Re: [qubes-users] monthly donation alternative way

2020-05-06 Thread Sven Semmler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Wed, May 06, 2020 at 09:40:31PM +0200, qu...@ixls.eu wrote: > _But_ I don't have a credit card and it would not be easy for me to get > some bitcoins. > Isn't there another way? Paypal (don't like it of course) Qubes donations are possible via

Re: [qubes-users] How to bridge a subnet ot the firewall

2020-05-06 Thread 'Matt Drez' via qubes-users
> you are simply sniffing the wrong side of the SPS. > sniff the downstream interface(s) instead of upstream. wouldn't a tcpdump -i eth0 sniff rx tx? I see all external IPs it is reaching out but any hosts below the SPS shows as if the traffic is coming from the SPS. > this is basic linux

Re: [qubes-users] Re: Docker and Fedora 31

2020-05-06 Thread Frédéric Pierret
On 2020-05-06 20:20, Rune Philosof wrote: > On Wed, May 6, 2020 at 3:44 PM Rune Philosof > wrote: > > Also discovered an alternative solution. Switch to HVM for the appVM and > use podman instead. > > > It would be even nicer if the switch to HVM wasn't

[qubes-users] monthly donation alternative way

2020-05-06 Thread qubes
Good evening, I am not really technical. I use qubes for some time now and I really have the feeling to "get back the internet" a littly bit again. I would love to support qubes more on a monthly basis. It is totally worth it and you earn it. _But_ I don't have a credit card and it would not be

Re: [qubes-users] How to bridge a subnet ot the firewall

2020-05-06 Thread dhorf-hfref . 4a288f10
On Wed, May 06, 2020 at 06:17:58PM +, 'Matt Drez' via qubes-users wrote: > My problem is that I don't see their individual IP addresses in the > capture just a NAT'd address of SPS's eth0. I supposed I have to > create a bridge somehow but that's way beyond my skills. you are simply sniffing

Re: [qubes-users] Grub with encrypted boot

2020-05-06 Thread alex . barinov
Can you elaborate on this a bit please? Or point at some manual that could help get started with th topic? While the concept sounds familiar I don't have enough experience to build a secure boot environment from scratch - and that's what needs to be done in case of Qubes. On Wednesday, May 6,

[qubes-users] Different hardware, far nicer Qubes experience

2020-05-06 Thread Catacombs
I had been using QUBE's on a Lenovo X230, which in my opinion has a TouchPad that is difficult, and a keyboard that is not very pleasant. That one does not like an external wired mouse. Keeps disconnecting mouse. I just put QUBE's on a 2016 Alienware 15 R2, which has a Core I7 Skylake

[qubes-users] Re: HCL - Latitude E6230

2020-05-06 Thread rkd777
I am hanging at network as well...any advice appreciated On Sunday, November 17, 2019 at 9:29:35 PM UTC, cany...@gmail.com wrote: > > Mike, > > I'm just starting to attempt loading Qubes4.8 onto a Dell Latitude E6230. > It installs up to the point where it reboots onto the disk install, and

[qubes-users] Re: Qubes with limited user authority

2020-05-06 Thread mark . russels
From: mark.russ...@net-c.com To: qubes-users@googlegroups.com Subject: Qubes with limited user authority Date: 27/04/2020 20:50:03 Europe/Paris Hi there I'm relatively new to the Qubes unique environment and I'm trying to get my head around possible use of Qubes in small/medium enterprise

[qubes-users] HCL - Dell Latitude E5470 + Docking Station

2020-05-06 Thread andrew . t . sullivan
Hi Rafael Interested to see you got an SSD drive to work in the WWAN slot in your E5470. Could you tell me what drive you used, and the spec for your laptop. Am I right in thinking that you have Windows installed on one drive and Qubes on the other, and that you actually choose which drive to

Re: [qubes-users] Removing Template VMs?

2020-05-06 Thread viktor . ransmayr
Am Dienstag, 5. Mai 2020 20:39:52 UTC+2 schrieb viktor@gmail.com: > Am Montag, 4. Mai 2020 22:25:13 UTC+2 schrieb dhorf-hfr...@hashmail.org: >> >> On Mon, May 04, 2020 at 12:28:27PM -0700, viktor@gmail.com wrote: >> > If I'd like to remove any old & **unused** Template VMs (e.g. Debian

[qubes-users] Grub with encrypted boot

2020-05-06 Thread lamboicarus via qubes-users
Hello all, I am wondering if anyone knows how I might install grub for use with an encrypted boot partition, or no boot partition at all. I have recently decided to use btrfs, and I have grub working fine. The grub2-efi config from the qubes-dom0-unstable repo is working fine, but it's very

