- Package:
- www.debian.org
- Source:
- www.debian.org
- Submitter:
- Holger Wansing
- Date:
- 2025-12-10 09:23:04 UTC
- Severity:
- normal
There is a report at heise.de [1] about critical privacy issues with balenaEtcher, a tool to write ISO images to USB devices. Maybe we should no longer recommend to use it [2], but switch to rufus. Holger [1] <https://www.heise.de/news/ISO-Schreibprogramm-Tails-warnt-vor-balenaEtcher-10288826.html [2] <https://www.debian.org/CD/faq/index.en.html#write-usb>
Here are the details from tails, why they do not recommend balenaEtcher any more. https://gitlab.tails.boum.org/tails/tails/-/issues/16381 https://tails.net/news/rufus/index.en.html
This bug belongs to debian-cd (maybe). At least you should add a warning for it in the faq for now. Here is another debian-cd message about it: https://lists.debian.org/debian-cd/2025/05/msg00005.html Please cc me in replies.