The translation is temporarily closed for contributions due to maintenance, please come back later.
The translation was automatically locked due to following alerts: Could not merge the repository. Could not update the repository.
Exit Zen
2
English type: Plain text
[[!meta title="Security hole in I2P 0.9.13"]]
0/460 · 46
5
English type: Plain text
A security hole affects I2P 0.9.13, that is part of Tails 1.1 and earlier.
0/740 · 74
6
English type: Title =
Scope and severity
0/180 · 18
7
English type: Plain text
If you are using I2P in Tails 1.1 and earlier, an attacker can deanonymize you: they can learn the IP address that identifies you on the Internet.
0/1460 · 146
8
English type: Plain text
To be able to conduct this attack:
0/340 · 34
9
English type: Bullet: '1. '
the attacker must be able to affect the content of a website that you are visiting using the [[Tor Browser|doc/anonymous_internet/Tor_Browser]] in Tails — many people are able to do so;
0/1850 · 185
10
English type: Bullet: '2. '
and, the attacker must find out how to exploit this security hole; this information has not been published yet, but they may somehow already have discovered it, or been made aware of it.
0/1860 · 186
12
English type: Plain text
<p><strong>Tails does not start I2P by default.</strong> This design
decision was made precisely in order to
protect the Tails users who do not use I2P from security holes in this
piece of software.</p>
0/2030 · 203
13
English type: Plain text
<p>Still, an attacker who would also be able to start I2P on your
Tails, either by exploiting another undisclosed security hole, or by
tricking you into starting it yourself, could then use this I2P
security hole to deanonymize you.</p>
0/2370 · 237
15
English type: Title =
Temporary solutions
0/190 · 19
16
English type: Plain text
You can protect yourself from this security hole until it is corrected.
0/710 · 71
17
English type: Plain text
Do not start I2P in Tails 1.1 and earlier. You can protect yourself further by removing the `i2p` package every time you start Tails:
0/1330 · 133
18
English type: Bullet: '1. '
[[Set an administration password|doc/first_steps/welcome_screen/administration_password]].
0/900 · 90
19
English type: Bullet: '1. '
Run this command in a <span class="application">Root Terminal</span>:
0/690 · 69
20
English type: Plain text
apt-get purge i2p
0/250 · 25
21
English type: Plain text
However, if you really need to use I2P in Tails 1.1: before you start I2P, disable JavaScript globally [[with NoScript|doc/anonymous_internet/Tor_Browser#noscript]] in the Tor Browser.
0/1840 · 184
22
English type: Title =
Credits
0/100 · 7
23
English type: Plain text
This security hole was reported to us by Exodus Intelligence.
0/610 · 61
The translation has come to an end.