Re: [qubes-devel] Qubes R4.2 EOL: No upgrade path for installations with Windows and QWT

Ten days ago, it came out that a nation state bullied the single lone developer of `xz`. There were some Windows Tools for running Windows on QubesOS. They worked. Windows ran fast even though debug mode had to be enabled which could make it less secure. After Feb 2022, I was very hesitant

Re: [qubes-devel] Qubes R4.2 EOL: No upgrade path for installations with Windows and QWT

> I got used to use safer ways to copy files from my Windows to other qubes If there are alternative ways to perform any of these lost operations without the drivers then this should be documented to at least partially alleviate the problem. There must be a way even if that requires using a

Re: [qubes-devel] Qubes R4.2 EOL: No upgrade path for installations with Windows and QWT

Apr 14, 2024, 13:38 by skydive...@gmail.com: > Interesting topic. I tried to use QWT long ago and, fortunately, didn't > worked so since the very beginning I got used to use safer ways to copy files > from my Windows to other qubes (I prefer not to give details here). In the > last two years I

Re: [qubes-devel] Qubes R4.2 EOL: No upgrade path for installations with Windows and QWT

Interesting topic. I tried to use QWT long ago and, fortunately, didn't worked so since the very beginning I got used to use safer ways to copy files from my Windows to other qubes (I prefer not to give details here). In the last two years I have been tempted to debug what was happening with my

Re: [qubes-devel] Qubes R4.2 EOL: No upgrade path for installations with Windows and QWT

I think, here a word of caution is appropriate regarding the use of Microsoft-signed keys. As a current CISA report shows, there have been severe security breaches in the Microsft

Re: [qubes-devel] Qubes R4.2 EOL: No upgrade path for installations with Windows and QWT

On 4/13/24 8:56 AM, jmake2 via qubes-devel wrote: > [...] > > So, am I getting it right that QWT is not deprecated? I was afraid for a > moment. As stated in the QSB, the developers are still working on QWT, so it is not deprecated. > As it was discussed previously, the QWT package can be

Re: [qubes-devel] Qubes R4.2 EOL: No upgrade path for installations with Windows and QWT

Apr 13, 2024, 15:26 by a...@qubes-os.org: > On 4/13/24 8:15 AM, jmake2 via qubes-devel wrote: > >> Apr 13, 2024, 06:46 by a...@qubes-os.org: >> >>> On 4/12/24 4:50 AM, Gerhard Weck wrote: >>> [...] - Things may look different, if an attacker could, via the Xen PV drivers,

Re: [qubes-devel] Qubes R4.2 EOL: No upgrade path for installations with Windows and QWT

On 4/13/24 8:15 AM, jmake2 via qubes-devel wrote: > Apr 13, 2024, 06:46 by a...@qubes-os.org: > >> On 4/12/24 4:50 AM, Gerhard Weck wrote: >> >>> [...] >>> >>> - Things may look different, if an attacker could, via the Xen PV drivers, >>> break out of a Windows VM with QWT and compromise Xen,

Re: [qubes-devel] Qubes R4.2 EOL: No upgrade path for installations with Windows and QWT

Apr 13, 2024, 06:46 by a...@qubes-os.org: > On 4/12/24 4:50 AM, Gerhard Weck wrote: > >> [...] >> >> - Things may look different, if an attacker could, via the Xen PV drivers, >> break out of a Windows VM with QWT and compromise Xen, and therefore Qubes >> itself. In this case, usage of a

Re: [qubes-devel] Qubes R4.2 EOL: No upgrade path for installations with Windows and QWT

Thank you for clarifying this! So there is not much sense in blocking QWT, as Windows qubes are notoriously insecure. Using a compromised QWT will just make an already bad situation even worse. Using Windows under Qubes poses a risk anyhow, but this risk is mitigated a lot thanks to the

Re: [qubes-devel] Qubes R4.2 EOL: No upgrade path for installations with Windows and QWT

On 4/12/24 4:50 AM, Gerhard Weck wrote: > [...] > > - Things may look different, if an attacker could, via the Xen PV drivers, > break out of a Windows VM with QWT and compromise Xen, and therefore Qubes > itself. In this case, usage of a Windows VM with the insecure QWT may be > too risky in

Re: [qubes-devel] Qubes R4.2 EOL: No upgrade path for installations with Windows and QWT

When the backup-restore of Windows VMs with QWT is blocked, the cure may be worse than the illness - the security problems of QWT -, as it makes usage of Qubes R4.2 impossible in this case. In order not to lose the data and functionality of these VMs, the user is forced to either stay at R4.1

Re: [qubes-devel] Qubes R4.2 EOL: No upgrade path for installations with Windows and QWT

Apr 11, 2024, 15:57 by qubes-devel@googlegroups.com: > On Thu, Apr 11, 2024 at 04:19:06AM -0700, Gerhard Weck wrote: > >> Currently, there does not seem to be a working way to run Windows VMs >> using Qubes Windows Tools under Qubes R4.2.1. So putting Qubes R4.1.2 to >> EOL forces installations

Re: [qubes-devel] Qubes R4.2 EOL: No upgrade path for installations with Windows and QWT

On Thu, Apr 11, 2024 at 04:19:06AM -0700, Gerhard Weck wrote: > Currently, there does not seem to be a working way to run Windows VMs > using Qubes Windows Tools under Qubes R4.2.1. So putting Qubes R4.1.2 to > EOL forces installations with such qubes to select one of the following two >