Hey Qubes-Team,
https://www.qubes-os.org/doc/hvm/
states that "shared templates for HVM domains" are not supported.
This is an outdated information, isn't it?
Robert
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from
"An agenda against Qubes goal". Lol, that would been really arrogant because I
joined Linux only 3 months ago and I have everything to learn.
But if you want to talk about what Qubes provides, I have my opinion on the
subject : Qubes greatest innovation is kinda making business of privacy
Hi fellows,
I started using qubes a while ago and I have a question concerning backups.
What I want is a complete backup to a dedicated external USB HDD. I understand
to achieve this all the VMs must be shut down.
Therefore when I plugged in the HDD I mounted it in dom0 under /mnt.
Questions:
On 09/25/2016 05:36 PM, Marek Marczykowski-Górecki wrote:
What about disabling xscreensaver completely for 120 mins?
Something like:
xscreensaver-command -exit
sleep 7200
xscreensaver &
No settings are changed, so unexpected system reboot isn't a problem.
Easy, if it's
'Gabriel' via qubes-users:
> Hi fellows,
>
> I started using qubes a while ago and I have a question concerning backups.
> What I want is a complete backup to a dedicated external USB HDD. I
> understand to achieve this all the VMs must be shut down.
> Therefore when I plugged in the HDD I
bump
--
Regards
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to
On Tue, Sep 27, 2016 at 12:41:12PM -0700, raahe...@gmail.com wrote:
> On Sunday, September 25, 2016 at 9:46:13 AM UTC-4, nishi...@gmail.com wrote:
> > Hello,
> >
> > I am surprised that there is no way to disable ipv6 on Debian template.
> >
> > I reinstalled first the template using
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On Tue, Sep 27, 2016 at 12:53:54PM +0200, Tobias Abenius wrote:
> On 09/23/2016 03:22 PM, Marek Marczykowski-Górecki wrote:
>
> > > '/usr/lib/qubes/qrexec-client-vm dom0 qubes.ReceiveUpdates
> > > /usr/lib/qubes/qfile-agent
> > >
If I think a computer has been infected, is there anything else I should
wipe/re-install other than
1. Hard Drive / Operating System
2. BIOS
Is there anything else that a hacker could possibly infect that needs to be
wiped/re-installed..?
Thanks
--
You received this message because you are
On 09/23/2016 03:22 PM, Marek Marczykowski-Górecki wrote:
'/usr/lib/qubes/qrexec-client-vm dom0 qubes.ReceiveUpdates
/usr/lib/qubes/qfile-agent /var/lib/qubes/dom0-updates/packages/*.rpm' failed with exit code 1!
Check /var/log/qubes/qrexec.sys-firewall.log. I'd guess it is something
about
On Tue, Sep 27, 2016 at 09:13:30PM -, johnyju...@sigaint.org wrote:
> > My PC's RT clock might drift by a few seconds each week
>
> Actually, it's not even that bad. I'm sure I've fired up motherboards or
> laptops that haven't been touched in years, and their clocks were accurate
> within a
On Tuesday, September 27, 2016 at 5:11:27 PM UTC-4, Jeremy Rand wrote:
> raahe...@gmail.com:
> > or just only allow https in the vm firewall settings.
>
> I assume you mean whitelisting TCP port 443? If so, be aware that while
> this will stop most non-HTTPS traffic, there is nothing that
On Wednesday, 28 September 2016 11:28:45 UTC+10, Drew White wrote:
> On Wednesday, 28 September 2016 03:54:10 UTC+10, raah...@gmail.com wrote:
> > Is your issue after a wake from suspend? Desktop freezes on me on one
> > machine if it is left asleep for too long. I figure its related to bios
On Wednesday, 28 September 2016 13:27:17 UTC+10, johny...@sigaint.org wrote:
> > Hi JJ,
> >
> > My PC has 10 USB Bus's.
> > My keyboard and mouse are on bus 10, which is PCI device .XX.X and I
> > left that one on Dom0.
>
> Are they 10 separate PCI devices, 10 separate USB buses?
>
> I'd be
Hi JJ,
Did some more testing, you were right, I only have 3.
I have 2 bus's on the motherboard...
I plugged a USB drive into each set to find out which were which.
