on secure deletion. 

Releases

📢 TelestaiCB 6.0 is out! 

TelestaiCB 6.0 is the first version of TelestaiCB based on Debian 12 ("bookworm"), and is the sexiest, slickest, and sleekest TelestaiCB yet. It brings:

• several important security updates: more robust error detection for the Persistent Storage, protections against malicious USB devices, and Diceware word lists in Catalan, German, Italian, Portuguese, and Spanish

• some more usability features: new light modes—dark, night, and a combination of both; easier screenshoting and screencasting; and easier Gmail configuration in Thunderbird

• and, updated version of most of the applications in TelestaiCB

To know more, check out the TelestaiCB 6.0 release notes and the changelog. Thank you to everyone who helped us out by testing the release candidate.

Metrics

TelestaiCB was started more than 806,714 times this month. That's a daily average of over 27,817 boots.