[qubes-users] Re: Mainstream Mediaplayers & Malwaretising

2017-05-26 Thread cooloutac
On Thursday, May 25, 2017 at 6:23:02 AM UTC-4, 
04892570458204572845702894750289450289745289732893 wrote:
> Hello,
> 
> are there some Mediaplayers, which are designed not only to consume different 
> formats of media (sound, video), but also take into account the security 
> considerations?
> 
> Subtitels can be used for malwaretising in the mainstream mediaplayers:
> 
> http://www.trustedreviews.com/news/research-firm-using-subtitles-on-kodi-or-vlc-could-get-you-hacked
> 
> Sure you can use isolated VM's or and App-Firewalls... but sometimes you have 
> two programs and sensitive data in one domain and like to use clean software 
> too...
> 
> Kind Regards

I wish,  all the major ones seem to broadcast to all sorts of servers on most 
distros.   Really don't know of another way except as you say,  separate media 
player vm and disable internet on it.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0c0c446a-33a5-447c-bd2f-c78c3c066711%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] X.org failure preventing boot, Intel graphics

2017-05-26 Thread cooloutac
On Friday, May 26, 2017 at 12:25:13 AM UTC-4, Ryan Tate wrote:
> On May 25, 2017, at 11:19 PM, Ryan Tate  wrote:
> > 
> > Ah, it turns out I was able to boot when using same fedora but different 
> > (older) kernel (4.2.3).
> 
> To be clear, I still can't boot qubes, I'm just saying it seems to have more 
> to do with the kernel than distro.  Just booting direct to a fedora usb 
> stick., 4.2.3 works as does 4.5.5 -- so I'm guessing it is something to do 
> with the qubes 4.4.14 kernel. Grateful for any tips on how to swap in another 
> kernel without being able to boot dom0.

you might have to build your own iso after all man.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d5d1dec1-06b2-43a3-9e67-f0d07b2c0412%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Booting USB Quebes across multiple machines?

2017-05-26 Thread cooloutac
On Friday, May 26, 2017 at 1:34:53 PM UTC-4, Eric Duncan wrote:
> To clarify my original post/question:
> 
> What does Qubes use from the physical machine's properties to set up an 
> installation?  I could not find any documentation on the site about this in 
> the Wiki (I'm happy to contribute it to the Qubes wiki, if it can be 
> explained here).
> 
> Some ideas I have that might cause issues with a single installation used 
> across multiple configurations.
> 
> - # of cores are used to pre-set all VMs to # of vCPUs (e.g. like Docker does)
> - amount of Memory used to pre-set all VMs to certain percentages (with a 
> min). use swap for the rest.
> 
> But, I don't know if Qubes does this or not.  Could be plausible though, if 
> it did read these values.  
> 
> I have one installation that uses the USB VM, and I think that is perfect.  I 
> can write custom scripts with that VM to look for and mount certain things 
> depending on if they present or not (Logitech webcam on desktop, not on 
> macbook pro, etc).
> 
> As for the # of cores/memory, I could write a script in dom0 that would 
> "adjust" the VMs according to the system properties, before they start.  That 
> doesn't seem like a big deal either.
> 
> 
> What I'd like to know if there is anything else specific, like graphics 
> drivers or device drivers that are detected, installed and enabled as per the 
> installation.  Like, is there a specific Xen installation done on Qubes 
> install?
> 
> Thanks!
> Eric

I would think this would be the same as on a baremetal linux, no?  Probably has 
more to do with kernel.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/30b11ee0-a86b-4dec-b253-0b067b71912c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Booting USB Quebes across multiple machines?

