[ubuntu-studio-devel] US Wiki/ help regarding data protection

[Ralf Mardorf]

On Tue, 21 Jun 2016 03:48:07 -0400, Jimmy Sjölund wrote:
>IMHO, why wouldn't we recommend or endorse using Tails instead of
>Ubuntu Studio in those circumstances? Tails include most of the
>applications we do but are focused on security way more than we are.

Hi,

first of all, I agree that we should use one of the texts Set has
written and I agree that is should become part of the FAQ. IMO we
should use Set's first text. Too funny that you mentioned Tails, since
the FAQ are useful to write our FAQ.
https://tails.boum.org/support/faq/index.en.html#index3h2 and Set's
claim from his second text, that Ubuntu "is not financed by selling your
personal information to advertisers" are inconsistent. There is a
relationship between advertisers and Ubuntu on what level ever.
Hopefully all of you are aware what rms thinks about Ubuntu. I've
once seen advertisements myself, when I set-up a MUA, perhaps it was
Thunderbird, two ISPs advertised fee-based email accounts were
recommended for usage by the set-up dialogue.

I'm against recommending Tails for the very reason that "even when you
use tools known to grant the strongest available privacy, there are
still pitfalls", "the biggest risk are user errors and
misunderstandings, that render even the strongest protections useless.
Third parties not necessarily need to do something manipulative; a
user's lack of knowledge can easily make sensitive information public"

Actually there's just what IIRC Schneier does and what was pointed out
by Luke regarding USB sticks and a computer that is and another
computer that isn't connected to the Internet. I'm against
recommendations that will cause e-waste, see
http://lmgtfy.com/?q=agbogbloshie+images , even while you not
necessarily need to destroy each USB stick [1], you still need to use a
brand new USB stick each time you transfer data from the not connected
computer, to the Internet computer.

Regards,
Ralf

[1] Not all data is important enough for expensive forensic data
recovery technology, since the data you copy from the not connected
computer, to the connected computer anyway is aimed for the Internet
computer, so there's no need to destroy the USB stick, you just can't
connect this USB stick back to the computer that is not connected to
the Internet, once it was connected to a computer with Internet access.