Re: [qubes-users] How would you remotely infiltrate a default Qubes OS?

2020-08-15 Thread 54th Parallel
On Sunday, 16 August 2020 at 01:14:08 UTC+8 Chris Laprise wrote: > I'm not going to get into details now, but the short story is Intel > haven't addressed all the sidechannel vulnerabilities, and the long and > varied trend of Intel vulns points to a fundamentally flawed > implementation...

Re: [qubes-users] How would you remotely infiltrate a default Qubes OS?

2020-08-15 Thread 54th Parallel
On Saturday, 15 August 2020 at 14:39:32 UTC+8 a...@qubes-os.org wrote: > > Then don't use it! :) > With the new look that makes it so much harder to use (top posting is default now) and replying to multiple people in a single post is a pain, so I just might give Thunderbird or Mutt a try.

Re: [qubes-users] Google requiring login to access qubes-users

2020-08-15 Thread unman
On Sat, Aug 15, 2020 at 07:39:19PM +, tetrahedra via qubes-users wrote: > WHen I try to access the Google Groups qubes-users site, sometimes (circa > 50%) I'm presented with a Google login prompt and can't access the > qubes-users group unless I have a Google account. > > Since Qubes is

[qubes-users] Qubes 4.1 Archlinux

2020-08-15 Thread Jon Will
I'm using qubes 4.1 and I can't compile a archlinux template. Every time I try to do it I get -- *==> ERROR: 'pacman' failed to install missing dependencies.** **==> Missing dependencies:** **  -> python2** **  -> bridge-utils** **  -> python2-lxml** **  -> lzo** **  -> yajl** **==>

[qubes-users] fixing mouse movement in simple games

2020-08-15 Thread Qubes
Is there a way to fix mouse movement in simple games like chromium bsd? In terms of graphics on the screen it looks ok, but the mouse jumps is all over the place inside the game. A small movement to the left would take the mouse all the way over to the left. -- You received this message

Re: [qubes-users] debian network manager add vpn connection

2020-08-15 Thread Qubes
On 8/15/20 3:15 PM, unman wrote: On Sat, Aug 15, 2020 at 09:45:03AM +0200, Qubes wrote: I have more than one vpn connection configured using appVMs based on Fedora. If you open the "Qube Settings" window you can add the "network-manager" service on the "Services" tab. If you then boot the appVM

[qubes-users] Google requiring login to access qubes-users

2020-08-15 Thread tetrahedra via qubes-users
WHen I try to access the Google Groups qubes-users site, sometimes (circa 50%) I'm presented with a Google login prompt and can't access the qubes-users group unless I have a Google account. Since Qubes is privacy-focused it seems like maybe the Qubes mailing lists should migrate to a less

Re: [qubes-users] Mirage Firewall with separate DNS

2020-08-15 Thread wdchr...@gmail.com
Thanks for your reply. While I know that the most common deployment of Pihole is, naturally, a physical RPI device, I am interested in a solution that is 100% self-contained in the machine itself. Admittedly, having the router forward to the Pihole will accomplish network-wide protection for

[qubes-users] Running Qubes 4.1 under VirtualBox as migration strategy

2020-08-15 Thread Chris Laprise
Unfortunately, Qubes does not yet run on recent AMD hardware so I am thinking of ways I can migrate the Qubes setup I have on my old Intel machine to my new Thinkpad T14. The new machine is blazing fast, cool and quiet (and lighter and better display, etc.) so I'm very interested in migrating

Re: [qubes-users] How would you remotely infiltrate a default Qubes OS?

2020-08-15 Thread Chris Laprise
On 8/13/20 10:32 PM, 54th Parallel wrote: > Since the lions' share of Qubes installs are Intel based, I think a > side-channel attack would be the most likely way to breach a Qubes > system. I thought Spectre and Meltdown have been dealt with by shutting off hyperthreading and updating

Re: [qubes-users] why do fedora templates always start sys-whonix on update

2020-08-15 Thread unman
On Sat, Aug 15, 2020 at 04:26:34AM -0700, 0spin...@gmail.com wrote: > mainly because fedora updates are always so very slow (200-400kbps), while > debian isn't. > The proxy is configured at /etc/qubes-rpc/policy/qubes.UpdatesProxy You want a line at the top of the file that says (e.g):

