is it ok to boot up the old tails version wit option "toram", so i can eject the cd and burn the downloaded image (in this case Tails 0.17.2)

i would use unsafe browser but every download just disapears...???

anyway, is it ok to download with tor browser and then check the signature since the PGP-key is already in tails so i dont have to worry about a bad exit-node, right?

and should i do "sudo update && sudo upgrade" before starting the download?

thanks for any help bye

I would be surprised if "Tails" disagreed with one piece of advice: whatever else you do while using Tails (new or old), don't use torrents since this can

  • de-anonymise you
  • use too much bandwidth on the Tor network, to no purpose

Some have suggested using curl or wget. If you don't torify these, you will connect directly to the server from which you are downloading the iso image. I believe that Tails uses a round-robin to serve the latest iso images.

If you do torify them, you might want to limit the bandwidth.

More generally, whenever you try to torify the downloading of GB sized files, this is likely to require circuits carrying so many packets that you may be de-anonymised anyway by some of our more sophisticated adversaries. I'd like to hear what "Tails" has to say, however. (We should expect to wait a day or so because I imagine the developers are taking a brief vacation since they just put out a new edition of Tails and deserve a break.)

Comment by Anonymous Thu 11 Apr 2013 11:20:54 PM CEST

anyway, is it ok to download with tor browser and then check the signature since the PGP-key is already in tails so i dont have to worry about a bad exit-node, right?

Yes. Check the signature. If it validates using the existing key, the download have not been tampered with by the exit-node or anyone else.

There is a small risk that the download cancels after a while before finishing. Since Tor Browsers resume support sucks, using curl is recommended. For example:

curl -C - -O --socks5-hostname 127.0.0.1:9050 http://dl.amnesia.boum.org/tails/stable/tails-i386-0.17.2/tails-i386-0.17.2.iso

Some have suggested using curl or wget. If you don't torify these, you will connect directly to the server from which you are downloading the iso image.

From within Tails curl and wget is always going through the Tor network, or not at all, due to Tails firewall.

Comment by Anonymous Fri 12 Apr 2013 10:57:13 AM CEST