[qubes-users] Re: “Convert to Trusted PDF” protocol, & Backup VMs, which typically?

2017-06-22 Thread yreb-qusw
On 06/21/2017 04:21 PM, cooloutac wrote: On Saturday, June 17, 2017 at 5:45:45 PM UTC-4, yreb-qusw wrote: Permit me to ask two questions? 1) I was reading this -

Re: [qubes-users] how to better verify backups to catch restore errors?

2017-06-22 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2017-06-22 12:11, cubit wrote: > 22. Jun 2017 03:58 by a...@qubes-os.org: > >> You can use the "verify-only" restore option (available both in >> Qubes Manager and on the command-line) immediately after creating >> a backup. >> > That is the

[qubes-users] Whonix-ws template will not connect to sys-whonix after upgrade

2017-06-22 Thread 'Essax' via qubes-users
I upgraded my whonix-ws template with apt-get upgrade. Now when I try to upgrade the template I get. Whonix-Gateway NetVM required for updates! Please ensure that this TemplateVM has a Whonix-Gateway as its NetVM. No updates are possible without an active (running) Whonix-Gateway VM. I checked

Re: [qubes-users] Debian 9 templates

2017-06-22 Thread Chris Laprise
On 06/22/2017 09:21 AM, Unman wrote: On Thu, Jun 22, 2017 at 02:37:14PM +0200, cubit wrote: Is there existing any pre-made templates for Debian 9? Not yet. What is the prospect of having shipped with new Qubes releases? I'm asking this because Stretch seems better-behaved than Debian 8.

Re: [qubes-users] Re: Screen recorder for Qubes..?

2017-06-22 Thread Chris Laprise
On 06/22/2017 09:08 AM, mathdegiov...@gmail.com wrote: Hello, The threat model is pretty similar to Qubes' Trusted PDF feature. Not quite. The PDF processing happens in a throwaway VM, whereas here the video processing as done today happens in dom0. I was suggesting the compression could

[qubes-users] Re: ANN: Leakproof Qubes VPN

2017-06-22 Thread motech man
On Wednesday, October 12, 2016 at 4:35:53 PM UTC-5, Manuel Amador (Rudd-O) wrote: > It gives me great pleasure to release the first iteration of the > leakproof Qubes VPN. > > https://github.com/Rudd-O/qubes-vpn > > This package allows you to set up a leakproof OpenVPN VM on your Qubes > OS

[qubes-users] Re: Containing Twitter sessions

2017-06-22 Thread pixel fairy
> if your low on resources and want to make a dedicated vm that will be used > for twitter and other things, you could use firejail --home, and maybe --x11 > as well for isolation. for this to be effective, you'll also need to add > "-nolisten local" to your templates qubes-run-xorg.sh >

Re: [qubes-users] Re: certified laptop delivery to Russia

2017-06-22 Thread taii...@gmx.com
On 06/21/2017 10:57 PM, cooloutac wrote: I agree they are super overpriced But i'm not sure we can have 100% libre hardware, at least not for desktops. I heard the guy Chris from thinkpenguin talk about on a radio show once, how there is really only a couple manufactures that dominate

Re: [qubes-users] Re: FYI: AMD Epyc (server CPUs) comes with low-level per-VM DRAM Encryption / isolation support

2017-06-22 Thread taii...@gmx.com
On 06/21/2017 12:47 PM, Foppe de Haan wrote: seems it's also available for Ryzen CPUs: https://www.phoronix.com/scan.php?page=news_item=AMD-Secure-Memory-Encryption (I haven't time at the moment to look whether it requires you to use the PSP/TPM or not.) It is a PSP feature and designed for

[qubes-users] Re: Containing Twitter sessions

2017-06-22 Thread pixel fairy
On Thursday, June 22, 2017 at 8:40:50 AM UTC-7, Ryan Tate wrote: > (Has anyone figured out a better approach?) keep your twitter passphrase in vault, use a dispvm. if your low on resources and want to make a dedicated vm that will be used for twitter and other things, you could use firejail

[qubes-users] Re: ANN: Leakproof Qubes VPN

2017-06-22 Thread motech man
On Wednesday, October 12, 2016 at 4:35:53 PM UTC-5, Manuel Amador (Rudd-O) wrote: > It gives me great pleasure to release the first iteration of the > leakproof Qubes VPN. > > https://github.com/Rudd-O/qubes-vpn > > This package allows you to set up a leakproof OpenVPN VM on your Qubes > OS

[qubes-users] Re: Request for feedback: 4.9 Kernel

2017-06-22 Thread Reg Tiangha
On 2017-06-22 12:22 PM, motech man wrote: > OK, sounds straightforward, I'll give it a shot. > > As to the 4.11 offer, will that work for a kaby-lake system? Sound far older > than the 4.4 kernel in the current 3.2 Qubes ISO. Unless you mistyped the > version I suspect it would not work well. >

[qubes-users] Re: Request for feedback: 4.9 Kernel

2017-06-22 Thread motech man
On Saturday, May 20, 2017 at 2:42:50 PM UTC-5, Reg Tiangha wrote: > People may not have noticed, but there is now a 4.9 kernel in > current-testing (4.9.28 to be specific). > > If the release schedule holds, then that should be migrated to stable > soon, however, before that happens, some

