Re: [qubes-devel] Invitation to submit ideas for Google Summer of Code (GSoC) 2018

2018-02-01 Thread 'Raffaele Florio' via qubes-devel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi all :),
During past months I worked on idea [0]. Currently it's supported only by 
Firefox and Chrome. The repo is at [1] and the qubes-issue regarding 
contribution message is at [2]. It was assigned to the 4.1 milestone.

I've a question about if is acceptable (in term of performance, specifically 
latency) to have some form of signed USB input, from a usbvm. A lot of laptop 
(the majority?) has only an USB controller and without reset capabilities. The 
most susceptible device, IMHO, is USB keyboard. So if it's possible to put a 
proxy USB signer device (e.g. a rPi Zero) between the USB keyboard and the 
usbvm, Dom0 could verify that input come from the signer device.
However thanks the Qubes 4.0 flexibility this necessity could be suppressed by 
"Qubes Air". Unfortunately I cannot try Qubes 4.0-rcX. I hope that the 4.0-rc4 
hasn't any major problem. So it became the stable release, <3.


[0] = https://www.qubes-os.org/gsoc/#thunderbird-firefox-and-chrome-extensions
[1] = https://github.com/raffaeleflorio/qubes-url-redirector
[2] = https://github.com/QubesOS/qubes-issues/issues/3152

Best Regards,
Raffaele.
-BEGIN PGP SIGNATURE-
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=+COA
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/mdB0Y7MfXOFfHZymvaZOgTDfwHToA37ul8wvnkWmq015NV-Z0QmWFdMc2ynkS06NooRwovM_SW9kuSlSUTc0TdZ90f2aLZWH8YjjF7-XwY0%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-devel] R4.0-rc4 installation image considerations

2018-02-01 Thread Vít Šesták
On Tuesday, January 30, 2018 at 5:58:54 PM UTC+1, Marek Marczykowski-Górecki 
wrote:
> 1. Switch to tty2
> 2. killall -9 anaconda
> 3. anaconda --rescue

Hmm, probably good enough in this situation.

>  - some users may not have fast internet connection available at
>installation time; downloading one file (ISO) over another
>connection, somewhere else, asking a friend for that etc is much
>easier to organize than attaching your machine there

It depends on the options. In the current state, you are right, there is no 
easy process for that. But I remember some note that the current option is 
suboptimal anyway: Installing RPMs in dom0 from some potentially less trusted 
source is not what you want in general. (Sure, this depends on the scenario.) 
Once there is some alternative that allow convenient installation of VM 
templates from domUs, one could bring it on a separate flash stick. Or even on 
a second DVD.

>  - downloading templates over tor takes a long time... and some may
>prefer to not do it over clearnet on own connection (see point above)

You are right, but OTOH, downloading some far outdated templates within the 
install image (like you do with Q3.2 today) and then downloading newer images 
over the network can take even more time.

> > I see this approach is too late for Qubes4-rc1, but it could be useful for 
> > some future release.
> 
> Yes, definitely.

Oops. Of course, it was too late for RC1 at the time of writing… (Note the typo 
in my previous post – I wrote “rc1” instead of “rc4”.)

Regards,
Vít Šesták 'v6ak'

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/592a8e9b-aa89-4e9c-b329-fd799c6aad68%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-devel] Invitation to submit ideas for Google Summer of Code (GSoC) 2018

2018-02-01 Thread Michael Carbone
On 02/01/2018 07:16 AM, Raffaele Florio wrote:
> Hi all :),
> During past months I worked on idea [0]. Currently it's supported only by 
> Firefox and Chrome. The repo is at [1] and the qubes-issue regarding 
> contribution message is at [2]. It was assigned to the 4.1 milestone.
> 
> I've a question about if is acceptable (in term of performance, specifically 
> latency) to have some form of signed USB input, from a usbvm. A lot of laptop 
> (the majority?) has only an USB controller and without reset capabilities. 
> The most susceptible device, IMHO, is USB keyboard. So if it's possible to 
> put a proxy USB signer device (e.g. a rPi Zero) between the USB keyboard and 
> the usbvm, Dom0 could verify that input come from the signer device.
> However thanks the Qubes 4.0 flexibility this necessity could be suppressed 
> by "Qubes Air". Unfortunately I cannot try Qubes 4.0-rcX. I hope that the 
> 4.0-rc4 hasn't any major problem. So it became the stable release, <3.
> 
> 
> [0] = https://www.qubes-os.org/gsoc/#thunderbird-firefox-and-chrome-extensions
> [1] = https://github.com/raffaeleflorio/qubes-url-redirector
> [2] = https://github.com/QubesOS/qubes-issues/issues/3152

great, I missed this development! Shall I remove the Firefox/Chrome
extensions from the GSoC 2018 list of prospective projects, and keep the
Thunderbird extension there for now?

Michael

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/0537ef17-2d31-89f1-81ed-c457db6db739%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.