2017-05-26 Thread cooloutac
On Friday, May 26, 2017 at 1:26:27 PM UTC-4, Eric Duncan wrote:
> Thank you.  But, my question was more about how Qubes gets installed and does 
> it use any system properties to customize the install?
> 
> 
> I know what you are saying though.  If running Windows/macOS, a piece of 
> firmware of a device (or bios) could be infected.  And when booting Qubes 
> from the external device, it could infect it.
> 
> Then again, that argument could be made against 100% of all PCs, laptops, 
> motherboards of custom builds, etc - even brand new devices.  So are you ever 
> safe?  Perhaps if you built your own device from scratch and coded your own 
> BIOS.  
> 
> The edge case you mention would most likely be valid only from a targeted 
> attack, not part of a toolkit.  
> 
> Say if a state actor wanted access to my Qubes install, they would need to 
> know some very specific information:
> 
> * specific macbook with specific hardware (very likely, AppleCare registered 
> and all, blogging/bragging of hardware used, etc).  
> * the exact mSATA drive and USB device I use for Qubes OS (very likely, I can 
> just blog about it - or they can get NewEgg purchase history).  
> * knowledge of exact firmware versions installed on those devices.
> 
> Virtually, they would need to exploit some Windows/macOS 0-day to gain access 
> to the machine (somewhat likely, sure).  Physically, they would need to 
> evil-maid my machines when we are gone on vacation or something (plausible, 
> sure).
> 
> The attack would have to look like this:
> 
> 1) They could devise a custom mSATA firmware to install onto the device.  
> Well, that would require me having the Qubes OS usb device attached when 
> booting under some other OS installed on that machine.  So, always disconnect 
> it before booting native OS.  Easy.
> 
> 2) They could use the exploit to infect the BIOS, or Nvidia GPU firmware - 
> something that would boot when booting the Qubes install. 
> 
> 2A) that could install a keylogger, to gain access to the /boot LUKS 
> partition password (like an evil-maid attack).  plausible, yes - at a very 
> edge case.
> 
> 2B) that could install some other firmware installer, that waits for the 
> linux kernel to boot and then side-loads itself into the boot process, or 
> exploit some Qubes 0-day to gain root on the device.  very unlikely, but 
> plausible, yes.
> 
> So plausible? Sure, with explicit details in hand. 
> 
> But that is acceptable to me as the level of sophistication required to pull 
> off that level of attack, with knowledge of devices and their exact firmware 
> versions, most likely would only come from state actors.  (*cough* Stuxnet 
> *cough*)
> 
> If you are worried about state actors, then yes format your machines and 
> install only Qubes.
> 
> -E
> 
> 
> 
> 
> On Thursday, May 25, 2017 at 11:14:30 PM UTC-4, cooloutac wrote:
> > On Thursday, May 25, 2017 at 1:00:18 PM UTC-4, Eric Duncan wrote:
> > > Hello:
> > > 
> > > Does Quebes perform a machine-specific installation?  IOWs, can I install 
> > > Quebes on a single USB device and share it across different machine 
> > > setups?
> > > 
> > > E.g. if I install Qubes on an 8 core desktop, w/64GB ram, SSD (just keep 
> > > it simple - only 1 SSD), Nvidia GPUs, etc - can I then take that exact 
> > > same install and boot it in my Core i7 dual-core tablet with only 8 gb of 
> > > ram without any issues?
> > > 
> > > I ask because of two reasons:
> > > 
> > > * I cannot format entire HDDs to dedicate to Qubes OS.  I still do some 
> > > Windows 10, iOS and Linux development and need macOS for other various 
> > > things.  A dual-boot setup is not "secure."
> > > 
> > > * I was thinking of setting up an mSATA drive and USB3 adapter for 
> > > Quebes, encrypt the partitions and evil-maid protection and etc, and boot 
> > > it in multiple devices.
> > > 
> > > I currently have it installed as a dual-boot on my Lenovo Helix (full 
> > > support for 4.x btw!).  But, I'd like to boot Quebes on my desktop and 
> > > other machines I use...
> > > 
> > > ...while keeping it secure, by using the entire mSATA drive for Quebes.
> > > 
> > > Thanks in advance!
> > > -E
> > > 
> > > Ps, I have already attempted to try this with a USB3 stick and had 
> > > possibly unrelated failures.  Hence, why I am asking about the 
> > > installation process and hardware configurations- if any.  
> > > 
> > > Before I invest into an external drive setup, I'd like to know if there 
> > > are any foreseen issues first.
> > 
> > I'm not sure it would really be keeping it secure that way either.  dual 
> > boot is not only unsafe cause it can change /boot but also because other os 
> > could infect hardware.   In other words windows or mac could infect the 
> > firmware or netcard, gpu, cdrom, etc... which could then sniff or infect 
> > your usb installation.

well yes,  but then you couldn't blame the other os,  which does not 
protect/isolate the hardware as well as Qubes.

and ya, look at 

[qubes-users] Re: Dual screen

2017-05-26 Thread qubester
On 05/14/2017 09:24 PM, 
sanderhoog.sh-re5jqeeqqe8avxtiumw...@public.gmane.org wrote:

Hi People,

I'd like to ask how i can configure my Qubes-OS to use two monitors.
I did connect two monitors to my PC but now I have two monitors with exactly 
the same content on it (Mirror).