[qubes-users] Re: Request for feedback: 4.9 Kernel

2017-06-22 Thread motech man
On Thursday, June 22, 2017 at 1:05:38 PM UTC-5, Reg Tiangha wrote: > On 2017-06-22 11:49 AM, motech man wrote: > > I just used the qubes-dom9-update cli cmd. Still not sure how to change > > kernel config to tailor to my hardware. I have compiled any a Linux kernel > > but not sure the proper

[qubes-users] Re: Request for feedback: 4.9 Kernel

2017-06-22 Thread Reg Tiangha
On 2017-06-22 11:49 AM, motech man wrote: > I just used the qubes-dom9-update cli cmd. Still not sure how to change > kernel config to tailor to my hardware. I have compiled any a Linux kernel > but not sure the proper "qubes" way to do it. I'm just a newb after all ;-/ It's not hard. If you're

[qubes-users] Re: Request for feedback: 4.9 Kernel

2017-06-22 Thread motech man
On Thursday, June 22, 2017 at 12:49:59 PM UTC-5, motech man wrote: > > 4) General feedback on the 4.9 kernel. > > > > 4.9.29 was just released today, so before I send in a Pull Request, let > > me know how 4.9.28 performs and if changes to the kernel config may need > > to be made. > > I updated

[qubes-users] Re: Request for feedback: 4.9 Kernel

2017-06-22 Thread motech man
> 4) General feedback on the 4.9 kernel. > > 4.9.29 was just released today, so before I send in a Pull Request, let > me know how 4.9.28 performs and if changes to the kernel config may need > to be made. I updated to 4.9.33 last night and it resolved low res display issue for my 7th gen intel

Re: [qubes-users] Containing Twitter sessions

2017-06-22 Thread Chris Laprise
On 06/22/2017 11:40 AM, Ryan Tate wrote: I am perplexed by the challenge of containing Twitter use in Qubes. With Twitter, you must be logged in to effectively read or write. On the read side, it is a wildly promiscuous experience exposing the user to various untrusted sites. Indeed a key goal

Re: [qubes-users] how to better verify backups to catch restore errors?

2017-06-22 Thread cubit
22. Jun 2017 03:58 by a...@qubes-os.org: > You can use the "verify-only" restore option (available both in Qubes > Manager and on the command-line) immediately after creating a backup. > That is the problem.   I have done the verify and it passes with no error for all of the backup archives

Re: [qubes-users] Re: The issue of non-proprietary BIOS and Qubes OS

2017-06-22 Thread Noor Christensen
On Wed, Jun 21, 2017 at 12:14:35PM +0200, math blanc wrote: > Thanks ! I didn't hear about heads before, it's very interesting :) > > Does an X230 with Coreboot and ME cleaned can match a Libreboot laptop ? Just want to chip in to say I'm running the same setup on a X220 with great results! --

Re: [qubes-users] Internet is not running on virtual machine

2017-06-22 Thread Noor Christensen
On Wed, Jun 21, 2017 at 05:24:13AM -0700, manasshr...@gmail.com wrote: > Hi, > I am using using virtual box on windows 10, my guest machine is Mac OS > X El Capitan. Host machine(Windows 10) is connected to wi-fi, but no > internet on guest machine. I tried every solution available on > internet.

[qubes-users] Containing Twitter sessions

2017-06-22 Thread Ryan Tate
I am perplexed by the challenge of containing Twitter use in Qubes. With Twitter, you must be logged in to effectively read or write. On the read side, it is a wildly promiscuous experience exposing the user to various untrusted sites. Indeed a key goal of using Twitter is to discover new

[qubes-users] Long-time Beta Users, do you wipe or upgrade?

2017-06-22 Thread Eric Duncan
Currently running Qubes 3.2 on one machine. Have a need to install it on another. To all of you long-term beta users of 3.x and now 4.x... 1a) Are upgrades simple to RTM versions of Qubes? Or 1b) Do you wipe and format each time a beta or RC comes out? I'm debating install Qubes 4.0

Re: [qubes-users] Vault-appvm empty after Debian-8 template dist-upgrade

2017-06-22 Thread Unman
On Thu, Jun 22, 2017 at 07:29:18AM -0400, Chris Laprise wrote: > On 06/21/2017 08:46 PM, 'Essax' via qubes-users wrote: > >I upgrade my Debian-8 template with /sudo apt-get dist-upgrade. /The > >only//problem I had after the upgrade was my vault-appvm was emply when > >I launched it. I searched

Re: [qubes-users] Debian 9 templates

2017-06-22 Thread Unman
On Thu, Jun 22, 2017 at 02:37:14PM +0200, cubit wrote: > Is there existing any pre-made templates for Debian 9? > Not yet. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send

Re: [qubes-users] Re: Screen recorder for Qubes..?

2017-06-22 Thread mathdegiovani
Hello, > > > >> The threat model is pretty similar to Qubes' Trusted PDF feature. > > Not quite. The PDF processing happens in a throwaway VM, whereas here > > the video processing as done today happens in dom0. > > I was suggesting the compression could be done in an appVM... it should > be

[qubes-users] Debian 9 templates

2017-06-22 Thread cubit
Is there existing any pre-made templates for Debian 9? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to