Re: [qubes-devel] Invitation to submit ideas for Google Summer of Code (GSoC) 2018
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi all :), During past months I worked on idea [0]. Currently it's supported only by Firefox and Chrome. The repo is at [1] and the qubes-issue regarding contribution message is at [2]. It was assigned to the 4.1 milestone. I've a question about if is acceptable (in term of performance, specifically latency) to have some form of signed USB input, from a usbvm. A lot of laptop (the majority?) has only an USB controller and without reset capabilities. The most susceptible device, IMHO, is USB keyboard. So if it's possible to put a proxy USB signer device (e.g. a rPi Zero) between the USB keyboard and the usbvm, Dom0 could verify that input come from the signer device. However thanks the Qubes 4.0 flexibility this necessity could be suppressed by "Qubes Air". Unfortunately I cannot try Qubes 4.0-rcX. I hope that the 4.0-rc4 hasn't any major problem. So it became the stable release, <3. [0] = https://www.qubes-os.org/gsoc/#thunderbird-firefox-and-chrome-extensions [1] = https://github.com/raffaeleflorio/qubes-url-redirector [2] = https://github.com/QubesOS/qubes-issues/issues/3152 Best Regards, Raffaele. -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEE9bU8N8AgwMcjiC1xjTxG+6f1ce4FAlpzBJgACgkQjTxG+6f1 ce7qcRAA2PCmR/KM5lhNvpmd3P9vp0SC8whx7C2VdNhhgCd1yd9t6eVMHLHTk3ti 7hVZWNmsfwqaF2fdlaLoYkXdlgO2AiUWTWvVwobYZzsycHTZRC7U5dekstkJTsc9 zbYs4MtKNQRjvuXh77Vc5/Sh7c5kUA+ODaQyPn6FuIpI9o9CoWjbIGGU6ADidXUV uD1ZIjHWto5sjLvzJbrMIZo5yPC7/Ybpye7Q8bwIiQQjmrli6otB2/9w6OFjeZA6 gDxwT+qJ2gje37usi2qfAC4J4gSb20FVhftswntiOsZFHfy4wqsDB/lclHGBKiqi +3ilRDQ94ZfQw9MuUnOA6skKkkTdDSNmymY/6UQFH7RZNU507MMzufQlJpYRbOLM unBXS+Kx86cDaZ/UpDHEI1mWKdAhZwwDPTL0lr3DYDKdJKOlSCGFPZmcsMRL7gS5 NrwsioJsKo0jjq4VaKEtmv0VXk0myFNByr2P1zIbKYRzCMVnlt7nF3gXB/gIkrQl Ei2+wInrk6HSHUQKhfi1rK5SQymvCcVSqHymHnTlmxzlZrbTsVkgUy/Unes46c7n 4k+j+SjLmkuvlEIUrvkR7P62nvShpU5JRKOr6RDmRX/10Y7lEHHMMrF0BK4HbFE2 VXRzqzsW2n1q++1nYoAIdBuW03AqDUy5V3rUa73RmPMkjOa+R9E= =+COA -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-devel+unsubscr...@googlegroups.com. To post to this group, send email to qubes-devel@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/mdB0Y7MfXOFfHZymvaZOgTDfwHToA37ul8wvnkWmq015NV-Z0QmWFdMc2ynkS06NooRwovM_SW9kuSlSUTc0TdZ90f2aLZWH8YjjF7-XwY0%3D%40protonmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-devel] R4.0-rc4 installation image considerations
On Tuesday, January 30, 2018 at 5:58:54 PM UTC+1, Marek Marczykowski-Górecki wrote: > 1. Switch to tty2 > 2. killall -9 anaconda > 3. anaconda --rescue Hmm, probably good enough in this situation. > - some users may not have fast internet connection available at >installation time; downloading one file (ISO) over another >connection, somewhere else, asking a friend for that etc is much >easier to organize than attaching your machine there It depends on the options. In the current state, you are right, there is no easy process for that. But I remember some note that the current option is suboptimal anyway: Installing RPMs in dom0 from some potentially less trusted source is not what you want in general. (Sure, this depends on the scenario.) Once there is some alternative that allow convenient installation of VM templates from domUs, one could bring it on a separate flash stick. Or even on a second DVD. > - downloading templates over tor takes a long time... and some may >prefer to not do it over clearnet on own connection (see point above) You are right, but OTOH, downloading some far outdated templates within the install image (like you do with Q3.2 today) and then downloading newer images over the network can take even more time. > > I see this approach is too late for Qubes4-rc1, but it could be useful for > > some future release. > > Yes, definitely. Oops. Of course, it was too late for RC1 at the time of writing… (Note the typo in my previous post – I wrote “rc1” instead of “rc4”.) Regards, Vít Šesták 'v6ak' -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-devel+unsubscr...@googlegroups.com. To post to this group, send email to qubes-devel@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/592a8e9b-aa89-4e9c-b329-fd799c6aad68%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-devel] Invitation to submit ideas for Google Summer of Code (GSoC) 2018
On 02/01/2018 07:16 AM, Raffaele Florio wrote: > Hi all :), > During past months I worked on idea [0]. Currently it's supported only by > Firefox and Chrome. The repo is at [1] and the qubes-issue regarding > contribution message is at [2]. It was assigned to the 4.1 milestone. > > I've a question about if is acceptable (in term of performance, specifically > latency) to have some form of signed USB input, from a usbvm. A lot of laptop > (the majority?) has only an USB controller and without reset capabilities. > The most susceptible device, IMHO, is USB keyboard. So if it's possible to > put a proxy USB signer device (e.g. a rPi Zero) between the USB keyboard and > the usbvm, Dom0 could verify that input come from the signer device. > However thanks the Qubes 4.0 flexibility this necessity could be suppressed > by "Qubes Air". Unfortunately I cannot try Qubes 4.0-rcX. I hope that the > 4.0-rc4 hasn't any major problem. So it became the stable release, <3. > > > [0] = https://www.qubes-os.org/gsoc/#thunderbird-firefox-and-chrome-extensions > [1] = https://github.com/raffaeleflorio/qubes-url-redirector > [2] = https://github.com/QubesOS/qubes-issues/issues/3152 great, I missed this development! Shall I remove the Firefox/Chrome extensions from the GSoC 2018 list of prospective projects, and keep the Thunderbird extension there for now? Michael -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-devel+unsubscr...@googlegroups.com. To post to this group, send email to qubes-devel@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/0537ef17-2d31-89f1-81ed-c457db6db739%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.