But that doesn't explain why it isn't working when I even just attach my USB3
card to the USBVM.
That alone should work, but it
> Hi JJ,
>
> My PC has 10 USB Bus's.
> My keyboard and mouse are on bus 10, which is PCI device .XX.X and I
> left that one on Dom0.
Are they 10 separate PCI devices, 10 separate USB buses?
I'd be very surprised if that were the case. But also very impressed, and
wanting such a motherboard
On Tue, Sep 27, 2016 at 09:15:47PM +, Jeremy Rand wrote:
> johnyju...@sigaint.org:
> >> The "listening" services are less of a concern, since the firewall
> >> wouldn't permit any incoming connections to be passed through to start
> >> with. It's the "phone home" style services, like time
On Tuesday, September 27, 2016 at 4:27:01 PM UTC-4, neilh...@gmail.com wrote:
> How about Google Chromebooks which have a system to auto-restore the OS if it
> thinks it's been tampered with..?
>
> Or what about a read-only BIOS in the first place..?
>
> Is there any reason BIOS can't be
On Wednesday, 28 September 2016 03:54:10 UTC+10, raah...@gmail.com wrote:
> Is your issue after a wake from suspend? Desktop freezes on me on one machine
> if it is left asleep for too long. I figure its related to bios or what vms
> were running when it went to sleep. I also find its less of
On Tuesday, September 27, 2016 at 7:27:43 PM UTC-4, raah...@gmail.com wrote:
> On Tuesday, September 27, 2016 at 5:38:59 PM UTC-4, Unman wrote:
> > On Tue, Sep 27, 2016 at 12:41:12PM -0700, raahe...@gmail.com wrote:
> > > On Sunday, September 25, 2016 at 9:46:13 AM UTC-4, nishi...@gmail.com
> > >
On Tuesday, September 27, 2016 at 5:38:59 PM UTC-4, Unman wrote:
> On Tue, Sep 27, 2016 at 12:41:12PM -0700, raahe...@gmail.com wrote:
> > On Sunday, September 25, 2016 at 9:46:13 AM UTC-4, nishi...@gmail.com wrote:
> > > Hello,
> > >
> > > I am surprised that there is no way to disable ipv6 on
On Tuesday, September 27, 2016 at 5:11:27 PM UTC-4, Jeremy Rand wrote:
> raahe...@gmail.com:
> > or just only allow https in the vm firewall settings.
>
> I assume you mean whitelisting TCP port 443? If so, be aware that while
> this will stop most non-HTTPS traffic, there is nothing that
On Wednesday, 28 September 2016 03:54:10 UTC+10, raah...@gmail.com wrote:
> Is your issue after a wake from suspend? Desktop freezes on me on one machine
> if it is left asleep for too long. I figure its related to bios or what vms
> were running when it went to sleep. I also find its less of
> I want to get the USB VMs to work, but I use keyboard and mouse via USB,
> not PS/2, so it will not permit me to configure it.
>
> I wish to attach specific USB Ports to Dom0, which is 1 of the bus's. And
> the other USB bus's to the USBVM, but I can't find out what device to
> attach to Dom0 to
> It may no longer be the case, but it used to be that most USB keyboards
> and mice had controllers that also automatically auto-detected and
> supported PS/2, with a simple passive passthrough dongle between the
> USB->PS/2 connection.
>
>
On Wednesday, 28 September 2016 12:46:10 UTC+10, johny...@sigaint.org wrote:
> Pretty sure the answer is "no." You can assign a whole USB bus (which is
> typically a single PCI device) to a VM, but you can't split it up beyond
> that, other than the default of having dom0 relay specific devices
raahe...@gmail.com:
> On Tuesday, September 27, 2016 at 5:11:27 PM UTC-4, Jeremy Rand wrote:
>> raahe...@gmail.com:
>>> or just only allow https in the vm firewall settings.
>>
>> I assume you mean whitelisting TCP port 443? If so, be aware that while
>> this will stop most non-HTTPS traffic,
On Wednesday, 28 September 2016 03:54:10 UTC+10, raah...@gmail.com wrote:
> Is your issue after a wake from suspend? Desktop freezes on me on one machine
> if it is left asleep for too long. I figure its related to bios or what vms
> were running when it went to sleep. I also find its less of
> Yeah, Joanna is seriously epic.
