On 01/16/2017 07:45 AM, Franz wrote:
On Mon, Jan 16, 2017 at 4:08 AM, [email protected] <[email protected]> wrote:
On 01/16/2017 12:37 AM, Franz wrote:
On Sat, Jan 14, 2017 at 10:39 PM, Marek Marczykowski-Górecki <
[email protected]> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
On Sat, Jan 14, 2017 at 09:17:32PM +0100, Maksymilian Skica wrote:
Hi,
Does anyone actually make Qubes OS working with some bitcoin hardware
wallet? I want to buy one now and my first requirement is that it will
work with Qubes.
Yes, it should work using qvm-usb. At least Trezor do work.
Also assigning to a Trezor-VM the USB controller of a USB expresscard
dedicated to Trezor, it works perfectly.
Best
Fran
- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQEcBAEBCAAGBQJYetLfAAoJENuP0xzK19csHIMH/ihx8tx2LUGlVgvUSptwa52h
Oor7Y/zeaDbeZzDsFCXwca2XVtfhm+idkqehmk6VamYeVRAeVg9iBYGlLWG4sC8M
hBsIiz4ZOWBqWokBSRFO72PZDqbwkz6E2cCuWXFanRkPrWfTNFGruf3OjYN52fCC
gCLpLWgsAMVEQH4OunrQJSDkBgcIfEobtDwFqxckdGVen/pos+C0sI0DBO8WVQiK
y3rw7MRp5X0brRycbVJ531TRsFVK+nZCcFdO4x/aSQDaXIQlm+RfxR6VQQzIjC+c
qP3vxy1IbNOGQYPmhQTVIU0BHysT6cJBt58GdUEiLz3u7RYCjMuQvjXPYnfE+P8=
=8Z0H
-----END PGP SIGNATURE-----
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit https://groups.google.com/d/
msgid/qubes-users/20170115013942.GB3974%40mail-itl.
For more options, visit https://groups.google.com/d/optout.
Am I the only one who thinks it is a horrible idea to use a closed
source hardware device designed by a bunch of kids and probably made in
china to manage lots of money?
Hardware crypto sucks because it can't be verified without a team of PhD's
and millions of dollars in equipment.
Well, every way has its own problems. We have seen that even using a cold
VM with Qubes may fail because of a Xen bug, so the most reasonable with
money is to share the risk among different and independent routes, so if
one fails you'll not loose everything. So Trezor may well be one of them.
That said, isn't this https://github.com/trezor/ some indication that we
may trust Trezor a little bit?
Best
Fran
That repo doesn't have the source for the device, nor the
compilation/flashing instructions (tivo'ized!) and the firmware and
hardware isn't open source either.
It also needs a web-app and a browser plugin on chrome of all things to
properly function.
It hasn't been audited by an outside firm for security and it uses the
insecure USB bus which can easily be fucked around with.
If you have that much money in bitcoin maybe you should simply buy and
carry around a novena or an old coreboot compatible small laptop, you
could have them talk to eachother via rs-232 serial which is very safe
much safer than black box crypto.
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/7d518c10-079d-132f-db71-4fd825720353%40gmx.com.
For more options, visit https://groups.google.com/d/optout.