Re: [qubes-users] Re: Password not working a day after reinstall

2020-05-06 Thread Anil
Today I am not able to connect to VPN at all. I tried configurations for three countries, have set the DNS to Mullvad DNS. Connects to Internet, but does connect to VPN. Even for normal Internet, I had to change the DNS. This DNS thing also has become a regular problem. Every I have to change DNS

Re: Antw: [EXT] [qubes-users] Re: Erste deutsche Rezension von Qubes OS auf Youtube

2020-05-06 Thread Mark Fernandes
APOLOGIES FOR GOING OFF TOPIC SOMEWHAT. SHOULD WE MOVE THIS DISCUSSION TO A DIFFERENT THREAD? On Tuesday, 5 May 2020 21:12:43 UTC+1, Anil wrote: > > > In usage, the words security and privacy are often assumed to be > synonymous. This is wrong by a wide margin. They are, in fact, quite >

Re: [qubes-users] Salt worm

2020-05-06 Thread haaber
Qubes uses Salt, and there's something nasty going around: https://saltexploit.com/ Risk = (probability of an event) x (consequences of the event). At which levels is salt used in qubes? I remember my last "active" use >1 year ago to get hopefully clean templates after the apt-"crisis".

Re: [qubes-users] Grub with encrypted boot

2020-05-06 Thread dhorf-hfref . 4a288f10
On Wed, May 06, 2020 at 06:21:00AM +, lamboicarus via qubes-users wrote: > I am wondering if anyone knows how I might install grub for use with > an encrypted boot partition, or no boot partition at all. I have > recently decided to use btrfs, and I have grub working fine. The > grub2-efi

Re: [qubes-users] Salt worm

2020-05-06 Thread taran1s
haaber: >> Qubes uses Salt, and there's something nasty going around: >> https://saltexploit.com/ > >    Risk = (probability of an event)  x   (consequences of the event). > > At which levels is salt used in qubes? I remember my last "active" use >>1 year ago to get hopefully clean templates

Re: [qubes-users] Salt worm

2020-05-06 Thread dhorf-hfref . 4a288f10
sm1> Qubes uses Salt, and there's something nasty going around: sm1> https://saltexploit.com/ sm2> to be used "by hand only" we could enforce risk = 0 by the above formula sm2> and keeping fingers off salt for a while. Thanks! sm3> There was today an update for all templates related to the

Re: [qubes-users] Salt worm

2020-05-06 Thread haaber
did any of you actually bother to look at the problem? because i am 99% sure this doesnt apply to qubes. at all. (also you are several days late on this...) this seems to be the original source and contains a fairly good writeup:

Re: [qubes-users] Salt worm

2020-05-06 Thread dhorf-hfref . 4a288f10
On Wed, May 06, 2020 at 12:02:55PM +0200, haaber wrote: > > https://labs.f-secure.com/advisories/saltstack-authorization-bypass > Thanks for the source. How do you infer that this "doesn't apply" (and > maybe "did never apply") to qubes? Recall my question: where does salt the vulnerabilities

Re: [qubes-users] Re: disp-vm whonix torbrowser open tabs file?

2020-05-06 Thread list . wget
On Monday, May 4, 2020 at 11:15:04 AM UTC, Mike Keehan wrote: > > On 5/4/20 7:35 AM, list...@gmail.com wrote: > > Actually, I guess it would be fine if there would be a procedure with > which > > I can close down the disposable browser without the disp-vm > automatically > > closing. > >

Re: [qubes-users] Re: Password not working a day after reinstall

2020-05-06 Thread Catacombs
Perhaps your internet connection. Your problems remind me of my brother in the days of telephone connection and his cat thinking the telephone wire was a great plaything. And clawed wires up. Hope you find the money to buy another computer. -- You received this message because you are

[qubes-users] Re: disp vm template not working in fedora 31

2020-05-06 Thread Catacombs
On Monday, May 4, 2020 at 12:13:55 PM UTC-4, galth...@gmail.com wrote: > > Hello, I hope someone can help with this. > > I have a modified fedora 31 template which I want to use as a disposable > VM. > > I have done this: > > Created a app vm called my-dvm based on my-f31-template using the

Re: [qubes-users] Re: disp-vm whonix torbrowser open tabs file?

