search

AvANa-BBS / freepto-lb

Encrypted GNU/Linux OS (based on Debian Wheezy) which can be installed on USB flash drive. Freepto is designed for encrypt your communications, carry your documents in secure way and save your anonymity.
http://www.freepto.mx/
44 stars 14 forks source link

apt-transport-tor by default #132

Open ghost opened 10 years ago

ghost commented 10 years ago

We should consider to use apt-transport-tor as a default transport system, in order to improve the freepto user anonymity.

If this proposal will accepted, we should modify our /etc/apt/sources.list like so:

deb tor://deb.freepto.mx/freepto berenjena main

and install the following package:

apt-transport-tor

for more info about apt-transport-tor please refer to: https://github.com/diocles/apt-transport-tor

boyska commented 10 years ago

If apt-transport-tor is stable, we could already add the tool without configuring it for any repository, which I think has broad consensus. Then we can decide whether to configure some repositories to be accessed from tor.

I agree that the deb.freepto.mx repository be accessed by tor: there are no huge packages, so the bandwidth problem is smaller, and we would benefit for less fingerprinting of freepto users (which are much less than debian users!)

ghost commented 10 years ago

I just realized that apt-transport-tor is not available neither from wheezy repository nor wheezy-backports. ¹

Also it depends to a new version of libc6 (>= 2.14), therefore a back-porting is hard and not recommended.

We could leave it pending for the 5 years waiting the next debian stable release ;)

¹ https://packages.debian.org/search?suite=jessie&arch=any&searchon=names&keywords=apt-transport-tor

boyska commented 10 years ago

I'll close it as wontfix, as it would be very difficult to fix, and is not part of our security model

boyska commented 10 years ago

reopening, since we will move to jessie someday ;)