How can i disable the mirror function so that i can use two monitors?

Greetz,

Sander

I had same problem, finally it just automagically solved itself I have 
HDMI and DisplayPort  connections to my 2 monitors, FWIW.


What do you have ?

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/42638891-1c11-7c1e-9084-87d857a53be7%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Dual screen

2017-05-26 Thread 'Slideshowbob' via qubes-users
 Original Message 
Subject: [qubes-users] Re: Dual screen
Local Time: May 24, 2017 3:03 PM
UTC Time: May 24, 2017 1:03 PM
From: mfree...@zoho.com
To: qubes-users@googlegroups.com

On 05/15/2017 01:13 PM, Mathew Evans wrote:
> change settings with xrandr or gdk-screensettings.

Agree. On my hardware, I found that xrandr worked well, and
xfce4-display-settings didn't. See:

https://groups.google.com/forum/#!msg/qubes-users/DkTLbWxIkQI/UxR-X6RZAAAJ

arandr works (mostly) fine for me (needs a qubes-dom0-update arandr first). 
Could never figure out the args for xrandr :).

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/vGCEbzDrGTHSrJdVVIqydwgd21xhB2B2Uot285QSi6Iofo1fDzywk6X0QKpQi8i1e64nMOGx6dzEp8OF2BK_Hp9o3RUTRWBtfIxXyWR_g3I%3D%40protonmail.ch.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Where to bulk-download mailing list archives?

2017-05-26 Thread Jean-Philippe Ouellet
On Mon, Nov 14, 2016 at 3:48 PM, Marek Marczykowski-Górecki
 wrote:
> On Mon, Nov 14, 2016 at 01:21:29AM -0500, Jean-Philippe Ouellet wrote:
>> Does anyone know of a convenient place to grab the complete archives
>> of this list? (and qubes-devel too?)
>>
>> With the (lets hope indeed temporary) death of gmane and its nntp
>> interface, I lost the only easy way I knew of to bulk-download the
>> entire history of arbitrary mailing lists for offline grepping.
>>
>> I'd rather not write yet another one-off web crawler if I don't need to...
>
> I don't know how to download it from google, but I know how to download
> it from my personal mailbox ;) This is what was uploaded to gmane.
>
> https://ftp.qubes-os.org/~marmarek/qubes-users.tar.gz
> https://ftp.qubes-os.org/~marmarek/qubes-devel.tar.gz
>
> Archives are from May. I can upload newer, but better find some service
> which would do that - some gmane alternative.

Gmane still appears mostly dead, with no indications of coming back soon.

Maybe MailMark? Not as nice as gmane was, but they have better search
and a friendlier interface than both google-groups and marc.info
(which currently archives qubes-users and qubes-devel).

They claim to accept requests for new lists:

from http://markmail.org/docs/faq.xqy#morelists:
> Absolutely. We're constantly loading new list archives. We prioritize
> which list archives to load based on feedback, so let us know if you'd
> like us to host the archives for your community.

from http://markmail.org/docs/feedback.xqy:
> Want us to host a new list? Let us know! It helps if you can give us the
> homepage for the list and/or the contact info to the administrator. Also,
> let us know if you know how we can find the historical archives.

Perhaps worthwhile?

Regards,
Jean-Philippe

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CABQWM_AP95vwbXfspdBn49wEd2Fnu2CA2e1kLryTQicYybsadw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Occasionally UI elements stop responding to mouse clicks (all AppVMs and dom0)

2017-05-26 Thread Vít Šesták
I see the issue on two laptops with both integrated touchpad and external USB 
touchpad. This happens even with one monitor. Calling 
qubes-monitor-layout-notify does not help. (If it did, it probably would not 
affect dom0.) The last time I had the issue, I looked at dmesg, but found 
nothing interesting there.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f193cdce-6d89-48aa-bad6-ab4d0a095ce7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes OS version (e.g., R3.2): Having an issue in the last part of the installation

2017-05-26 Thread Eric Duncan
On Friday, May 26, 2017 at 3:27:18 PM UTC-4, tombulku...@gmail.com wrote:
> Thanks a lot Eric, already read this post and did all installation after 
> verifying it but it didn't solve my issue.
> I need another method to fix this up, KERNEL FAILED is not the only issue, i 
> cannot complete the installation.

