[Trisquel-users] Antwort: What kind of email services are you using and recommend and why?

2015-07-10 Thread simonhandel

I use https://mailbox.org/en


Re: [Trisquel-users] Harden Trisquel

2015-03-15 Thread simonhandel

Hi Cinnamon,

I'm glad I could help.

I learned a lot on this website: http://www.insanitybit.com

Maybe it can help you in the same way it helped me. 


Re: [Trisquel-users] Harden Trisquel

2015-03-14 Thread simonhandel
I don't use any scripts to harden my operating system because in doing the  
hardening tasks myself I can choose at each step how many convenience I'm  
willing to sacrifice for security. In my threat model I focus on crackers  
from outside because I'm the only person who has physical access to my  
computer. Whats your threat model? Is it similar to Micah Lee's threat model?  
How many convenience are you willing to give up for security? These are  
questions only you are able to answer.


What have I done to increase security? I stopped every service that was  
listening on a TCP/IP port. I use grsecurity and compile the libre linux  
kernel patched with grsecurity every time an update is available. It hardens  
your kernel and increases every other security measure. I have written my own  
apparmor profiles for every program that accessing the internet. I disabled  
java script and flash. I use epiphany as a web browser and claws mail as a  
mail client so that I can use every program with mprotect enabled. I don't  
use wifi. I use tails on a different computer where I have removed the hard  
drive.


Maybe you think some of these measures matches to your threat model.


Re: [Trisquel-users] Trisquel 6: updates break GRUB

2015-01-04 Thread simonhandel
I fixed my problem by using chroot from a live CD and making an upgrade of my  
system followed by update-grub.


Re: [Trisquel-users] Trisquel 6: updates break GRUB

2015-01-03 Thread simonhandel
Since the last update of my Trisquel 6 distribution, I get the following  
error message at the beginning of the booting process (quite after I select  
the linux version in the grub menu):


error: symbol not found: 'grub_efi_secure_boot'.

I couldn't find any '--unrestricted' parameter in grub.cfg

What can I do to fix this problem? I didn't expect that something like this  
could happen due to a 'normal' update.


Re: [Trisquel-users] IceDove replaced Thunderbird.

2014-10-15 Thread simonhandel
Everything works great. The only issue I have is the missing import function  
in vCalendar, so I have to rewrite all entries from Lightning.


Re: [Trisquel-users] IceDove replaced Thunderbird.

2014-10-14 Thread simonhandel

Thanks for your information.

I will give claws-mail a try.
You are using claws-mail-pgpinline, right? Is everything working well? I  
remember one issue with enigmail in the past where it failed to encrypt mails  
and sent these mails unencrypted.


I have to write a new appamor profile for claws-mail but it shouldn't take  
much time.


Re: [Trisquel-users] Where are all the security updates?

2014-08-24 Thread simonhandel

Can I ask you which OS you are using for your important computer?


[Trisquel-users] Antwort: Crowdfunding the Novena Open Laptop

2014-05-10 Thread simonhandel

Is it possible to use Trisquel on the Novena main board?

As dadix said the use of the Novena laptop is limited. But as a fixed PC I  
would love to use just the Novena main board.


Re: [Trisquel-users] Crowdfunding the Novena Open Laptop

2014-05-10 Thread simonhandel

Thanks for your reply!

Can you explain why Trisquel will not run on the Novena main board please? As  
far as I know, Triquel stems from Ubuntu and Ubuntu stems from Debian. In  
which aspect differs Trisquel from Debian?


On the Novena crowd funding site it says: All configurations will come with  
Debian (GNU/Linux) pre-installed, but of course you can build and install  
whatever distro you prefer!


Re: [Trisquel-users] New kernel in X60

2014-04-20 Thread simonhandel

Hello Elodie,

thanks for your help!

I installed Trisquel from scratch after the Gluglug X60 arrived. Therefore I  
haven't those two links that Mr. Rowe set up. The last of your two options  
looks very nice and I will try this. I think that I will compile the  
linux-libre-3.2.57 kernel, because for this version a Grsecurity patch exist.


Re: [Trisquel-users] New kernel in X60

2014-04-18 Thread simonhandel

Thanks for your help!

boot seabios worked. My X60 is always in the docking station with closed  
lit and the boot menu didn't show up on the external monitor. I will  
deinstall the old kernel, so that Trisquel will start up with the new kernel  
without choosing boot seabios in the menu.


[Trisquel-users] Antwort: Julian Assange: Debian Is Owned By The NSA

2014-04-17 Thread simonhandel
Open source provide the feature that everybody can look into the source code.  
That's great. But as far as I can see only very few people have the time, the  
skill, and the will to understand and audit critical components of GNU/Linux.


G4JC, it's good that you mentioned Grsecurity and provide the link.  
Grsecurity is one great step towards a more secure operating system as  
insanitybit.com said:


The PaX team and Spender are consistently providing mitigation techniques  
that work to remove entire classes of vulnerabilities. Grsecurity/PaX has  
basically been ten steps ahead of every software security implementation, so  
watch that project if you want to know what defense is going to look like in  
a few years.


Many people are talking about security. But if you are trying to search  
Grsecurity in this forum, you will find only two posts. That's the reality.


[Trisquel-users] Antwort: Julian Assange: Debian Is Owned By The NSA

2014-04-17 Thread simonhandel
Jacob Appelbaum lives in germany because he worked with the german news  
magazine der Spiegel about the Merkel's phone and he fears to flight back  
to the US. He is one of few people who had direct access to the NSA files  
leaked by Edward Snowden and reported many times about their contents (e.g.  
on 30c3). Jacob Appelbaum is a great supporter for open source and strong  
encryption. He also continually tries to get more money from third parties,  
so that Tor does not depent on NSA's money anymore.


