[qubes-users] HCL - Gigabyte GA-970A-DS3P (Rev2.1)

2019-09-06 Thread Anirban Kar
Hi, 

I am using Qubes 4.0.2 rc1. 

Motherboard: Gigabyte GA-970A-DS3P (Rev 2.1)
Gfx card discreet: MSI N560GTX Ti Hawk 
Processor: AMD FX4300
RAM: Corsair Vengeance 1600MHz 4GB x2
Storage : Seagate 1TB SSHD FireCuda
PS/2 : Keyboard & Mouse.

All the notified updates are taken on the day of submitting the report.

sys-usb is not reliable. Detected my printer, webcam, usb storage on the 
first go but then if disconnected and rebooted fails to detect them when 
attached again. However detects all if attached prior to boot. This 
unreliability contributes to tethering which is very flaky with an Android 
phone running Android 7. Attaching phone to sys-net sometimes disables 
tethering or dom0 notifies "Android device removed". Although never tested 
with a usb modem. USB-3.0 port does not detect any usb device.

Suspend or Hibernate does not work and does not power down the CPU cooler 
or the PSU cooler. Only screen saver activated and prompts logging when 
mouse or keyboard input is given. After logging the system fails to 
shutdown or restart, loops back to login screen all the time. Needs to pull 
the power cord to shutdown the machine.

Also "Settings" of Fedora 30 Template VM have no function other than 
starting the VM. Installation and subsequent update went smoothly.




-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a0d258b3-54a1-4513-9be9-bb9afcc8a41e%40googlegroups.com.


Qubes-HCL-Gigabyte_Technology_Co___Ltd_-To_be_filled_by_O_E_M_-20190907-103131.cpio.gz
Description: Binary data


Qubes-HCL-Gigabyte_Technology_Co___Ltd_-To_be_filled_by_O_E_M_-20190907-103131.yml
Description: Binary data


Re: [qubes-users] Cant connect hard drive to appvms?

2019-09-06 Thread Stumpy

On 9/5/19 10:42 AM, unman wrote:

On Wed, Sep 04, 2019 at 08:12:26PM -0400, Stumpy wrote:

I have a hard drive that i cant seem to connect to any of the appvms yet I
can see and access it via dom0 (not good i know).
I can attach a usb flash drive to my appvms but not the hard drive?

This is on my laptop and i do not have a sys-usb (didnt give me the option
when installing qubes (v4.0.2) but if i can connect a flash then i cant
figure why i cant connect the external hard drive to appvms, esp if i can
use/see the drive via dom0?

Thoughts?



It's notable that you dont say what you are doing and what does happen
(if anything). Any chance of a little more information?


oops, i replied only to unman by accident.

I am hoping to copy things from the external usb hard drive (sata drive 
in a usb dock).


When i connect my external usb drive to the computer i get the popup 
that its recognized, both sdc and sdc1.


When i attach it via qubes devices it doesnt say or give any errors.

When i try to access it on the appvm that i connect it to it does not 
show up in nautilus like say my flash usb devices, nor does it show as 
being mounted when i check for mounted devs via the terminal


yet.

On dom0 i can see the drive, i can access the drive, and modify the 
contents but of course this is not a good idea.


I have not tried qvm-usb, qvm-device, or qvm-block as i am not familar 
with them but at this point am open to trying them (any docs on how to 
use them?)


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/199947b8-ee19-2fb7-e372-7bbceae255f1%40posteo.net.


[qubes-users] Re: script to fix qubes-whonix time-sync issue

2019-09-06 Thread qtpie
qtpie:
> unman:
>> On Thu, Sep 05, 2019 at 12:23:13PM +0200, donoban wrote:
>>> On 9/5/19 11:41 AM, qtpie wrote:> My usecase is this: suspend a laptop
>>> with sys-whonix and whonix appvms
 running, then resume it a few hours later.

 After resume Tor lost connection, re-connection fails until i manually
 sync time on sys-net then
 @sys-firewall 'sudo ntpdate [timeserver]
 @sys-whonix 'sudo qvm-sync-clock'
 @sys-whonix 'sudo systemctl restart 
 tor-fCAy/bagh0fxz5zemyojwq-xmd5yjdbdmrexy1tmh2...@public.gmane.org'

 Is this also you usecase? You do not expierence any issues after
 suspend/resume on qubes 4 with Tor running?

>>>
>>> Ouch yes, usually after suspend/resume I had to run just:
>>> @sys-whonix 'sudo systemctl restart 
>>> tor-fCAy/bagh0fxz5zemyojwq-xmd5yjdbdmrexy1tmh2...@public.gmane.org'
>>>
>>>
>>> Currently I am not using whonix, I am testing with minimal fedora torvm[1].
>>>
>>> It seems stable. I don't have problems with suspend/resume and I skipped
>>> the sync clock steps [2]. Probably it's less anonymous than Whonix, but
>>> for me seems fine.
>>>
>>> [1] https://hackmd.io/JIXLStC-Sbq8rr1mjomCDQ
>>
>> You know there's a Qubes package for that? (deprecated but still
>> buildable.)
>> I have my own fork for a torVM which includes Qubes firewall
>> support, which Whonix doesn't provide.
>>
> 
> Which package? I couldnt immediately find it.
> 

FYI: I'm also going to apply shutdown-on-suspend to sys-usb, since I
have to kill it manually right now since it hangs after resume. It might
not be elegant, there might be a bug/fix, but I dont care, just want the
problem solved.

If anyone knows the existing package to do this it would be very welcome.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f53273a7-25e4-98d7-45d9-b48889d1a82e%40disroot.org.


Re: [qubes-users] Re: SWAPGS Side Channel Attack

2019-09-06 Thread 'awokd' via qubes-users
Lorenzo Lamas:
> Is anyone from Qubes team reading this?
> 
ADW and unman are pretty active in this list, but the original question
might be better suited for qubes-devel.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3f6a709a-32d3-bcee-1084-bcc48586cf45%40danwin1210.me.


Re: [qubes-users] Is Qubes partnered with Whonix and is Whonix just as secure as Qubes if you're only using the computer for web stuff?

2019-09-06 Thread Patrick Schleizer
pixel fairy:

> qubes uses xen, which has a smaller attack surface and much better track 
> record for vm escape vulns. if you cant use that, make sure you keep up to 
> date on virtualbox. if you dont like virtualbox, you might be able to 
> import whonix to libvirt / kvm. 
> https://www.redhat.com/en/blog/importing-vms-kvm-virt-v2v 


https://www.whonix.org/wiki/KVM

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4c79ae94-8a58-0a2c-5448-c65cade1f920%40whonix.org.


Re: [qubes-users] Re: whonix tor browser customization

2019-09-06 Thread Patrick Schleizer
panina:
> On 8/9/19 9:05 AM, Patrick Schleizer wrote:
>>> panina:
>>> Namely, they removed NoScript from the toolbar, so that the
>>> NoScript cannot be used as intended.
>>
>>
>> We did not. Decision by upstream, The Tor Project.
>>
>>
> https://forums.whonix.org/t/workstation-15-dropped-both-noscript-and-https/7733
> 
> Thanks, duly noted. Is there any chance to get them to add a setting for
> this? Or re-think their decision?


It's not up to me at all. The Tor Project is the only point of contact
fo this.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/55ba1be6-e86f-940d-6c11-69557dc96a39%40whonix.org.