Can you provide more details as to what the problems are?

All I saw was the Failed to load kernel modules error, which I replied wasn't 
an issue normally.

If you have more issues, please post them with as much information as possible.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8161cf62-ff80-4f61-93cd-63592cb82eb4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] HCL - Dell XPS 15 9560

2017-05-26 Thread Alchemist
I just grabbed a new xps15 and the installer is falling back to text mode. I'm 
not sure why we're getting different results on the same computers. Anyone have 
any ideas? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f2845234-bb4e-4b1f-b964-2d7e11dc1c5e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes OS version (e.g., R3.2): Having an issue in the last part of the installation

2017-05-26 Thread tombulkusfatbird
Thanks a lot Eric, already read this post and did all installation after 
verifying it but it didn't solve my issue.
I need another method to fix this up, KERNEL FAILED is not the only issue, i 
cannot complete the installation.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/50c9941d-1783-4d63-959f-718dd5519d9f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes OS version (e.g., R3.2): Having an issue in the last part of the installation

2017-05-26 Thread Eric Duncan
I get the same message on R3.2, and it works perfectly fine.

https://groups.google.com/forum/#!topic/qubes-users/iKs1ueF0ez8

Verify it with instructions in that thread.  If passes, I wouldn't sweat it.

Btw, /r/Qubes didn't get a lot of traffic for me either.  I would only post to 
this Google group going forward.


On Friday, May 26, 2017 at 11:26:59 AM UTC-4, tombulku...@gmail.com wrote:
> Hello there,
> I'd like to ask a question to this community before taking further action.
> I'll buy a Librem 13 with pre installed Qubes if I can't sort this out.
> I'll buy one even if i sort it but while i'm in US so it'll be a lifesaver 
> without paying custom taxes.
> Anyways,
> I'm a long time Tails user and it's so simple but I wanted to switch to Qubes 
> but as you already know it's a lot harder for a GNU/Linux newbie.
> I think i'll be able to figure it out if i pass this last installation 
> process.
> Can you please look at this post on reddit and tell me what i'm doing wrong 
> if you know the solution for this ?
> HUGE THANKS IN ADVANCE,
> 
> https://www.reddit.com/r/Qubes/comments/6b484q/having_an_issue_in_the_last_part_of_the/?st=J35Y5Y0X=83624631
> 
> Highlights for the ones who doesn't wanna browse reddit ;
> Having an issue in the last part of the installation • r/Qubes
> 
> Hi there dear experienced Qubes users, I'm a newbie about Qubes but a long 
> time user of Tails and VMs. Trying to figure it out and to switch to...
> I have tried everything for the last 2 months and i have tried this on all of 
> my 3 PCs
> I did verify ISO and test media before the installation, first i have tried 
> without verifying but same error occurred so then i deleted all and start 
> again with verifying also checked the hardware list and i have tried with 
> Dell Inspiron N5010 and Dell Xps15 and Hp Envy Desktop...
> Facing with the same issue on every single machine i have tried also using ex 
> SSD as an external HDD. I was thinking if it was related to WIFI cards these 
> machines have
> 
> Also the main issue can be this :
> 
> [Failed to start Kernel Modules ](http://imgur.com/a/8xowA) 
> 
> Please help me if you can I just don't wanna pay 2.600$ + 1.500$ as 
> custom tax without knowing OS i'll use.
> I just wanna practice some before getting deep into it.
> BEST REGARDS great community.
> FatBird.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2dfca796-0f63-49e7-85b5-cdfc0fa77134%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Booting USB Quebes across multiple machines?

2017-05-26 Thread Eric Duncan
To clarify my original post/question:

What does Qubes use from the physical machine's properties to set up an 
installation?  I could not find any documentation on the site about this in the 
Wiki (I'm happy to contribute it to the Qubes wiki, if it can be explained 
here).

Some ideas I have that might cause issues with a single installation used 
across multiple configurations.

