On Wednesday, July 5, 2017 at 10:19:32 PM UTC-4, cooloutac wrote:
> On Tuesday, July 4, 2017 at 1:34:17 PM UTC-4, Oleg Artemiev wrote:
> > Hi.
> > 
> > I'm not very glad w/ defaults provided in Qubes OS.
> > Are there any chances the situation 'll get fixed?
> > 
> > Details:
> > I've no real trust to https - this is reputation scheme.
> > I've no real trust to tor - exit nodes sniff.
> > 
> > I've installed new instance w/ tor as default.
> > I've two network VMs w/ diffrent networking defaults.
> > 
> > I'm switching my work VM to get run w/o tor.
> > Ooops - my work VM has now no firewall VM attached.
> > This is bad default - isn't it?
> > 
> > Why should I go via tor w/ work VM even when sitting in the office?
> > Tor exit nodes should not know anything about my work.
> > Also tor makes things run slower.
> > 
> > Shouldn't we have have a trigger transparently applying firewall VM
> > when network VM has changed?
> > 
> > -- 
> > Bye.Olli.
> > gpg --search-keys grey_olli , use key w/ fingerprint below:
> > Key fingerprint = 9901 6808 768C 8B89 544C  9BE0 49F9 5A46 2B98 147E
> > Blog keys (the blog is mostly in Russian): 
> > http://grey-olli.livejournal.com/tag/
> 
> I agree I don't use tor for anything I type a password into.  I use tor for 
> random untrusted webpages only.  Sometimes I just use tor to compare a key or 
> cert,  a trick I learned from Qubes forums.

also I should add,  they have new feature to update with tor.  but I also 
wonder how better that is because it seems to me tor is attacked with fake keys 
more then anything.  And all it takes is for the user to hit y one time.

I can count dozens upon doznes of times i had to make sure i hit n.  and kept 
trying till I got a verified key. I've mean i posted so much about it on whonix 
I pissed the guy off.  not just wrong keys but servers going out.   But I can 
only count 1 or 2 times that happened through my regular connection.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/258d8e48-8e01-47b4-88cf-096e9974d7e7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to