On Tue, Sep 10, 2019 at 2:40 PM 'awokd' via qubes-users < qubes-users@googlegroups.com> wrote:
> brendan.h...@gmail.com: > > > Under whonix-15, the whonix developers have inserted a presetting > question > > on startup allowing you to choose what you want the default on startup > to > > be, and the bug where the setting is one way, and the buggy behavior > above > > does not seem to be present. > > I haven't seen this preset question. Is there a way to trigger it? > I dropped all my whonix-14 VMs and templates yesterday and used salt to install the whonix-15 templates (again: I'm also on the R4 current-testing repo), and I see the question once every dispvm start. > > > You still have to set it again each time a disposable VM starts, but > it's > > more straightforward, at least in my opinion. > > Might be missing something here, but wouldn't that defeat the purpose? > I'd like very much to set all my disposables to start on Safest. > >From my read, it is possible you could set it in the DVM template (there are instructions on how to set the startup files in the filesystem to bypass the question). Here's the text of the dialog (some of the text hyperlinks elsewhere): ---------------- First Start of Tor Browser (AnonDist) - Security vs Usability Trade-off In the stock Tor Browser configuration, JavaScript is enabled by default for greater usability. The Tor Project provides a rationale for this decision. The producers of Tor Browser decided the security slider setting to be set to "Standard" by default. Quote Tor Browser Manual: You can further increase your security by choosing to disable certain web features that can be used to attack your security and anonymity. You can do this by increasing Tor Browser's Security Settings in the shield menu. Increasing Tor Browser's security level will stop some web pages from functioning properly, so you should weigh your security needs against the degree of usability you require. This popup question does not restrict your freedom to change security slider settings at any time. Responsible for this popup question is Tor Browser Starter by Whonix developers. It is an usability feature, which might break in future. Therefore the user is advised to verify that the security slider has the expected setting. Please donate! Preseeding: It is possible to avoid this popup question by preseeding the answer to it. For that create a file /etc/torbrowser.d/50_user.conf with the follow contents, if you want to answer "Yes". tb_security_slider_safest=true Or if you want to answer "No". tb_security_slider_safest=false Technical Details: This script is: /usr/bin/torbrowser Function: tb_security_slider All this would do is copying file /usr/share/torbrowser/security-slider-highest.js to /home/user/.tb/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/user.js. cp /usr/share/torbrowser/security-slider-highest.js /home/user/.tb/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/user.js Set Tor Browser Security Slider to Safest? [No] [Yes] ---------------- My read is that whonix dev(s) do not want to contradict the choices of the Tor project, even if controversial (I see good arguments on both sides). Whonix dev(s) are also probably (I am guessing here) tired of getting questions about these settings every day. I'll paraphrase: "Here's the shotgun. Use it wisely. Know where your limbs are at all times." B PS - why I continued to see the bug where the setting and behavior were different in -14 vs. -15 I don't know, but I do have a more recent version of TB in -15, so maybe that's it. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAOajFeeXa4c_qgnf1tWJVEmU73G%3DWjbBLMEpAM0GqQg36ybHuw%40mail.gmail.com.
