Re: [EXT] Re: [qubes-users] browser plugin?

2020-11-30 Thread Sven Semmler

I am not sure who wrote:

The other question is when I want to open all links in a DVM
(starting a new DVM/browser for every link looks like overkill to
me), how can I set APPVMNAME correctly (it will have a name like
"disp9474", changing whenever on is started). And can such DVM be
started automatically if there is none yet?


You might want to create a named disposable qube...

qvm-create --class DispVM --template dvm-template --label red named-dvm

... then in the qubes.OpenURL policy file you can append default_target 
to the ask like so:


$anyvm $dispvm ask,default_target=named-dvm

What that does:

* named-dvm is just like any other dispvm but you gave it a specific 
name as opposed to disp123


* when you click a link you still get the policy dialog, but the named 
dispvm is preselected


... I used to do that, but then decided that I want the extra security 
of having a new disp vm for each link. I am sometimes tired or 
distracted and want to have as many automatic safety in place as I can 
to prevent information leakage.


Also: even though it is slightly inconvenient I strongly recommend to 
have Javascript disabled by default (NoScript, Torbrowser on 'safest', 
etc). This way you can still enable it if you decide you need it, but 
nothing happens by default.


/Sven

--
 public key: https://www.svensemmler.org/0x8F541FB6.asc
fingerprint: D7CA F2DB 658D 89BC 08D6 A7AA DA6E 167B 8F54 1FB6

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/737d801b-5242-5445-eaf7-e04ab7db792d%40SvenSemmler.org.


OpenPGP_signature
Description: OpenPGP digital signature


Re: [EXT] Re: [qubes-users] browser plugin?

2020-11-30 Thread Ulrich Windl

On 11/28/20 8:20 PM, Andrew David Wong wrote:

On 11/28/20 8:43 AM, Ulrich Windl wrote:

On 11/22/20 2:19 PM, Andrew David Wong wrote:

On 11/21/20 4:00 PM, Ulrich Windl wrote:

On 11/13/20 4:42 AM, Sven Semmler wrote:

On 11/12/20 11:41 AM, Alex Smirnoff wrote:

Is there a browser plugin that adds "open URL in disposable VM"
function? like private tab on steroids :)


I think this is important when following an URL in Thunderbird from 
a non-disposable / not-anonymous VM. Copying the link and pasting it 
to another VM is not really very user-efficient.

Well I would not need a new VM for each link, but a _different_ VM...



You can already do this with built-in Qubes tools without any extra 
plug-ins or third-party programs:


https://www.qubes-os.org/doc/tips-and-tricks/#opening-links-in-your-preferred-appvm 



OK, the page says: "This is unofficial, third-party documentation. The 
Qubes OS Project cannot guarantee the accuracy of this page. Please 
exercise caution."


Despite of that in debian.10 there is no ~/.local/share/applications; 
you must create the directory fist (it seems).


The other question is when I want to open all links in a DVM (starting 
a new DVM/browser for every link looks like overkill to me), how can I 
set APPVMNAME correctly (it will have a name like "disp9474", changing 
whenever on is started). And can such DVM be started automatically if 
there is none yet?


Regards,
Ulrich



Hi,

I'm not sure how to do that, but I seem to recall someone posting a 
guide for doing that recently on the forum or qubes-users. Try searching 
in both places.


By the way, I strongly encourage you to include the appropriate mailing 
list on these messages, so that you can potentially receive helpful 
replies from other people besides me. More on this:


https://www.qubes-os.org/support/#discussion-guidelines


Mea culpa: I'm using many lists with different conventions and different 
MUAs also. Occasionally I reply the wrong way without intention. Sorry! 
I realized that I had not replied to the list most of the time that day...






--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b55eed9e-e0ce-4a37-8266-83eded972248%40rz.uni-regensburg.de.


Re: [EXT] Re: [qubes-users] browser plugin?

2020-11-22 Thread Andrew David Wong

On 11/21/20 4:00 PM, Ulrich Windl wrote:

On 11/13/20 4:42 AM, Sven Semmler wrote:

On 11/12/20 11:41 AM, Alex Smirnoff wrote:

Is there a browser plugin that adds "open URL in disposable VM"
function? like private tab on steroids :)


I think this is important when following an URL in Thunderbird from a 
non-disposable / not-anonymous VM. Copying the link and pasting it to 
another VM is not really very user-efficient.

Well I would not need a new VM for each link, but a _different_ VM...



You can already do this with built-in Qubes tools without any extra 
plug-ins or third-party programs:


https://www.qubes-os.org/doc/tips-and-tricks/#opening-links-in-your-preferred-appvm

--
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/454c8f1d-6868-5910-5e9c-04bb723d3eb7%40qubes-os.org.


OpenPGP_signature
Description: OpenPGP digital signature


Re: [EXT] Re: [qubes-users] browser plugin?

2020-11-21 Thread Ulrich Windl

On 11/13/20 4:42 AM, Sven Semmler wrote:

On 11/12/20 11:41 AM, Alex Smirnoff wrote:

Is there a browser plugin that adds "open URL in disposable VM"
function? like private tab on steroids :)


I think this is important when following an URL in Thunderbird from a 
non-disposable / not-anonymous VM. Copying the link and pasting it to 
another VM is not really very user-efficient.

Well I would not need a new VM for each link, but a _different_ VM...



https://github.com/raffaeleflorio/qubes-url-redirector


>

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3bd6d99f-6574-da57-42ca-b33cc5a3b12a%40rz.uni-regensburg.de.