- # of cores are used to pre-set all VMs to # of vCPUs (e.g. like Docker does)
- amount of Memory used to pre-set all VMs to certain percentages (with a min). 
use swap for the rest.

But, I don't know if Qubes does this or not.  Could be plausible though, if it 
did read these values.  

I have one installation that uses the USB VM, and I think that is perfect.  I 
can write custom scripts with that VM to look for and mount certain things 
depending on if they present or not (Logitech webcam on desktop, not on macbook 
pro, etc).

As for the # of cores/memory, I could write a script in dom0 that would 
"adjust" the VMs according to the system properties, before they start.  That 
doesn't seem like a big deal either.


What I'd like to know if there is anything else specific, like graphics drivers 
or device drivers that are detected, installed and enabled as per the 
installation.  Like, is there a specific Xen installation done on Qubes install?

Thanks!
Eric

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9177a7d9-99c1-4b34-b676-e8761e090971%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Booting USB Quebes across multiple machines?

2017-05-26 Thread Eric Duncan
Thank you.  But, my question was more about how Qubes gets installed and does 
it use any system properties to customize the install?


I know what you are saying though.  If running Windows/macOS, a piece of 
firmware of a device (or bios) could be infected.  And when booting Qubes from 
the external device, it could infect it.

Then again, that argument could be made against 100% of all PCs, laptops, 
motherboards of custom builds, etc - even brand new devices.  So are you ever 
safe?  Perhaps if you built your own device from scratch and coded your own 
BIOS.  

The edge case you mention would most likely be valid only from a targeted 
attack, not part of a toolkit.  

Say if a state actor wanted access to my Qubes install, they would need to know 
some very specific information:

* specific macbook with specific hardware (very likely, AppleCare registered 
and all, blogging/bragging of hardware used, etc).  
* the exact mSATA drive and USB device I use for Qubes OS (very likely, I can 
just blog about it - or they can get NewEgg purchase history).  
* knowledge of exact firmware versions installed on those devices.

Virtually, they would need to exploit some Windows/macOS 0-day to gain access 
to the machine (somewhat likely, sure).  Physically, they would need to 
evil-maid my machines when we are gone on vacation or something (plausible, 
sure).

The attack would have to look like this:

1) They could devise a custom mSATA firmware to install onto the device.  Well, 
that would require me having the Qubes OS usb device attached when booting 
under some other OS installed on that machine.  So, always disconnect it before 
booting native OS.  Easy.

2) They could use the exploit to infect the BIOS, or Nvidia GPU firmware - 
something that would boot when booting the Qubes install. 

2A) that could install a keylogger, to gain access to the /boot LUKS partition 
password (like an evil-maid attack).  plausible, yes - at a very edge case.

2B) that could install some other firmware installer, that waits for the linux 
kernel to boot and then side-loads itself into the boot process, or exploit 
some Qubes 0-day to gain root on the device.  very unlikely, but plausible, yes.

So plausible? Sure, with explicit details in hand. 

But that is acceptable to me as the level of sophistication required to pull 
off that level of attack, with knowledge of devices and their exact firmware 
versions, most likely would only come from state actors.  (*cough* Stuxnet 
*cough*)

If you are worried about state actors, then yes format your machines and 
install only Qubes.

