-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2016-05-25 12:13, [email protected] wrote: > On 2016-05-23 12:49, Chris Laprise wrote: >>>> >>>> >>>> On 05/23/2016 12:06 AM, Andrew David Wong wrote: >>>>> >>>>> On 2016-05-22 11:52, [email protected] wrote: >>>>>> I am running a disposable app vm and i assume its >>>>>> infected, is it possible to retrieve files from it >>>>>> without cross contamination? Where are the instructions >>>>>> on how to do this? >>>>>> >>>>> It's not really possible to answer that question in the >>>>> abstract. It always depends on the situation, and in >>>>> general it is difficult to do and almost always impossible >>>>> to verify. >>>> >>>> Suspect files can be safely handled with qvm-copy between >>>> vms, as long as no attempts are made to open them (even >>>> parsing them can be risky). But the act of retrieval itself >>>> should be considered safe. >>>> >>>> This is in contrast to something like a USB drive that gets >>>> mounted in different vms to move/retrieve data: The >>>> filesystem itself poses a risk in that case. >>>> >>>> >>>> >>>> Chris >>>> > > IIUC: > > 1. We have to trust the compromised VM to qvm-copy the same file > we ask it to. It may appear to comply but in reality copy a > malicious file to the destination VM. > > 2. Since the copied file may have been modified to be or replaced > with a malicious file, opening it in the new, clean VM could result > in cross-contamination. > >> >> > > > OK, so then how does one safely move a file they believe to not be > contaminated from a contaminated vm to a clean one?? > > > >
I repeat: Please keep the list CCed unless there's a need for privacy (in which case, use PGP). I already answered your question in this very thread: https://groups.google.com/d/msg/qubes-users/gFOct_ZZk1A/agAozg1lPAAJ - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJXRhRyAAoJENtN07w5UDAw4nUP/1SOQIfShZ5rfYrMbWTXHk9J nWOKCslV0ltXAd9zKBPAQCFfeth7sW0uFh70YTA669W8/ukTohElvVuvZJc1GAXU ayDc8CJ8gA02JCgHrtkzlsRhUkNL6ND9ezEMHWYDl7WgI1T3T6Xf/QbiY6ncs2FY a4j0lF5D+xz5usXtSDH4T88VIUjvwgx4aiJLUnwWjpjmM3sIAjJQC1Ef+xKv/4e0 GQTr6xHJWCY7DwvcWgk/EU88TXG5+uBiVRiAwZK8cS4o97KyAnpANUABwl0nO+KW l5CoUKMPJ3jyuySIqAUd6S7gTren5zrX1XOr5c2tpjyRLFeZySS1zrnAdcMA/w7q Z4kNxVK6CTruFc4k20J+wYEC/5E5RvXD4amdDK7QlAN7BX/zgOWVLmkHjBcyCMP+ 7PNP8TVahaay7Sbyiy6Sfx50A6AF5Hay8Dq0xCoNr+0lFaLDAEkfd8fBLRIwhRKU AuNvh1K1uZtfAy9BBFwKoQbSMFou12vgH6Kx8nHpvntsoJKS0m9OiwJhqsX6qIwj qLNqPFsfDuw9jauaLdkyi8ySH5Igo09/WyYHV3eIooW2KN5liVzp8wHHlfiaulzF K2W2U3F+OIQgUa+DojLkYWpDZUSrq+EY8ar6x0MVy4VRKrAEzyeWaIwPbgtFHn2J XH7Dqkh1RDB9uetyybYM =3Wkn -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/57de6161-80c9-12cd-76ea-a14efc1e8989%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
