3-burning-tails-os-to-bootable-media
2. Secure Media Handling and USB Preparation
-
Step 1: Selection of Trusted USB Media
Section titled “Step 1: Selection of Trusted USB Media”-
Use a new USB drive if possible.
-
If not new, use a USB drive that:
-
You personally own
-
You have used before
-
You trust
-
-
Do not use USB drives that:
-
Came from unknown people
-
Were found somewhere
-
Were used on many random computers
-
Simple idea:
If you don’t trust the USB, don’t use it.
Step 2: Dedicated USB Usage Policy
Section titled “Step 2: Dedicated USB Usage Policy”-
Decide that this USB drive is only for Tails OS
-
Do not use this USB for:
-
Movies
-
Music
-
Office files
-
Personal storage
-
-
Do not plug this USB into:
-
Friends’ computers
-
Office systems
-
Public computers
-
Simple idea:
One USB = one purpose only.
Step 3: Media Labeling and Lifecycle Control
Section titled “Step 3: Media Labeling and Lifecycle Control”-
Physically label the USB drive using:
-
A sticker
-
A marker
-
-
Example labels:
-
“Tails Only”
-
“Secure OS USB”
-
-
Keep track of:
-
When you created it
-
Where you used it
-
-
If the USB is lost or damaged:
- Stop using it permanently
Simple idea:
Know which USB it is and where it has been used.
Step 4: Cross-Contamination Avoidance
Section titled “Step 4: Cross-Contamination Avoidance”Cross-contamination means mixing safe and unsafe usage.
To avoid it:
-
Do not use the Tails USB on:
-
Windows machines you don’t control
-
Internet cafés
-
-
Do not copy files from:
-
Random USB drives
-
Unknown systems
-
-
Do not plug unknown USB drives into your Tails system
Simple idea:
Do not mix trusted and untrusted devices.
Step 5: Storage Chain-of-Custody Awareness
Section titled “Step 5: Storage Chain-of-Custody Awareness”This means knowing who handled the USB.
-
Always know:
-
Who used the USB
-
Where it was stored
-
-
Store the USB:
-
In a safe place
-
Not lying around openly
-
-
Do not lend the USB to others
-
Treat it like:
-
A key
-
An ID card
-
Simple idea:
If you lose control of the USB, you lose trust in it.
Step 6: Final USB Readiness Check
Section titled “Step 6: Final USB Readiness Check”Before burning Tails OS:
-
Confirm:
-
USB is trusted
-
USB is clean
-
USB is only for this task
-
USB has not been shared
-
Only after this:
- Start the Tails OS burning process
Simple idea:
Prepare the USB properly before using it. -