Upon that, we can all agree.
Everything she designs or writes up, seems bang-on (and wonderfully
informative) in this increasingly security-threatened world we're living
in.
She's probably just a fictional character created by the NSA to mesmerize
and lure us
> You can get a motherboard that has a removable bios chip that you can just
> snap in to replace, Then call the company and have them send you one or
> two to hold onto for emergency lol. There is also mobos with dualbios,
> most ly this is for bringing a bricked board back to life.
I actually
After 10 minutes of running, I have less than 50 Mb free RAM in Dom0.
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
Yeah, Joanna is seriously epic.
How about Raspberry Pi..? That seems to have very few components.
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to
On Tuesday, September 27, 2016 at 2:56:27 PM UTC-4, johny...@sigaint.org wrote:
> > I forget which blackhat event, they showed how you can think you are
> > flashing a bios. But the malware will remain.
>
> That's creepy. Don't most BIOS flashing utilities do a verification? Or
> perhaps the
> I'm back with a brand-new workstation setup to try Qubes on. I bought a
> Matrox C680 and hooked up six monitors to its DisplayPort outputs. I'm
> using Qubes R3.2 fully updated as of now, with XFCE.
Six monitors??? Wow!
Can I come over and hang out at your place?
JJ
--
You received this
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On Tue, Sep 27, 2016 at 08:47:27PM +0200, Alex wrote:
> Hi everybody,
> I'm back with a brand-new workstation setup to try Qubes on. I bought a
> Matrox C680 and hooked up six monitors to its DisplayPort outputs. I'm
> using Qubes R3.2 fully updated
On Tuesday, September 27, 2016 at 2:56:27 PM UTC-4, johny...@sigaint.org wrote:
> > I forget which blackhat event, they showed how you can think you are
> > flashing a bios. But the malware will remain.
>
> That's creepy. Don't most BIOS flashing utilities do a verification? Or
> perhaps the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
On 2016-09-27 06:59, 'Gabriel' via qubes-users wrote:
> Hi fellows,
>
> I started using qubes a while ago and I have a question concerning backups.
> What I want is a complete backup to a dedicated external USB HDD. I
> understand to achieve this
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
On 2016-09-27 06:45, Robert Mittendorf wrote:
> Hey Qubes-Team,
>
> https://www.qubes-os.org/doc/hvm/
>
> states that "shared templates for HVM domains" are not supported.
>
> This is an outdated information, isn't it?
>
> Robert
>
On Monday, September 26, 2016 at 4:00:38 AM UTC-4, Drew White wrote:
> On Monday, 26 September 2016 15:31:19 UTC+10, Foppe de Haan wrote:
> > usb input devices? if so, can you attach a ps/2 mouse/keyboard and does
> > that do anything? also, maybe have a look at bios settings related to
> >
On Sunday, September 25, 2016 at 7:32:34 AM UTC-4, Chris Laprise wrote:
> On 09/25/2016 07:08 AM, johnyju...@sigaint.org wrote:
> >> Let's say I have a Qubes machine connected to a 2nd laptop by Ethernet.
> >>
> >> The Qubes machine is sharing its Internet connection.
> >>
> >> Let's say the Qubes
On Wednesday, June 22, 2016 at 8:26:50 AM UTC-7, Marcus at WetwareLabs wrote:
> Hello all,
>
> I've been tinkering with GPU passthrough these couple of weeks and I thought
> I should now share some of my findings. It's not so much unlike the earlier
> report on GPU passthrough here
>
On Sunday, September 25, 2016 at 9:46:13 AM UTC-4, nishi...@gmail.com wrote:
> Hello,
>
> I am surprised that there is no way to disable ipv6 on Debian template.
>
> I reinstalled first the template using documentation
> https://www.qubes-os.org/doc/reinstall-template/
>
> Then I added
Also just to add qubes devs have fedora template with less listening process
then debian-8 which is not default and more community based. But if you want
to use use debian instead for your sysnet or firewall or w/e. You can disable
all the listening processes yourself.