It's unbelievable you trust Infowars but not someone who did so much for the  
free community and the free society. Maybe you work for the NSA to discredit  
people like Jacob.


BTW: Edward Snowden used tails, which is a tor live CD, to hide for the NSA.  
But maybe you don't trust Edward Snowden either. Even in one of the talks of  
the leaked NSA files it says that tor stinks and that they probably will  
never be capable of anonymise all Tor users.


[Trisquel-users] Antwort: Julian Assange: Debian Is Owned By The NSA

2014-04-17 Thread simonhandel
It is usual that bugs are produced by people who write code, especially in a  
program as complex as openssl. In my opinion it is not legitimate to claim  
that someone's bug is a backdoor. One must keep in mind that Debian (as well  
as many other distributions) was never designed to give security the topmost  
priority. Even Linus Torvald said that he 'consider[s] security bugs to be  
just normal bugs' and he 'is not interested in adding even the option of  
very useful security features that can help prevent buffer overflow  
exploitation'.


I disagree with you about the primary goal of Tor and I have a different  
point of view concerning news magazines. But I have no desire to argue with  
you about these issues. I think your judgment about other people is too  
strong.


[Trisquel-users] Antwort: Coreboot to boot USB

2014-02-22 Thread simonhandel

Thanks for your explanation!

There is one issue I don't understand though. If you install a new OS on the  
gluglug, will the GRUB bootloader remain unchanged? Which paritions can be  
deleted and which paritions can be chosen for the installation?


[Trisquel-users] Antwort: coreboot flashing

2014-01-21 Thread simonhandel
Thank you for sharing your knowledge with us. I'm going to buy the Asus  
F2A85-M Mainbourd as it is suggested by the FSF. Do you know if the procedure  
of flashing the eeprom on this board is similar to what you described for the  
thinkpad x60?


[Trisquel-users] Antwort: The NSA and the likes do use radio waves to get inside someone's computer, through the use of spy hardware

2014-01-19 Thread simonhandel
I think it's important to be sceptical about the capabilities of Intel vPro  
that are described in the article of prisonplanet. A 3G antenna inside  
thousands of chips constantly connected to a local 3G mast without someone  
noticing? Really? I have my doubts that this is true.
I have read other articles of Jim Stone and in my opinion he isn't a reliable  
source.


[Trisquel-users] Antwort: Need help with GPG/Enigmail/Torbirdy

2014-01-05 Thread simonhandel

Hi,

I read that using the tor network for mail can cause problems with your mail  
provider. It is because you receive (and send) your mails periodically from  
total different locations and as a result of this your provider may think  
your account has been hacked.


[Trisquel-users] Antwort: Intel processor microcode security update for Trisquel

2013-12-30 Thread simonhandel
In contrast to try to get all information by for example spying on submarine  
cables, the TAO group, as far as I know,is designed to infiltrate special  
targets of interest. I don't think it is feasable to manipulate all  
electronics. But nonetheless I will try to avoid shipment from US and the  
Faraday cage give additional protection.


[Trisquel-users] Antwort: Secret 3G Intel Chip Gives Snoops Backdoor PC Access

2013-12-30 Thread simonhandel
Thanks for the link. Jacob Appelbaum is great and his passion for freedom and  
true knowledge is really inspiring for me. Do you know which kind of computer  
he is using?


[Trisquel-users] Antwort: Intel processor microcode security update for Trisquel

2013-12-29 Thread simonhandel
Thanks for sharing this information about the preferred target by ANT. I'm  
going to buy an additional computer, which will keep my private data as save  
as possible by running it always offline. For data transfer a hardware  
write-protected USB stick will be used. The second of the then three computer  
will be used only for browing with TAILS.


[Trisquel-users] Antwort: Intel processor microcode security update for Trisquel

2013-12-29 Thread simonhandel
You are right and in fact I already have thought about it but I didn't come  
to a final conclusion yet. I like the idea to build my own computer with  
hardware components recommended by the free software foundation, and to use a  
Faraday cage to further reduce the risk of spying.


[Trisquel-users] Antwort: Intel processor microcode security update for Trisquel

2013-12-23 Thread simonhandel
I don't think that it was his intention to attack you nor does it sound like  
an attack. We are not your enimies!


[Trisquel-users] Antwort: Forum moderation

2013-12-22 Thread simonhandel

An explanation for why Debian isn't endorsed by the FSF can be found here

https://www.gnu.org/distros/common-distros.en.html


[Trisquel-users] Antwort: wpa_supplicant (...)

2013-12-22 Thread simonhandel

Maybe you need a space between -D and wext?


[Trisquel-users] Antwort: wpa_supplicant (...)

2013-12-22 Thread simonhandel
Do you have the same error message? I never used wpa_supplicant but your  
error said that something is wrong with your arguments. Maybe it's the  
ordering of your arguments. -d is the debug modus. Try


wpa_supplicant -B -i wlan0 -c /etc/wpa_supplicant.conf -D wext -dd

I have read that nl80211 is preferred over wext. Can you try it? 


[Trisquel-users] Antwort: wpa_supplicant (...)

2013-12-22 Thread simonhandel

https://dev.openwrt.org/ticket/2703

It says that The problem is that a precomputed hex PSK must not be quoted.


[Trisquel-users] Antwort: A laptop earns FSF Respects Your Freedom certificate

2013-12-21 Thread simonhandel
It's a pity that you both argue so much about this issue. I have sympathy for  
both of your opinions. Here is enough space for all opinions, isn't it.


Maybe we should simply ask gluglug about the reason for raising the price  
over 100%. Maybe he like to expand and need money to develop an alternative  
Notebook running with free software.