Re: [qubes-users] debian network manager add vpn connection

2020-08-15 Thread unman
On Sat, Aug 15, 2020 at 09:45:03AM +0200, Qubes wrote: > I have more than one vpn connection configured using appVMs based on Fedora. > If you open the "Qube Settings" window you can add the "network-manager" > service on the "Services" tab. If you then boot the appVM a network manager > icon

[qubes-users] Re: Global Dark Theme For Qt (KDE) Based Applications

2020-08-15 Thread qtpie
Chris Laprise: On 6/23/20 9:47 AM, Qubes wrote: Would anybody here know how you apply a global dark theme to your AppVM(s) for Qt (KDE) based applications like Amarok, Krusader, etc? Install qt5ct and style plugins ... Fedora: sudo dnf install qt5ct qt5-qtstyleplugins Debian: sudo apt

Re: [qubes-users] Mirage Firewall with separate DNS

2020-08-15 Thread Mike Keehan
On 8/15/20 9:21 AM, wdchr...@gmail.com wrote: I've installed qubes-mirage-firewall 0.7.1 on my Qubes 4.0.3 installation and am having trouble isolating my DNS calls with the standard rules.ml file. My configuration looks like this: sys-net  (uplink to router using 1.1.1.1 DNS)    |

Re: [qubes-users] why do fedora templates always start sys-whonix on update

2020-08-15 Thread 0spin...@gmail.com
mainly because fedora updates are always so very slow (200-400kbps), while debian isn't. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: [qubes-users] why do fedora templates always start sys-whonix on update

2020-08-15 Thread Qubes
On 8/15/20 1:09 PM, 0spin...@gmail.com wrote: On Saturday, August 15, 2020 at 1:03:31 PM UTC+2 Qubes wrote: On 8/15/20 12:01 PM, wrote: anyone have a clue why this is, and whether it can be disabled? It happens regardless of whether I have a netvm set for the template, and I have 0 tor

Re: [qubes-users] why do fedora templates always start sys-whonix on update

2020-08-15 Thread 0spin...@gmail.com
On Saturday, August 15, 2020 at 1:03:31 PM UTC+2 Qubes wrote: > On 8/15/20 12:01 PM, wrote: > > anyone have a clue why this is, and whether it can be disabled? It > happens > > regardless of whether I have a netvm set for the template, and I have 0 > tor > > mirrors enabled afaict. > > >

Re: [qubes-users] why do fedora templates always start sys-whonix on update

2020-08-15 Thread Qubes
On 8/15/20 12:01 PM, 0spin...@gmail.com wrote: anyone have a clue why this is, and whether it can be disabled? It happens regardless of whether I have a netvm set for the template, and I have 0 tor mirrors enabled afaict. It is normal [behavior], Qubes uses a proxy service for updates.

[qubes-users] why do fedora templates always start sys-whonix on update

2020-08-15 Thread 0spin...@gmail.com
anyone have a clue why this is, and whether it can be disabled? It happens regardless of whether I have a netvm set for the template, and I have 0 tor mirrors enabled afaict. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from

[qubes-users] Mirage Firewall with separate DNS

2020-08-15 Thread wdchr...@gmail.com
I've installed qubes-mirage-firewall 0.7.1 on my Qubes 4.0.3 installation and am having trouble isolating my DNS calls with the standard rules.ml file. My configuration looks like this: sys-net (uplink to router using 1.1.1.1 DNS) | sys-mirage | - pihole (set to use 8.8.8.8 DNS)

[qubes-users] debian network manager add vpn connection

2020-08-15 Thread Qubes
I have more than one vpn connection configured using appVMs based on Fedora. If you open the "Qube Settings" window you can add the "network-manager" service on the "Services" tab. If you then boot the appVM a network manager icon appears in the system tray. If you click on the icon you can

Re: [qubes-users] How would you remotely infiltrate a default Qubes OS?

2020-08-15 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2020-08-13 9:32 PM, 54th Parallel wrote: > P.S. I'm not liking this new Google Groups look Then don't use it! :) "While the mailing lists are implemented as Google Group web forums, a Google account is in no way required, expected, or