-E




On Thursday, May 25, 2017 at 11:14:30 PM UTC-4, cooloutac wrote:
> On Thursday, May 25, 2017 at 1:00:18 PM UTC-4, Eric Duncan wrote:
> > Hello:
> > 
> > Does Quebes perform a machine-specific installation?  IOWs, can I install 
> > Quebes on a single USB device and share it across different machine setups?
> > 
> > E.g. if I install Qubes on an 8 core desktop, w/64GB ram, SSD (just keep it 
> > simple - only 1 SSD), Nvidia GPUs, etc - can I then take that exact same 
> > install and boot it in my Core i7 dual-core tablet with only 8 gb of ram 
> > without any issues?
> > 
> > I ask because of two reasons:
> > 
> > * I cannot format entire HDDs to dedicate to Qubes OS.  I still do some 
> > Windows 10, iOS and Linux development and need macOS for other various 
> > things.  A dual-boot setup is not "secure."
> > 
> > * I was thinking of setting up an mSATA drive and USB3 adapter for Quebes, 
> > encrypt the partitions and evil-maid protection and etc, and boot it in 
> > multiple devices.
> > 
> > I currently have it installed as a dual-boot on my Lenovo Helix (full 
> > support for 4.x btw!).  But, I'd like to boot Quebes on my desktop and 
> > other machines I use...
> > 
> > ...while keeping it secure, by using the entire mSATA drive for Quebes.
> > 
> > Thanks in advance!
> > -E
> > 
> > Ps, I have already attempted to try this with a USB3 stick and had possibly 
> > unrelated failures.  Hence, why I am asking about the installation process 
> > and hardware configurations- if any.  
> > 
> > Before I invest into an external drive setup, I'd like to know if there are 
> > any foreseen issues first.
> 
> I'm not sure it would really be keeping it secure that way either.  dual boot 
> is not only unsafe cause it can change /boot but also because other os could 
> infect hardware.   In other words windows or mac could infect the firmware or 
> netcard, gpu, cdrom, etc... which could then sniff or infect your usb 
> installation.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 

[qubes-users] HCL - Lenovo IdeaPad Y510p

2017-05-26 Thread Vercas
This is the model with Intel i7-4700MQ, 8 GB of RAM, and GT 750M SLI.
Pretty much everything works with default installation (incl. sys-usb and 
sys-whonix). Lack of VT-d means I cannot try anything fancy.

I reduced the memory allocated to the networking and hardware VMs (sys-net 300 
MB, sys-usb 300 MB, sys-firewall 200 MB, sys-whonix 300 MB) in order to be able 
to have more AppVMs active. Browsers gobble up memory.

Initially installed R3.1 but upgraded to R3.2 later.

Overall, works well. Wish I had VT-d. Also I wish I could have memory balooning 
in Windows HVMs.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5f597213-2600-4412-be13-2f851c5a072c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Qubes-HCL-LENOVO-20217-20170526-172149.yml
Description: Binary data


Qubes-HCL-LENOVO-20217-20170526-172149.cpio.gz
Description: Binary data


[qubes-users] Qubes OS version (e.g., R3.2): Having an issue in the last part of the installation

2017-05-26 Thread tombulkusfatbird

Hello there,
I'd like to ask a question to this community before taking further action.
I'll buy a Librem 13 with pre installed Qubes if I can't sort this out.
I'll buy one even if i sort it but while i'm in US so it'll be a lifesaver 
without paying custom taxes.
Anyways,
I'm a long time Tails user and it's so simple but I wanted to switch to Qubes 
but as you already know it's a lot harder for a GNU/Linux newbie.
I think i'll be able to figure it out if i pass this last installation process.
Can you please look at this post on reddit and tell me what i'm doing wrong if 
you know the solution for this ?
HUGE THANKS IN ADVANCE,

https://www.reddit.com/r/Qubes/comments/6b484q/having_an_issue_in_the_last_part_of_the/?st=J35Y5Y0X=83624631

Highlights for the ones who doesn't wanna browse reddit ;
Having an issue in the last part of the installation • r/Qubes

Hi there dear experienced Qubes users, I'm a newbie about Qubes but a long time 
user of Tails and VMs. Trying to figure it out and to switch to...
I have tried everything for the last 2 months and i have tried this on all of 
my 3 PCs
I did verify ISO and test media before the installation, first i have tried 
without verifying but same error occurred so then i deleted all and start again 
with verifying also checked the hardware list and i have tried with Dell 
Inspiron N5010 and Dell Xps15 and Hp Envy Desktop...
Facing with the same issue on every single machine i have tried also using ex 
SSD as an external HDD. I was thinking if it was related to WIFI cards these 
machines have

Also the main issue can be this :

[Failed to start Kernel Modules ](http://imgur.com/a/8xowA) 

Please help me if you can I just don't wanna pay 2.600$ + 1.500$ as custom 
tax without knowing OS i'll use.
I just wanna practice some before getting deep into it.
BEST REGARDS great community.
FatBird.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6cc7fa16-82a0-49cc-adef-6f90475a3223%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Occasionally UI elements stop responding to mouse clicks (all AppVMs and dom0)

2017-05-26 Thread Matty South
I have a T460. I'll try to experiment a more when it happens to narrow down 
what the cause is. It is very intermittent for me (happens like once a week or 
something).