--
You received this
> On Tuesday, September 27, 2016 at 6:51:31 AM UTC-4, neilh...@gmail.com
> wrote:
>> If I think a computer has been infected, is there anything else I should
>> wipe/re-install other than
>>
>> 1. Hard Drive / Operating System
>>
>> 2. BIOS
This also brings up the question of BIOS vs. EFI, which
On 09/27/2016 09:19 PM, Marek Marczykowski-Górecki wrote:
> Wow... The problem is that gui-agent have hardcoded maximum of 4
> outputs[1]. The number is totally arbitrary, can be changed to
> anything. Any ideas for better value? Apparently 4 isn't large
> enough...
That's good to know, and that
On Tuesday, September 27, 2016 at 3:35:54 PM UTC-4, johny...@sigaint.org wrote:
> > On Tuesday, September 27, 2016 at 6:51:31 AM UTC-4, neilh...@gmail.com
> > wrote:
> >> If I think a computer has been infected, is there anything else I should
> >> wipe/re-install other than
> >>
> >> 1. Hard
On Tuesday, September 27, 2016 at 6:51:31 AM UTC-4, neilh...@gmail.com wrote:
> If I think a computer has been infected, is there anything else I should
> wipe/re-install other than
>
> 1. Hard Drive / Operating System
>
> 2. BIOS
>
> Is there anything else that a hacker could possibly infect
> I forget which blackhat event, they showed how you can think you are
> flashing a bios. But the malware will remain.
That's creepy. Don't most BIOS flashing utilities do a verification? Or
perhaps the flashing utility itself is what was compromised in the
blackhat demo.
Another reason why
> If I think a computer has been infected, is there anything else I should
> wipe/re-install other than
>
> 1. Hard Drive / Operating System
>
> 2. BIOS
>
> Is there anything else that a hacker could possibly infect that needs to
> be wiped/re-installed..?
Lol, don't get me started...
- Any PCI
On Tuesday, September 27, 2016 at 2:31:33 PM UTC-4, johny...@sigaint.org wrote:
> > If I think a computer has been infected, is there anything else I should
> > wipe/re-install other than
> >
> > 1. Hard Drive / Operating System
> >
> > 2. BIOS
> >
> > Is there anything else that a hacker could
Hi everybody,
I'm back with a brand-new workstation setup to try Qubes on. I bought a
Matrox C680 and hooked up six monitors to its DisplayPort outputs. I'm
using Qubes R3.2 fully updated as of now, with XFCE.
Long story short, dom0 is able to use all six monitors in the
configuration I set up
>> Especially if you did the sharing via a separate vpn or ssh tunnel. But
>> in general, I don't think Qubes security should be considered much if
>> any benefit to adjacent non-Qubes systems.
>>
>> Chris
>>
>> > The benefits far outweigh the risks, as long as you don't do most of
>> your
>> >
> How about Google Chromebooks which have a system to auto-restore the OS if
> it thinks it's been tampered with..?
Doesn't that imply trust in Google, who is known to cooperate with NSA and
such (as required by US law)?
I have had serious problems with a hacked Android phone, and the
> Also just to add qubes devs have fedora template with less listening
> process then debian-8 which is not default and more community based. But
> if you want to use use debian instead for your sysnet or firewall or w/e.
> You can disable all the listening processes yourself.
It's an
> The "listening" services are less of a concern, since the firewall
> wouldn't permit any incoming connections to be passed through to start
> with. It's the "phone home" style services, like time sync, Samba name
> lookups on microsoft servers, and such, that are more concerning, and
>
> My PC's RT clock might drift by a few seconds each week
Actually, it's not even that bad. I'm sure I've fired up motherboards or
laptops that haven't been touched in years, and their clocks were accurate
within a minute.
So there's no need for synchronizing your time so frequently.
I just
raahe...@gmail.com:
> or just only allow https in the vm firewall settings.
I assume you mean whitelisting TCP port 443? If so, be aware that while
this will stop most non-HTTPS traffic, there is nothing that prevents
other protocols from using port 443. It's a fairly well-known attack on
Tor's
johnyju...@sigaint.org:
>> The "listening" services are less of a concern, since the firewall
>> wouldn't permit any incoming connections to be passed through to start
>> with. It's the "phone home" style services, like time sync, Samba name
>> lookups on microsoft servers, and such, that are
58 matches
Mail list logo