2020-05-06 Thread list . wget
On Monday, May 4, 2020 at 12:18:35 PM UTC, Catacombs wrote: > > > ”l have a whonix disposable tor browser whonix vm running with a load of > tabs open, maybe 30 but I can't check the precise amount because the tabs > don't scroll anymore. “ > > > Consider creating a clone of Whonix Template

[qubes-users] Privacy, security, comfort, and Qubes OS

2020-05-06 Thread Mark Fernandes
CONTINUATION FROM GOING OFF TOPIC @ https://groups.google.com/d/msg/qubes-users/hv-meif5_tU/bsNbb8PxAQAJ > > Here in the UK, we have a pretty effective democracy where different > groups (including the general public) can lobby the government. . ... > I don't want to say much on this, but

Re: [qubes-users] Re: Password not working a day after reinstall

2020-05-06 Thread Anil
It turned out that the password was set to something other than the m that Mullvad used. I definitely didn't change it. I remember from earlier when I had read discussion on this list about Mullvad that the password is m, which not easy to forget. Even after I added two more countries today, I had

Re: [EXT] Re: [qubes-users] Re: disp-vm whonix torbrowser open tabs file?

2020-05-06 Thread list . wget
On Monday, May 4, 2020 at 7:57:14 PM UTC, Ulrich Windl wrote: > > >>> Catacombs > schrieb am 04.05.2020 um > 14:18 in Nachricht > <24740_1588594718_5EB0081D_24740_209_1_e4ab08ee-0ed4-4089-9427-86850a35c9ea@goog > > > egroups.com>: > > > ”l have a whonix disposable tor browser whonix vm

Re: Antw: [EXT] [qubes-users] Re: Erste deutsche Rezension von Qubes OS auf Youtube

2020-05-06 Thread Anil
> APOLOGIES FOR GOING OFF TOPIC SOMEWHAT. SHOULD WE MOVE THIS DISCUSSION TO A > DIFFERENT THREAD? Perhaps we should, but this seems to be as good a forum as any other. > privacy. But for me, and probably many others, this rates fairly low in my > mind. What is more important, is security:

Re: [qubes-users] Salt worm

2020-05-06 Thread unman
On Wed, May 06, 2020 at 01:35:06PM +0200, dhorf-hfref.4a288...@hashmail.org wrote: > On Wed, May 06, 2020 at 12:02:55PM +0200, haaber wrote: > > > https://labs.f-secure.com/advisories/saltstack-authorization-bypass > > > Thanks for the source. How do you infer that this "doesn't apply" (and > >

Re: [qubes-users] Re: disp-vm whonix torbrowser open tabs file?

2020-05-06 Thread list . wget
On Monday, May 4, 2020 at 11:32:43 AM UTC, unman wrote: > > On Sun, May 03, 2020 at 11:35:21PM -0700, list...@gmail.com > wrote: > > Actually, I guess it would be fine if there would be a procedure with > which > > I can close down the disposable browser without the disp-vm > automatically

Re: [qubes-users] Re: disp-vm whonix torbrowser open tabs file?

2020-05-06 Thread list . wget
On Monday, May 4, 2020 at 11:32:43 AM UTC, unman wrote: > > On Sun, May 03, 2020 at 11:35:21PM -0700, list...@gmail.com > wrote: > > Actually, I guess it would be fine if there would be a procedure with > which > > I can close down the disposable browser without the disp-vm > automatically

[qubes-users] Re: Docker and Fedora 31

2020-05-06 Thread Rune Philosof
mandag den 13. april 2020 kl. 10.05.00 UTC+2 skrev Frédéric Pierret: > > qvm-prefs --set work-docker kernelopts 'nopat > systemd.unified_cgroup_hierarchy=0' > > I wish I had been able to find this using duckduckgo.com when I searched for "qubes fedora 31 docker". But I eventually

Re: [qubes-users] Re: Password not working a day after reinstall

2020-05-06 Thread donovang
- On May 6, 2020, at 7:03 AM, Anil anilekla...@gmail.com wrote: > It turned out that the password was set to something other than the m > that Mullvad used. I definitely didn't change it. I remember from > earlier when I had read discussion on this list about Mullvad that the > password is

Re: [qubes-users] Re: Docker and Fedora 31

2020-05-06 Thread Rune Philosof
On Wed, May 6, 2020 at 3:44 PM Rune Philosof wrote: > Also discovered an alternative solution. Switch to HVM for the appVM and > use podman instead. > It would be even nicer if the switch to HVM wasn't necessary. But that would require at least kernel 5.2 (

[qubes-users] How to bridge a subnet ot the firewall

2020-05-06 Thread 'Matt Drez' via qubes-users
Hey guys, My setup is sys-net <--> firewall <--> Special Purpose Server (SPS) <--> open subnet of qubes I setup the SPS to capture and analyze traffic. When I created the VM I marked "provides networking" so any other VM behind can connect to it and can get out to the internet. My problem is