On Thursday, May 25, 2017 at 2:14:32 PM UTC-5, Vadim Kotov wrote:
> Nope, just the laptop screen.
> 
> 
> On May 25, 2017 5:49 AM, "Matty South"  wrote:
> 
> On Wednesday, May 24, 2017 at 8:54:22 PM UTC-5, koto...@gmail.com wrote:
> 
> > Hey guys,
> 
> >
> 
> > I have a rather peculiar issue. Sometimes all the UI elements stop 
> > responding to mouse clicks (or touch pad for that matter). This includes 
> > all AppVMs and dom0. E.g. I can't switch tabs in the browser or tabs in 
> > terminal emulators or just select or move windows with the mouse. I still 
> > can do all of that using keyboard, alt+tab switches between windows just 
> > fine, ctrl+pageup/pagedown switches between terminal/browser tabs, commands 
> > in bash can be executed and typed in.
> 
> >
> 
> > It starts responding to clicks again after anywhere between 1 and 5 minutes.
> 
> > This happens between one and five times a day.
> 
> >
> 
> > Could someone please point me to how do I debug this issue?
> 
> >
> 
> > Thanks!
> 
> >
> 
> > PS
> 
> > I use Qubes as my primary OS and usually have two, rarely three or four 
> > AppVMs working at the same time. I am mindful of the memory usage and am 
> > sure that it stays well within available memory. I use Lenovo ThinkPad T450 
> > with 16G of RAM of which most of the time I only use < 50%.
> 
> 
> 
> I sometimes a have similar bug. I have a suspicion it's due to the way the 
> desktop is extended for multiple monitors. Do you also have multiple 
> monitors? [trying to narrow down the root cause]

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5be503c3-e923-487b-9212-f8a581d38490%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] ERROR: Cannot execute qrexec-daemon! after completely new installation of QUBES R3.2

2017-05-26 Thread Stefan Fricke
2017-05-25 10:49 GMT+02:00 Jean-Philippe Ouellet :

> On Thu, May 25, 2017 at 4:46 AM, Jean-Philippe Ouellet  wrote:
> > On Wed, May 24, 2017 at 6:45 AM, frigge  wrote:
> >> Hi qubes-users,
> >>
> >> I installed a completely fresh installtion of QUBES R3.2 on a Lenovo
> v570 notebook and if I try to start any VM, I receive the following error:
> >>
> >> $ qvm-star sys-net
> >> --> Creating volatile image: /var/lib/qubes/servicevms/sys-
> net/volatile.img...
> >> --> Loading the VM (type = NetVM)...
> >> --> Starting Qubes DB...
> >> --> Setting Qubes DB info for the VM...
> >> --> Updating firewall rules...
> >> --> Starting the VM...
> >> --> Starting the qrexec daemon...
> >> Waiting for VM's qrexec agent...failed
> >> ERROR: Cannot execute qrexec-daemon!
> >>
> >> This behaviour is the same for every VM.
> >> Any ideas what can I do/check?
> >>
> >> If you need further information, please let me know.
> >>
> >> Thanks for your support!
> >>
> >> Best regards
> >> frigge
> >
> > Just a random hunch...
> >
> > Did you verify the installation medium (flash drive or so) before
> > installing? (Wait for the percentage to go to 100% and say disk is
> > okay?)
>
> But as for things to check, I'd check the VMs logs (right click on one
> in Qubes Manager -> Logs (at the bottom) ->
> /var/log/xen/console/.log, and see if your VM is failing to
> boot for some reason.
>

yes, I verified the install medium and it said, the disk is okay.
I also checked the /var/log/xen/console/sys-net.log, but it's empty.
But there is another log in the described menu ->
/var/log/qubes/qrexec.sys-net.log and it says:

domain dead
cannot connect to qrexec agent: No such process

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAD%2BQBER7i8B%2B6vt3ZM%2BGWToUh%3DTPiQxg9ST6V8--rwrQ0ZYTBQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Split SSH

2017-05-26 Thread henn
Thank you for the shout out! I'm glad folks have found it useful, and would 
welcome pull requests or feedback.

All except for the last pull requests have been merged (need to spend more time 
studying the last one).

Jason

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f5ddb416-324e-4920-868f-cf71091d59fa%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.