-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 26/01/2019 2.39 AM, 799 wrote: > Am Sa., 26. Jan. 2019, 04:33 hat Andrew David Wong > <a...@qubes-os.org> geschrieben: > >> >> Please take a look at this issue: >> >> https://github.com/QubesOS/qubes-issues/issues/3571 > > > > Happy to see that this topic (no clipboard from dom0) is at least > known. I don't agree that copying from dom0 is dangerous because > "The user could have secrets in dom0, e.g., keyfiles". > > > My passwords are in a vault VM and if someone messes up handling > from dom0 it is very likely that he/she didn't understand the > security concept behind Qubes and therefore the user is likely the > biggest attack surface NOT the clipboard. >
There are legitimate uses for secrets in dom0. For example, the Qubes backup system requires the encryption secret for the backup to be in dom0. > Please offer a solution where the user can choose (free > software!!) to enable/disable the clipboard (choosing means > freedom). > Well, "free software" doesn't mean that anyone else is forced to implement whichever features you personally want for you in order to give you all the choices you want. Rather, it means that you're free to modify the software yourself in order to use it the way you want: https://en.wikipedia.org/wiki/Free_software - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZQ7rCYX0j3henGH1203TvDlQMDAFAlxM1wMACgkQ203TvDlQ MDC0JA//e3LtdyTqodBJypPxispE2136xpCXZzB6olKJ7Ylz2wTxZG1VUSvKjiQR rb3QOZzIJpebcNkBLd4cQzNJmDEYL9uUK+FkvsvDbhO08wk7MYcKSzwfCRfjWMuP 7six9Aag4n7Iiov5dSjoD/y7MMIyudfOW7PEN7CG5mmgVYGWgtUD3VVas/xp6wE+ JygAe1Y78xQo9rs9LQTPU0VT2O1IDIpcJ+qgZpdIlHmEqPLqqJKp9IHviKjhqceX I8apkxdkfE8jPZ7CQm8QIcKmCv1mxGfpztKDFD3UwQG8m8xOr5EyzUasJUp3pYk8 vUHHpa/y2kGLTJOmYlCLqMoHhaOvmtr2slScv6qbN4NvUCQksJUYdkfHNwoNqhV+ 8eeuJG6Bk0KtahWdk2hMvFD4xv3UzaveC6wuzX9GcjVlT/XURJlt2oFeHRAasMCD 8emT4zcIUR5V+2oiwWUspLISW+0GD2+OtibhiyXKfrJcvnIe8N6MDBm0WjAvK5lE c9gEAFfZdW38Fl+Q6trnWDahzOCLdL1H84nLYUUz4GHaF1CJRPt8rz29R0U21C8E 8/cHz1W5ILLe4VNdvDMri3fVz4jN9ScK+doRZTW6F4d7g9z0ZRFHUM55MsK2sLC1 wlGRemCQTY7tNHE4ilw92AUYK4k7Fx0zRphyfJX3uHQ/dsAybsI= =CIzB -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/8660c7ec-b2ae-dcb7-f604-27cf892f4f74%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.